Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ajWfHImLxjORuc3-8gvPT7twmwo.roa
File:                     ajWfHImLxjORuc3-8gvPT7twmwo.roa (raw, json)
Hash identifier:          pOKcmdC2faDPlVV0pcj38gW6H/cJ7Ej/3Fqv2asaDQg=
Subject key identifier:   6A:35:9F:1C:89:8B:C6:33:91:B9:CD:FE:F2:0B:CF:4F:BB:70:9B:0A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       015C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ajWfHImLxjORuc3-8gvPT7twmwo.roa
Signing time:             Thu 01 Dec 2022 01:28:24 +0000
ROA not before:           Thu 01 Dec 2022 01:28:24 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:24 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=6A359F1C898BC63391B9CDFEF20BCF4FBB709B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:a2:08:8c:ea:21:d3:cd:d0:cd:24:cb:fa:
                    3f:b6:d9:03:a0:fa:f0:70:5e:b0:d7:b8:08:0a:a0:
                    34:29:3e:4d:5d:44:f7:aa:d9:21:0a:66:35:ab:1b:
                    de:82:ac:2b:33:3a:ac:74:8d:8e:f2:f4:7d:59:4c:
                    fa:b3:72:ed:89:83:40:ca:8a:3f:68:33:eb:af:a9:
                    85:76:17:9d:1f:ad:cc:11:f4:5b:83:aa:0a:6b:3f:
                    8d:65:8f:03:db:7b:7f:23:8f:14:ff:84:c3:a7:69:
                    28:3d:c6:e5:e6:db:de:0a:7e:3e:c4:de:a5:45:a6:
                    cb:4f:04:05:76:f3:22:43:c2:e7:7f:8e:86:95:f7:
                    d5:4b:d0:23:36:1c:f3:11:67:ed:66:e2:3e:8a:77:
                    ec:9b:41:c4:10:58:f4:58:fb:9c:13:21:89:1d:2d:
                    b0:d0:be:41:f9:a8:5c:81:11:c1:9a:0f:51:f3:ec:
                    dd:00:8d:44:3e:a5:b5:8f:23:5f:e0:08:54:f2:0f:
                    99:69:02:7a:1a:b9:55:b0:f3:85:97:8e:49:4c:74:
                    3e:13:8e:ab:e8:03:39:4c:11:35:13:5f:35:b7:9b:
                    6c:07:57:af:f9:b1:c1:66:11:3e:9a:27:cc:b9:26:
                    1d:b6:79:26:aa:df:2f:0b:42:c8:2a:d0:1a:d6:8a:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:9F:1C:89:8B:C6:33:91:B9:CD:FE:F2:0B:CF:4F:BB:70:9B:0A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ajWfHImLxjORuc3-8gvPT7twmwo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:dd:a3:7e:d4:10:0e:e2:44:30:d3:3e:6a:ac:99:49:c1:b3:
         8c:4f:e1:1c:e7:a1:9b:9c:f4:58:f2:36:55:89:a8:06:6e:fe:
         8f:1e:91:99:1e:5a:60:db:98:e9:7c:6d:c8:7f:a5:fc:ad:26:
         d7:63:f1:ef:89:4a:b5:d6:e8:1f:43:9c:82:4d:c0:69:8a:06:
         9d:d8:01:ba:6c:f9:3b:53:57:e4:ed:d0:3b:2f:ff:d8:d9:2c:
         44:8a:57:1a:92:80:ff:6d:57:d7:a3:d7:9d:ae:0b:99:ef:ff:
         45:e8:82:62:9c:b8:3b:2e:42:02:c0:05:a2:87:da:0f:db:df:
         7e:b5:c6:50:18:3e:c2:44:31:79:7d:32:ca:c7:6e:19:53:a1:
         d3:cf:af:bf:04:37:1a:85:b7:85:ee:a0:f2:54:4c:3a:78:8c:
         cc:fe:e7:fb:cc:77:67:c6:c0:aa:bc:08:32:23:6f:f1:31:42:
         8f:b5:4c:ac:f4:2b:e5:88:3a:40:fc:39:e5:22:98:97:92:09:
         9b:9c:5e:67:78:5c:3e:53:f7:d4:0a:cb:3a:1d:a0:1d:e3:ee:
         10:06:a8:6d:ed:b3:24:15:41:05:1e:3e:4a:24:c3:59:6e:70:
         88:20:f2:b7:23:ee:b2:0a:95:cc:2f:78:2b:ae:05:61:ee:11:
         a1:6f:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org