Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/W6nYhBCtO6r8KzsUfV-BH7F-1Ws.roa
File:                     W6nYhBCtO6r8KzsUfV-BH7F-1Ws.roa (raw, json)
Hash identifier:          rlldr41Esf4L4u38eRDjZy9mu9KUKHNNt/CRempDp1s=
Subject key identifier:   5B:A9:D8:84:10:AD:3B:AA:FC:2B:3B:14:7D:5F:81:1F:B1:7E:D5:6B
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       E6
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/W6nYhBCtO6r8KzsUfV-BH7F-1Ws.roa
Signing time:             Wed 22 Sep 2021 06:34:02 +0000
ROA not before:           Wed 22 Sep 2021 06:34:02 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     131965
IP address blocks:        219.94.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 22 06:34:02 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=5BA9D88410AD3BAAFC2B3B147D5F811FB17ED56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:6e:c5:16:51:55:35:e6:1a:37:38:3d:18:
                    c7:33:44:1a:39:54:06:a8:09:c0:da:d7:f7:ee:5b:
                    e7:d0:fd:c5:b3:6b:7b:c5:70:a2:ef:42:cc:91:61:
                    5c:43:78:dd:9f:39:87:1f:0b:49:24:9d:1a:9f:70:
                    c3:64:81:4c:2a:d1:e4:4d:f1:3a:da:92:a6:88:6f:
                    9b:4f:25:7e:a3:2c:f0:e2:5a:09:1e:95:a1:4b:c4:
                    b3:55:1e:82:5b:5a:51:c1:23:3a:86:f9:54:93:49:
                    59:e3:ee:60:6a:6e:11:3e:a2:ee:44:09:53:69:bc:
                    48:de:7b:c3:c8:ab:4e:75:74:b0:51:5d:70:e2:04:
                    c0:01:37:bb:2c:c0:7e:56:0b:ef:8c:44:3d:56:08:
                    8e:68:1c:df:9d:1c:df:4a:b7:f2:0a:08:4c:95:b1:
                    3e:a6:0e:17:6f:f4:37:91:70:15:cc:35:a1:cb:64:
                    a6:ce:59:31:6e:bd:6f:35:37:0f:ca:f7:ff:29:30:
                    65:2e:2f:1e:32:6a:9d:c4:78:c5:dc:f9:37:3e:be:
                    a1:d7:7b:e3:9c:b5:d3:b9:9a:7e:f3:21:32:8a:54:
                    da:1f:8f:d2:4e:62:f2:62:b6:f5:1b:64:54:70:cd:
                    8f:20:18:6b:e7:d5:83:ee:28:71:6d:01:bb:ce:a0:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A9:D8:84:10:AD:3B:AA:FC:2B:3B:14:7D:5F:81:1F:B1:7E:D5:6B
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/W6nYhBCtO6r8KzsUfV-BH7F-1Ws.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:b8:49:4f:2d:fe:fc:ad:84:21:56:90:be:01:7e:6b:e7:
         32:61:29:98:a2:88:73:bc:e1:9e:34:d0:a1:0c:b0:ea:8e:ce:
         61:53:a6:a8:e8:18:74:43:36:b0:d8:45:05:18:9b:e1:a9:e1:
         02:4c:7d:e7:0e:4d:f4:9e:cf:3f:3b:a0:2b:db:da:76:43:8f:
         5f:b8:57:8a:5b:49:a2:b4:83:56:11:ef:58:93:9a:5f:b7:38:
         95:1f:75:91:08:5d:ad:0f:a3:8f:e4:80:c2:55:a6:d1:4a:d0:
         45:a3:1b:63:1a:91:ac:7a:f1:91:97:3e:4d:69:41:88:a8:fc:
         8d:68:d8:41:a1:8a:7c:1e:f6:79:6a:02:e7:e4:36:37:b9:7f:
         da:83:be:c4:54:9c:24:e6:cc:75:5c:a8:95:0f:bd:81:34:79:
         9e:88:42:30:23:f7:11:9c:0d:84:74:e7:50:55:3d:65:99:44:
         f2:3e:6c:36:37:ff:bf:85:6b:66:77:22:f3:63:5f:43:23:be:
         b3:43:7c:a8:eb:be:07:ad:ba:c6:17:40:cc:61:97:2f:b3:11:
         f8:59:7a:bd:d1:17:cd:0f:70:b9:d6:71:c5:4d:98:72:ad:18:
         6c:de:52:cf:83:4a:58:09:4a:3f:07:d5:a0:61:cc:de:25:f1:
         28:29:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org