Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/cSCkN5F5_LdJeyxAsrewZFDzHyc.roa
File:                     cSCkN5F5_LdJeyxAsrewZFDzHyc.roa (raw, json)
Hash identifier:          L2+oywVoXp8sHKcFQh6U+eQemXdKL6/IGq8s2AY/OS4=
Subject key identifier:   71:20:A4:37:91:79:FC:B7:49:7B:2C:40:B2:B7:B0:64:50:F3:1F:27
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       15
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/cSCkN5F5_LdJeyxAsrewZFDzHyc.roa
Signing time:             Wed 18 Aug 2021 07:54:19 +0000
ROA not before:           Wed 18 Aug 2021 07:54:19 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     24295
IP address blocks:        122.255.76.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Aug 18 07:54:19 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=7120A4379179FCB7497B2C40B2B7B06450F31F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:f6:1d:63:1d:51:18:19:81:d7:70:81:f0:
                    69:1b:9c:af:66:a9:45:f3:24:df:ad:0b:d6:b8:34:
                    83:45:c7:5b:aa:72:c2:ea:d0:56:e5:34:f4:7f:f1:
                    ac:f2:0a:ff:e5:ef:20:b6:a8:51:63:df:0b:88:44:
                    14:f3:1a:dc:4e:c2:63:fa:d2:e2:16:e8:bb:52:2a:
                    69:a0:d1:f5:22:bf:ca:a2:70:ef:e6:e0:a2:cb:e1:
                    5f:72:58:d5:74:65:26:74:b1:e1:48:87:f5:2d:6c:
                    5a:0c:55:5c:44:0f:af:21:fd:cc:b5:f4:77:d9:a7:
                    d1:19:b1:b3:14:d1:d9:fa:53:72:96:f7:df:51:fa:
                    e0:46:b6:2c:9f:aa:5b:95:f7:cd:68:05:11:07:d7:
                    05:0a:8c:56:bc:26:19:a9:6a:2d:8e:4b:fa:b1:4a:
                    aa:9f:47:3e:63:b1:0a:99:6f:b3:e6:39:ce:fe:7d:
                    6c:0d:3b:ad:af:57:24:5d:40:e1:9e:c8:9d:b6:ca:
                    e8:bc:da:b7:a7:4a:89:ec:d3:8e:2b:b8:96:ad:30:
                    c4:96:e7:f5:dd:62:47:b6:1d:9b:10:78:e2:82:25:
                    a7:0b:46:e1:35:ce:d0:ef:23:63:23:69:bc:13:c4:
                    70:b7:ad:f1:5c:c5:b4:a8:f9:d7:ba:1c:5a:92:f9:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:20:A4:37:91:79:FC:B7:49:7B:2C:40:B2:B7:B0:64:50:F3:1F:27
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/cSCkN5F5_LdJeyxAsrewZFDzHyc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:3a:30:aa:fc:ca:c6:8d:0f:92:c8:aa:24:40:c2:d5:ca:
         28:1a:15:7d:8f:52:25:37:46:2f:f8:22:89:7a:21:38:06:9c:
         0c:25:9f:7c:85:d6:da:d5:65:76:b0:7c:96:cb:c9:4e:91:24:
         6c:73:3b:f3:d9:e6:5d:ff:26:63:fb:65:9e:6e:59:98:11:cd:
         14:df:f9:96:b7:97:5a:28:e8:42:45:f9:07:78:38:92:6c:89:
         5c:3c:53:e1:20:d1:21:cb:a6:e4:76:6a:95:f5:48:28:51:10:
         41:84:00:fc:39:0a:23:18:4d:5f:09:95:e3:0c:41:63:c9:cf:
         1d:6f:b1:51:54:8c:41:ce:e6:57:90:1e:7b:cf:10:1e:f5:b5:
         d2:e3:24:cc:bc:4d:6b:38:5e:35:1a:b8:77:b6:58:27:e8:15:
         3a:82:01:8f:0e:28:9d:86:ae:b3:7b:5f:ae:cd:96:98:69:eb:
         4b:51:1e:b3:f5:4a:da:e3:10:dc:d5:41:2f:11:8d:12:71:08:
         51:d4:a8:c2:10:a9:71:82:db:14:f7:a6:0b:74:f0:06:e6:67:
         f5:22:6c:2a:9f:1b:1e:8f:f6:b7:ff:34:3d:84:d0:b7:34:f1:
         da:74:59:44:76:a7:81:17:2c:5b:42:71:66:91:7b:e1:41:78:
         1b:7b:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org