Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RneF9n_b3Tc39Y8i1UjBB2snek8.roa
File:                     RneF9n_b3Tc39Y8i1UjBB2snek8.roa (raw, json)
Hash identifier:          WzO5csNixYwTNgLAKkIsYjl864CoMCFUH1QYszWkDgQ=
Subject key identifier:   46:77:85:F6:7F:DB:DD:37:37:F5:8F:22:D5:48:C1:07:6B:27:7A:4F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       017A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RneF9n_b3Tc39Y8i1UjBB2snek8.roa
Signing time:             Thu 01 Dec 2022 01:28:33 +0000
ROA not before:           Thu 01 Dec 2022 01:28:33 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        182.48.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:33 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=467785F67FDBDD3737F58F22D548C1076B277A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:68:5f:1c:cb:e0:79:64:c4:33:d7:20:7d:
                    08:59:ce:38:60:1f:c9:93:2d:c7:72:20:2d:16:d2:
                    a6:fe:70:b0:7f:38:7a:eb:74:c2:b4:6e:36:c9:09:
                    87:6b:7e:fe:2f:32:cb:92:07:f1:21:db:c9:ff:7a:
                    cb:03:06:f9:74:73:95:49:c4:0c:ef:51:7d:1e:d6:
                    e2:ef:8d:dc:2c:4a:a4:da:db:45:ee:81:c1:ce:33:
                    cf:25:59:9e:b4:43:f7:b6:2b:9d:2f:f6:3d:89:c9:
                    ef:07:64:bd:5a:fa:2a:4b:11:52:07:be:78:12:62:
                    9f:2f:1d:16:09:31:42:46:b3:c8:96:f1:4a:6d:2a:
                    27:a9:27:1b:e3:f2:b4:48:9c:1c:c9:ff:0b:8d:9b:
                    da:11:13:04:78:14:ca:1c:f1:1a:54:08:a0:b6:ae:
                    b3:e5:a0:c6:0f:dc:13:58:8d:28:fa:cb:7a:7f:bb:
                    17:da:99:28:c7:f4:c5:a8:cb:ab:1c:3a:31:64:05:
                    1f:16:6a:8d:9a:e3:a2:d7:41:53:20:71:88:8a:97:
                    73:95:79:c8:27:98:0a:9e:d5:09:da:87:a4:c0:77:
                    e9:3d:1a:90:7a:bd:28:3c:37:63:90:71:13:02:51:
                    22:e0:48:75:8b:fb:3e:e0:98:6f:bf:a1:40:eb:4a:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:77:85:F6:7F:DB:DD:37:37:F5:8F:22:D5:48:C1:07:6B:27:7A:4F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RneF9n_b3Tc39Y8i1UjBB2snek8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:44:00:de:86:8a:86:9e:d2:ea:e7:fc:d7:86:90:4d:82:
         de:a3:94:cb:48:f8:21:33:34:26:a3:92:0d:b5:38:f6:ef:c9:
         79:75:17:c1:53:fe:94:64:3a:23:fc:a7:a2:76:8a:b0:b7:6f:
         59:a7:80:de:52:42:9e:02:6b:2a:2b:1e:48:0a:b3:02:ca:dc:
         36:74:4c:90:06:46:aa:1b:71:29:97:3d:26:f0:4f:57:94:5f:
         8c:f1:f3:52:a6:c7:3d:fa:ce:2b:0d:04:37:f4:90:07:1c:a5:
         7a:f0:58:05:60:24:55:48:55:8b:d9:a6:b5:d3:8d:1d:97:68:
         96:04:18:30:a9:5c:a4:9b:3e:f8:5c:fd:2e:86:74:b6:02:d6:
         4f:73:89:ed:23:4f:2e:e0:c1:b0:06:10:b9:51:5d:8d:d8:7e:
         8b:5c:c7:26:3e:78:ca:55:f5:45:32:52:93:67:f5:be:6a:c7:
         04:3f:3d:08:cf:64:81:f2:2a:e6:d1:46:d4:fe:51:be:31:e6:
         a0:0a:18:fd:c7:2f:93:1e:24:cb:45:cb:ae:fa:59:93:b2:87:
         0c:c8:01:71:05:5f:d5:db:b6:66:c0:33:78:3c:17:5e:3a:d0:
         29:d8:8d:a9:e8:26:37:8f:d4:b9:ba:fd:63:29:a2:5f:f8:3a:
         95:13:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org