Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/NWsc0VerLpN7nfToxKEDcKk4LNg.roa
File:                     NWsc0VerLpN7nfToxKEDcKk4LNg.roa (raw, json)
Hash identifier:          xwbhkY601n9y3h0v38ry3a7/dLNGNRS6G+h5K4hwlqg=
Subject key identifier:   35:6B:1C:D1:57:AB:2E:93:7B:9D:F4:E8:C4:A1:03:70:A9:38:2C:D8
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       37
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/NWsc0VerLpN7nfToxKEDcKk4LNg.roa
Signing time:             Sun 01 May 2022 01:30:10 +0000
ROA not before:           Sun 01 May 2022 01:30:10 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        122.100.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: May  1 01:30:10 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=356B1CD157AB2E937B9DF4E8C4A10370A9382CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:77:31:de:c3:87:18:98:8c:c4:d7:9d:48:
                    4f:c1:cb:e7:49:b5:26:1f:7b:ea:08:61:c0:80:b5:
                    0c:c7:c9:9c:1f:6e:a3:b1:97:1e:42:ca:92:91:c4:
                    20:d1:7f:ed:61:e7:9c:19:f1:71:af:c2:32:8d:2a:
                    7c:91:a0:fb:43:18:ba:49:e7:eb:4d:8d:e8:e4:52:
                    d8:4c:85:fa:97:2d:f8:ca:1d:00:5d:80:85:58:f3:
                    4b:a5:05:cc:f1:1d:eb:ce:88:78:55:62:8b:ad:68:
                    22:21:90:02:b7:e3:df:14:1e:39:e2:c2:70:df:5f:
                    a2:b8:13:bb:9e:ef:74:17:10:89:5c:e6:55:2e:ba:
                    4d:d7:7e:c6:b3:bc:0e:d2:93:9f:35:d2:0d:59:09:
                    0a:bb:bf:6c:35:1e:9e:ab:9e:2d:b2:90:f4:12:30:
                    8c:8e:94:32:c7:ea:61:ef:89:6e:6b:ff:04:b8:56:
                    fb:94:e5:d3:2f:db:b3:9d:76:3e:f3:d1:7b:d2:e3:
                    39:d5:4a:33:27:71:3c:31:3d:b1:50:83:8a:81:37:
                    d2:d9:70:06:4c:3d:9a:71:c4:28:c3:1c:e3:6d:cc:
                    ed:bd:5e:5a:28:e1:39:27:5b:7a:7f:af:81:dd:8c:
                    43:a4:73:57:06:72:3c:73:2d:2b:c8:7a:f2:7e:8e:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:1C:D1:57:AB:2E:93:7B:9D:F4:E8:C4:A1:03:70:A9:38:2C:D8
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/NWsc0VerLpN7nfToxKEDcKk4LNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:65:93:37:80:53:38:f8:6b:ba:99:75:e0:27:fc:b7:2e:c5:
         7c:a2:f2:e2:49:36:c6:24:59:2a:18:a0:cd:c4:ce:7a:32:e6:
         d2:4b:01:ab:36:3e:6b:4d:9a:d7:ca:3c:16:79:57:a1:e3:16:
         3b:a4:d4:f8:97:58:d6:46:92:c7:f2:f9:58:72:2d:86:81:df:
         3e:a6:68:35:97:3f:67:87:b3:f5:57:9b:ce:f4:27:2c:c1:21:
         a5:97:b4:36:10:6a:99:39:61:20:63:81:4b:cd:a4:13:7c:dd:
         c9:48:ac:c1:2e:e0:1c:09:82:15:db:0d:b8:34:8a:b2:94:d5:
         1f:17:6d:69:14:db:53:05:dd:b5:bd:82:95:bc:62:c9:a8:13:
         c8:1a:8f:3b:62:87:93:46:b5:55:61:a9:10:0a:26:5d:71:1c:
         94:8d:f4:fb:8a:ce:c0:e1:32:14:3e:89:16:3d:20:6a:f9:06:
         fb:d0:a4:6f:14:c0:c1:d7:10:ab:2c:7f:a7:7d:5a:67:97:c3:
         00:3a:8e:91:c3:30:b6:63:4b:d9:31:c3:99:bf:a2:1d:de:b2:
         01:83:b9:75:96:3d:20:1b:2f:c0:21:57:70:db:44:5e:0e:95:
         b5:5b:03:a8:11:c0:c3:47:bc:cd:e5:1b:d4:73:69:7d:8b:65:
         fb:8a:20:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org