Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6YnJ2_joVXuBMCqwtx0JODv1bzk.roa
File:                     6YnJ2_joVXuBMCqwtx0JODv1bzk.roa (raw, json)
Hash identifier:          sN3vEzz408shs+Utry0vV4+NlCzJ4Murpvxf6HOKBls=
Subject key identifier:   E9:89:C9:DB:F8:E8:55:7B:81:30:2A:B0:B7:1D:09:38:3B:F5:6F:39
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0107
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6YnJ2_joVXuBMCqwtx0JODv1bzk.roa
Signing time:             Sat 01 Jan 2022 01:31:17 +0000
ROA not before:           Sat 01 Jan 2022 01:31:17 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:17 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=E989C9DBF8E8557B81302AB0B71D09383BF56F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:15:5e:e5:bf:c9:d1:8f:e6:f6:c5:2c:ae:
                    46:ba:af:cb:d9:fe:a0:0a:e6:8e:ad:a1:d6:69:fb:
                    03:8e:fe:38:8b:8b:69:69:a7:c2:13:10:52:cc:52:
                    0e:3e:89:aa:df:ef:e4:e1:c3:64:5a:7e:61:de:7c:
                    9c:e7:df:c0:fc:3b:62:4b:af:c5:ff:85:1b:b0:ce:
                    ae:20:fb:aa:fe:f8:50:8f:16:45:f4:5c:73:5b:fd:
                    ea:35:7d:dc:ac:eb:03:cb:26:11:ac:a1:c5:95:83:
                    74:66:f9:bc:e8:6a:85:10:ad:23:dd:4d:c1:73:8d:
                    aa:b0:49:ae:61:35:0e:a5:c6:6e:6c:7f:f1:7a:14:
                    3d:6e:05:29:37:c7:3b:13:a9:75:08:c1:ae:0b:ec:
                    f9:c0:28:15:10:59:a3:eb:86:87:74:ec:37:88:c5:
                    dd:a3:21:13:8b:a9:d9:57:89:30:0e:94:6c:a6:c4:
                    55:50:ce:08:5c:6d:23:1f:96:cc:8e:59:05:a1:f4:
                    2d:0d:af:72:e8:2e:5e:67:15:fd:20:f2:e7:a7:84:
                    ee:67:00:ed:a3:ed:06:18:a2:56:9a:3c:e0:cc:2d:
                    41:0d:e3:e6:0b:e3:d3:9b:89:bb:fb:54:a6:b7:f6:
                    4b:33:38:bc:4d:13:84:4f:12:aa:2e:af:79:a8:79:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:89:C9:DB:F8:E8:55:7B:81:30:2A:B0:B7:1D:09:38:3B:F5:6F:39
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6YnJ2_joVXuBMCqwtx0JODv1bzk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:5a:30:de:92:1e:bb:a0:06:08:ff:b8:78:0c:69:4f:fe:
         af:3c:65:33:e1:c9:bc:23:63:0d:b3:27:01:93:97:f4:d4:ae:
         4c:f5:ac:f6:6a:57:28:90:ca:b5:9c:7e:97:91:e3:47:76:2d:
         38:4c:5b:64:45:4c:4d:18:b8:0e:bb:b6:a3:70:aa:fb:36:79:
         86:8c:66:45:3c:9b:f3:69:fa:c8:24:ce:45:d4:aa:bf:df:4a:
         d1:34:c4:33:9b:91:2a:46:66:05:e3:8e:05:c0:80:7a:af:98:
         1b:31:eb:6c:be:83:c0:2f:33:ae:2b:8d:10:23:a9:19:5e:e1:
         4b:15:b8:25:6a:9b:06:72:72:d4:1a:4f:92:07:b7:a4:bd:9c:
         4f:ae:e1:e9:82:cd:68:c7:04:16:ea:49:52:40:5f:85:19:e9:
         e5:22:5e:d0:b5:83:c4:e6:10:14:da:8d:dd:4a:2e:74:39:48:
         11:fd:61:ba:92:b4:68:89:fe:ba:0e:83:93:64:5a:6d:5d:c2:
         17:7a:6b:88:e5:25:83:4d:51:77:8f:e9:d4:d4:ab:5c:ab:66:
         33:68:33:c0:ee:c6:eb:8a:fd:58:de:a6:9d:75:f3:52:f9:af:
         ea:de:11:87:96:ac:cf:b6:b5:8b:7f:4d:df:d9:7e:1d:3a:c9:
         9b:f8:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org