Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WYjZVDS6xx8z-ZHHkgzmWN0HxUU.roa
File:                     WYjZVDS6xx8z-ZHHkgzmWN0HxUU.roa (raw, json)
Hash identifier:          zaS12fZS2wLrG+94ojrB3nHN39MRixqhB+Ehw3CluSw=
Subject key identifier:   59:88:D9:54:34:BA:C7:1F:33:F9:91:C7:92:0C:E6:58:DD:07:C5:45
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       F9
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WYjZVDS6xx8z-ZHHkgzmWN0HxUU.roa
Signing time:             Sat 01 Jan 2022 01:31:13 +0000
ROA not before:           Sat 01 Jan 2022 01:31:13 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:13 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=5988D95434BAC71F33F991C7920CE658DD07C545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:62:b8:07:7e:79:9a:5d:83:28:94:d3:83:
                    39:0a:f0:46:bb:c2:c4:3a:5e:7d:12:54:9b:8c:d4:
                    6c:37:20:80:59:e1:ba:a3:c1:85:71:78:77:34:6d:
                    be:69:47:17:ae:a7:a5:62:e9:bb:6e:a8:62:12:26:
                    64:ec:b5:90:81:4f:bf:9c:da:32:d4:0f:ca:c3:cb:
                    70:ea:83:d9:ee:43:8e:7d:50:40:92:78:39:f3:58:
                    c1:e5:ec:65:8b:00:ec:22:3c:bc:14:96:3c:9c:ff:
                    5d:dc:b5:cc:da:52:77:a7:b6:f6:e6:92:2f:d1:2f:
                    a4:a1:98:ce:7f:47:53:10:23:1f:c4:de:56:e2:f4:
                    ca:d0:15:a4:16:e1:7e:b8:7e:cf:e3:87:6f:e1:6a:
                    a3:9d:19:64:12:ca:d2:2a:1d:ba:60:cd:bb:c7:59:
                    ce:c7:4a:aa:95:00:cb:7e:90:2f:44:af:d7:aa:3f:
                    e4:89:f1:8c:d4:35:9f:3b:d3:35:8d:3a:31:28:68:
                    1d:a8:4c:59:c2:68:f7:80:50:0c:9e:97:55:0e:53:
                    38:a6:5b:19:8c:a9:6f:b8:40:85:9b:aa:97:31:72:
                    46:b2:58:b6:f0:6f:8c:14:fe:92:59:aa:1a:1a:a0:
                    11:12:b2:59:45:b3:eb:26:9c:c8:ae:38:63:3d:ca:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:D9:54:34:BA:C7:1F:33:F9:91:C7:92:0C:E6:58:DD:07:C5:45
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WYjZVDS6xx8z-ZHHkgzmWN0HxUU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:28:a9:a8:ee:35:0d:4f:5a:68:f2:44:93:2b:b8:2b:2c:53:
         2a:ee:f6:d3:c2:31:67:12:63:22:b3:82:df:1c:75:be:3a:48:
         ac:dc:5e:5d:1e:7e:e8:28:3e:14:e1:3c:d5:99:6c:50:ff:57:
         7b:bc:8c:7a:bc:c2:a2:93:e7:15:dd:ef:e2:b4:48:31:c6:57:
         cd:bf:3b:ab:a5:49:07:14:c1:b8:73:77:51:06:a3:91:aa:e2:
         94:31:08:b5:9d:af:c2:b0:55:7f:2c:2f:3e:21:d0:a6:e7:fd:
         c1:83:94:d7:29:31:07:80:46:f4:c2:08:93:f5:a1:04:bd:63:
         8f:46:c3:5b:21:4d:8d:30:5f:b9:51:ee:f0:18:94:89:08:b8:
         1f:cf:3c:28:a0:46:1d:e5:98:10:50:21:72:96:c9:b1:34:59:
         0d:36:f6:d9:10:cd:b0:fd:ad:c1:b2:7d:ce:a1:66:6c:4d:20:
         5f:d9:c1:c8:e2:67:fd:aa:de:e9:31:8c:5c:6b:d4:53:39:db:
         5a:3a:18:14:3c:23:45:44:ae:15:2a:79:6d:f5:e8:af:cc:bc:
         33:02:79:f7:b4:b2:cf:61:ec:d1:94:24:38:44:53:fd:8c:3e:
         d3:3b:3e:a1:e3:67:fd:f8:12:16:1e:e3:8a:1a:52:15:f0:36:
         70:e9:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org