Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nwkBaivZKxHj0oL3eSC7p4NPQpI.roa
File:                     nwkBaivZKxHj0oL3eSC7p4NPQpI.roa (raw, json)
Hash identifier:          h69mHwauRy6U4hCwfgThtRpzplU9GHRXoy5h9VDK6z0=
Subject key identifier:   9F:09:01:6A:2B:D9:2B:11:E3:D2:82:F7:79:20:BB:A7:83:4F:42:92
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       011A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nwkBaivZKxHj0oL3eSC7p4NPQpI.roa
Signing time:             Sat 01 Jan 2022 01:31:24 +0000
ROA not before:           Sat 01 Jan 2022 01:31:24 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     10013
IP address blocks:        210.224.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:24 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=9F09016A2BD92B11E3D282F77920BBA7834F4292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cd:c1:0d:9c:01:d9:06:04:60:43:93:c7:8f:
                    36:16:ab:63:a9:a2:22:e2:e5:15:6f:4d:49:f6:61:
                    1a:d7:7c:22:58:f9:8c:2c:2a:5d:5d:31:27:0e:98:
                    3f:37:81:c8:f9:4c:b0:41:80:64:8e:06:e3:8c:8a:
                    5a:87:54:f9:cd:fa:f4:83:5c:58:58:99:dc:de:9f:
                    a0:4a:8f:21:86:ec:80:e5:45:8e:53:45:0e:b1:97:
                    0e:e1:a1:48:9b:20:38:25:ca:aa:5f:09:fe:75:62:
                    17:23:9f:ef:07:69:a2:7e:dc:af:d3:f6:ef:4a:dc:
                    de:c7:8e:53:24:3b:fc:39:0e:30:c0:48:42:b9:99:
                    eb:8e:84:61:61:97:b7:79:b4:07:9e:9b:be:33:70:
                    02:41:50:c6:9e:3a:2a:4d:d2:1f:1a:67:20:75:fb:
                    f5:9d:ec:b3:22:e6:8e:d8:0b:8b:c8:28:28:f8:00:
                    06:39:d5:00:f7:03:d2:61:17:bc:8d:f6:11:27:c0:
                    8f:f0:34:a0:6a:66:a0:31:2e:a6:89:dd:0a:79:00:
                    fa:69:e1:d8:9b:7b:d8:73:2f:92:e3:63:c2:b9:89:
                    54:14:21:33:99:41:3a:82:5d:9c:db:e0:07:6e:c5:
                    b0:49:d7:61:14:53:46:c6:f1:bc:04:10:88:47:04:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:09:01:6A:2B:D9:2B:11:E3:D2:82:F7:79:20:BB:A7:83:4F:42:92
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nwkBaivZKxHj0oL3eSC7p4NPQpI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:75:af:38:b1:ab:69:fc:fd:73:0d:5b:d7:21:1f:21:55:58:
         54:13:68:00:5c:a4:04:ec:bc:50:51:9c:0c:23:b5:83:dc:16:
         fc:09:59:9a:0e:72:14:d5:0c:2e:89:bc:be:4d:fb:63:39:ed:
         1e:be:ae:fa:48:ce:97:13:b8:01:0e:a7:72:37:41:51:e6:e2:
         56:e7:d2:b4:56:0c:98:d5:66:fe:cf:c4:f5:91:0a:f4:83:29:
         26:c5:68:ae:90:2a:5e:f8:bc:c2:ef:ea:12:04:23:c1:a7:7b:
         8b:a9:d1:73:5c:83:c2:12:88:27:80:44:30:7e:9f:22:94:32:
         f6:a9:c9:cd:80:e5:13:17:a7:db:b2:0e:a6:4e:9a:96:94:ec:
         93:35:fb:c8:f2:da:ad:0e:10:04:c0:a2:51:ab:ce:12:16:30:
         7b:03:75:76:fc:99:04:2e:55:a5:5f:48:92:6b:4f:b6:54:13:
         c8:ed:0c:d5:2a:55:3a:4e:73:c0:0a:bc:5c:18:ec:39:98:d6:
         37:2e:83:fc:52:25:44:0b:20:f8:53:82:33:f6:02:a0:06:22:
         ea:a1:04:13:40:a9:4c:68:81:ee:91:58:35:a1:94:14:e8:1c:
         3a:18:36:7d:83:c0:aa:0a:7a:b1:c9:62:cf:7c:b5:6a:46:e7:
         c5:1d:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org