Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4gPtWT2NxG2Yl7XIxDeK3EABkq0.roa
File:                     4gPtWT2NxG2Yl7XIxDeK3EABkq0.roa (raw, json)
Hash identifier:          CVMoOm4fvLv3K2LBh4NYJx1Rc+ge/EY2d9zrXOgfyqY=
Subject key identifier:   E2:03:ED:59:3D:8D:C4:6D:98:97:B5:C8:C4:37:8A:DC:40:01:92:AD
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0122
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4gPtWT2NxG2Yl7XIxDeK3EABkq0.roa
Signing time:             Sat 01 Jan 2022 01:31:27 +0000
ROA not before:           Sat 01 Jan 2022 01:31:27 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:27 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=E203ED593D8DC46D9897B5C8C4378ADC400192AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:29:e3:f1:51:f0:cd:06:ad:c5:2f:66:31:
                    47:2d:8e:d4:c7:1a:3f:57:a2:33:30:ff:d7:00:92:
                    97:c0:71:4f:0a:23:98:fc:16:e5:08:76:4d:9f:b0:
                    ec:2d:a4:5c:d7:b1:55:d6:fa:28:af:13:bc:5f:f8:
                    b9:dd:ce:8e:90:0e:9c:48:1f:9e:35:b9:9b:e4:6d:
                    c8:8a:d3:05:3c:36:a9:cc:2e:51:33:2a:ec:c4:38:
                    cd:65:63:68:39:fd:b3:69:bd:3d:27:55:66:37:09:
                    a3:3a:29:f6:ad:e6:85:d4:92:65:b4:86:35:4a:b5:
                    ce:2e:16:bc:fa:94:58:82:68:0d:9f:91:4c:a1:05:
                    23:ec:cd:5e:66:a8:a2:9c:ea:ff:52:7a:34:dd:28:
                    fb:92:67:3f:34:ec:63:32:16:75:69:35:43:20:8f:
                    6e:b6:18:7c:6c:da:3e:92:4b:c2:00:d3:5c:cc:da:
                    74:91:54:ee:4d:6a:17:b9:fe:fa:85:a4:e0:30:c9:
                    10:02:75:fc:9f:47:17:05:5c:cf:87:5f:5e:16:92:
                    d4:cf:53:fd:70:03:07:ad:ba:43:b6:c1:83:1d:73:
                    ad:70:65:4d:6b:16:6c:6f:e9:8a:f7:7f:0d:b2:fb:
                    1d:18:94:dc:a6:ef:13:3f:c8:fc:8d:40:b0:04:ca:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:03:ED:59:3D:8D:C4:6D:98:97:B5:C8:C4:37:8A:DC:40:01:92:AD
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4gPtWT2NxG2Yl7XIxDeK3EABkq0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:87:10:88:2b:3d:04:03:f3:47:fe:02:a4:79:1e:41:54:5f:
         21:ba:a7:de:7c:2e:06:ab:f1:4f:e1:b9:03:9d:ac:54:6d:6f:
         45:01:f6:18:3f:b0:10:7b:f2:ed:5b:83:ee:18:df:0b:04:a3:
         a3:e5:01:57:4b:86:70:71:78:5d:2a:af:e9:c3:19:94:4b:c1:
         bb:d4:7e:8d:59:f1:0a:a4:42:35:42:08:41:60:08:c3:2b:ed:
         12:bd:d2:0e:09:ea:5a:9a:4c:de:e8:35:5c:9a:63:a2:b4:18:
         ad:33:5c:b0:c4:4a:3e:8b:8b:44:f3:fe:61:e6:d9:3d:a0:87:
         4a:12:74:2e:a1:7c:53:f7:ad:44:c2:53:02:8b:95:d5:b4:5e:
         f2:52:8a:8b:d4:c4:6d:9c:2c:0d:b4:d1:9d:23:f6:74:e6:54:
         15:92:d6:99:7a:d6:ce:18:a4:e1:75:87:6c:33:81:7d:2c:77:
         54:bb:f5:ff:9a:64:c2:bc:1f:d7:99:80:7b:d0:e2:6e:02:00:
         a1:18:c0:01:1f:7f:cb:a8:39:e9:0b:a0:f7:74:ff:7d:f3:03:
         36:6f:ec:d9:bc:07:7e:76:8d:6a:9c:20:d9:8c:7d:8a:12:ea:
         cf:f0:46:93:56:3c:01:c2:d4:ab:3c:c8:86:a9:d1:4c:f4:e9:
         6e:39:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org