Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1oAsd3nB678t4-7WFMZCt1R5HRM.roa
File:                     1oAsd3nB678t4-7WFMZCt1R5HRM.roa (raw, json)
Hash identifier:          hSU9qkv7/LD/6m+N3BVSuuXPQHw3G6I4hLUcDp7SUlQ=
Subject key identifier:   D6:80:2C:77:79:C1:EB:BF:2D:E3:EE:D6:14:C6:42:B7:54:79:1D:13
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0183
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1oAsd3nB678t4-7WFMZCt1R5HRM.roa
Signing time:             Thu 01 Dec 2022 01:29:27 +0000
ROA not before:           Thu 01 Dec 2022 01:29:27 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:29:27 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=D6802C7779C1EBBF2DE3EED614C642B754791D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:a3:fb:6e:b6:71:8d:06:93:e4:30:54:2b:
                    ba:d8:b8:d4:2c:4d:23:c7:77:98:fd:3f:0a:be:82:
                    64:9b:87:a4:d0:c6:ed:35:38:97:18:95:fc:94:c0:
                    f0:8f:49:e9:aa:46:9e:b9:76:1f:6c:cc:b2:32:95:
                    8c:e1:5a:57:e2:8c:f0:75:6a:f1:ca:54:37:40:4e:
                    a0:e9:ac:90:61:23:87:16:64:68:15:05:37:81:b1:
                    70:fe:ef:18:e8:66:3b:20:a8:3f:12:04:48:16:5b:
                    af:e2:3c:1b:8e:2e:6d:a1:fa:db:ed:ea:75:96:a5:
                    07:8d:90:5b:a8:b7:1f:44:8c:b0:a1:1e:3e:fe:06:
                    03:b5:d7:10:e2:17:22:f2:15:ef:4c:54:b7:6b:d5:
                    d9:b7:16:2a:d0:8e:52:f2:c9:ce:9c:e8:6a:05:90:
                    e1:c4:68:b5:de:20:3c:e8:c2:0d:42:4d:9e:bd:ca:
                    eb:4f:65:be:08:1c:2c:55:77:9f:19:7e:85:fa:9e:
                    64:82:48:84:a7:5e:a5:13:ba:b0:3e:72:0f:70:a4:
                    c9:2c:e2:7c:04:eb:77:df:1f:ae:1f:84:c6:a2:bd:
                    16:7a:b4:88:a4:d8:44:93:50:3d:50:4e:20:a4:f7:
                    11:9b:de:f6:39:57:fb:e2:f3:56:44:fe:b1:4f:41:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:80:2C:77:79:C1:EB:BF:2D:E3:EE:D6:14:C6:42:B7:54:79:1D:13
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1oAsd3nB678t4-7WFMZCt1R5HRM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:93:62:e1:26:a8:72:81:b3:09:5c:04:76:7f:e1:3f:a9:0a:
         83:4c:be:20:6e:60:d9:6a:d6:40:68:f2:ec:c5:b5:13:67:f5:
         0c:6d:2f:03:71:1f:88:cf:4c:87:08:e0:2d:97:e9:0e:c4:2a:
         c0:17:bd:1a:e1:f6:48:64:62:81:be:1b:1c:24:06:35:08:97:
         c2:3e:60:b5:ad:c2:19:6d:0f:0f:1e:d8:bc:98:a3:29:6b:0f:
         dc:7b:4e:31:d3:fa:b3:18:28:a0:47:72:ab:15:ad:51:df:38:
         01:19:57:f8:7f:1d:2e:05:25:37:4c:1b:85:a1:3d:67:39:80:
         ca:cc:a3:9a:28:7b:33:36:32:49:ec:07:2f:a1:c2:6e:f0:d1:
         1e:ae:45:ee:81:a6:ef:3b:18:13:a9:ea:b2:66:61:1b:cc:68:
         94:05:1d:d5:76:82:d3:c8:40:3b:5b:0a:56:b2:ea:23:03:c8:
         97:82:23:b2:22:31:f8:b3:c0:f8:8f:76:f5:69:6c:6d:3c:2f:
         d1:ef:79:fc:a6:03:e9:f1:cf:63:ec:87:09:1c:a7:2b:65:73:
         e0:06:74:d2:bb:ae:9a:a8:fd:2d:1a:f4:63:46:b6:94:4a:a2:
         31:f2:aa:55:82:0c:45:9d:cd:bb:f8:9f:d1:db:e5:3e:8a:65:
         79:9c:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org