Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/I4UbRPpUcnbX6uy1mWOpSS8Od20.roa
File:                     I4UbRPpUcnbX6uy1mWOpSS8Od20.roa (raw, json)
Hash identifier:          oZW3eGKlvN26pHK7PA6t1AhrwEymoqW+FxP+Mv1dmn8=
Subject key identifier:   23:85:1B:44:FA:54:72:76:D7:EA:EC:B5:99:63:A9:49:2F:0E:77:6D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0145
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/I4UbRPpUcnbX6uy1mWOpSS8Od20.roa
Signing time:             Thu 01 Sep 2022 01:28:29 +0000
ROA not before:           Thu 01 Sep 2022 01:28:29 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     131965
IP address blocks:        219.94.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:29 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=23851B44FA547276D7EAECB59963A9492F0E776D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:50:bf:c4:a5:e2:5d:ef:fc:63:db:d4:f9:
                    97:39:81:4e:c7:03:37:46:02:27:e2:22:af:35:1c:
                    63:10:47:f4:44:7c:bd:b7:f9:13:cf:84:ae:58:22:
                    45:f1:32:16:ac:c2:30:dd:fb:cd:a9:02:aa:b1:09:
                    58:f4:97:34:e0:7f:82:b7:53:de:0a:61:b9:ca:72:
                    01:ff:64:cb:bf:ba:61:2b:d9:32:db:4b:bd:1c:97:
                    a0:7e:5a:48:3c:1f:fb:70:b3:7b:77:59:32:98:c0:
                    a5:5a:7c:12:ea:f9:ed:ba:26:c9:a7:54:88:2a:19:
                    b3:39:fd:11:5c:37:aa:00:13:5b:d8:b7:b9:7f:5b:
                    d2:f1:13:c4:79:09:9f:c3:2e:2c:e6:1a:e8:84:70:
                    a6:05:7f:93:2d:9a:bb:83:d7:a2:a9:1d:f6:b3:fe:
                    ad:7f:b1:63:1c:b6:87:a1:3e:bc:cb:9a:0e:92:bf:
                    2a:77:1e:40:9d:2c:2a:38:4e:74:39:d0:ab:2d:fb:
                    31:24:12:6c:90:bc:ab:ed:5b:77:6b:63:09:b6:da:
                    c5:34:ae:61:93:1e:ba:98:a5:2b:13:4d:a7:d8:89:
                    a7:7a:4f:ac:e9:01:57:a9:5a:79:23:a3:70:b2:fd:
                    e9:3c:51:7d:bc:66:20:91:be:f8:48:ce:cd:e5:db:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:85:1B:44:FA:54:72:76:D7:EA:EC:B5:99:63:A9:49:2F:0E:77:6D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/I4UbRPpUcnbX6uy1mWOpSS8Od20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:b3:55:e4:e8:97:a8:ec:fa:dc:86:f2:de:cf:7d:d1:a6:
         e3:a6:7d:93:5a:40:d7:4d:f1:a8:2e:f2:50:8a:bd:ec:e4:7c:
         dc:85:62:72:dc:da:ae:b4:3d:02:17:2b:82:5d:29:e0:c9:30:
         0e:14:cb:98:89:af:63:f1:f6:8d:95:67:16:36:60:82:c5:41:
         7a:66:04:e4:9f:d0:47:e5:81:5c:b4:75:62:93:9e:fe:4c:b4:
         d7:c9:17:f4:8e:92:43:c7:c9:8f:da:18:18:a3:63:25:4b:d3:
         e0:b6:c7:aa:8c:9b:cd:9c:c5:18:36:f2:db:09:63:70:70:f4:
         c9:6b:da:00:a8:7c:e0:19:8d:ee:75:64:48:49:b8:9d:26:cc:
         48:37:77:77:af:1b:d7:9a:6e:9a:e5:6a:26:c7:4e:28:bd:f6:
         a7:83:03:aa:c4:5c:1e:88:5d:48:4d:7a:d1:bf:f0:4b:82:6e:
         09:ed:70:ae:b7:e0:be:ca:0c:bd:ee:e7:43:03:89:d6:03:1b:
         67:4a:95:69:0c:07:45:14:4a:f5:c4:5c:83:3e:0f:55:fa:c6:
         4a:98:dd:62:27:bb:5a:a8:bd:8a:32:bc:39:d4:27:b1:48:7a:
         66:8d:d4:96:f8:54:fc:19:c5:d0:8b:4f:ee:15:e0:bc:c9:58:
         06:31:4c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org