Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/9SbRPjLVE1SlOhOIYydvnVVMyoo.roa
File:                     9SbRPjLVE1SlOhOIYydvnVVMyoo.roa (raw, json)
Hash identifier:          bNf9fVwXpbKaDfusYspLrurCqRdaoaavBz5Ijpw6z/0=
Subject key identifier:   F5:26:D1:3E:32:D5:13:54:A5:3A:13:88:63:27:6F:9D:55:4C:CA:8A
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       24
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/9SbRPjLVE1SlOhOIYydvnVVMyoo.roa
Signing time:             Fri 01 Jul 2022 01:30:10 +0000
ROA not before:           Fri 01 Jul 2022 01:30:10 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     7660
IP address blocks:        203.181.248.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Jul  1 01:30:10 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=F526D13E32D51354A53A138863276F9D554CCA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:3a:d6:3e:12:05:63:e3:5c:e4:4f:89:13:
                    8d:3c:87:95:6d:dc:74:15:72:c9:22:5a:21:86:bb:
                    11:8c:fd:d8:69:d4:d2:c3:bc:82:0f:1d:e6:42:99:
                    f5:72:31:30:6a:58:fe:32:85:af:c3:f5:03:38:0f:
                    42:37:eb:f8:2a:26:68:dc:90:27:96:42:32:b6:e1:
                    8e:18:90:75:30:45:01:8f:82:3e:0f:74:e3:0d:99:
                    2e:20:8c:22:fb:48:11:73:7e:a4:66:48:c5:f1:44:
                    0d:97:ed:53:84:87:95:f4:c6:3a:d7:ba:ff:66:7e:
                    41:ba:6d:21:57:3b:6d:3c:81:f2:5e:51:be:e9:65:
                    62:1e:59:ec:05:35:f1:6a:c7:67:68:bd:33:fa:1e:
                    da:d4:74:21:f9:4e:c0:d5:dd:3e:c2:e8:f5:95:d2:
                    1d:ba:8f:a8:22:aa:f0:36:bf:07:72:1a:1a:1a:ff:
                    8e:3d:89:3d:4e:c7:ec:9e:2c:7b:4b:88:07:61:c5:
                    f1:17:ef:61:46:6a:28:13:c9:34:d1:1c:0a:5b:71:
                    75:bf:f7:03:4d:0c:5c:48:ec:24:a4:ae:60:06:13:
                    31:07:0c:6d:bc:22:68:dd:a9:be:e4:00:77:93:1d:
                    84:cd:ef:ca:1b:3d:69:3d:31:26:ab:e2:8b:29:8b:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:26:D1:3E:32:D5:13:54:A5:3A:13:88:63:27:6F:9D:55:4C:CA:8A
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/9SbRPjLVE1SlOhOIYydvnVVMyoo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:34:fd:a7:e5:d3:bc:54:02:5f:74:52:4c:89:31:28:8e:
         10:ca:cc:e4:26:0c:4d:c3:27:44:b8:10:04:1a:79:2a:df:c4:
         72:a8:34:2d:e7:8a:49:3a:b1:8d:f4:3d:18:c7:aa:19:26:5b:
         36:20:11:07:6f:68:f2:e9:70:e9:65:85:0a:4b:a7:05:02:fe:
         02:f8:f4:11:10:3d:1b:30:91:1b:b8:c1:9c:43:a0:57:f1:b6:
         47:e1:5a:0e:f5:05:c1:73:5e:55:b8:fd:06:70:d4:b7:88:56:
         f0:a3:1c:82:c4:a2:d5:17:86:52:0f:7a:31:01:57:93:66:48:
         cf:11:e8:3c:38:09:f4:b4:4d:4d:69:20:41:0b:0f:6e:9e:c7:
         e0:7f:13:e3:32:e4:b4:af:14:cd:d2:ec:8a:93:5c:5c:7a:cc:
         71:39:3c:a9:79:fb:07:45:b5:28:7d:56:da:c8:a4:3e:eb:bd:
         21:cb:8a:87:e9:21:e1:27:73:73:78:55:31:73:a3:0b:6c:f8:
         4e:9c:f6:56:46:84:7a:02:e7:b3:a3:28:67:4a:59:73:52:c5:
         74:ca:74:38:88:17:29:dd:f9:d8:02:61:07:ee:30:b6:6f:7c:
         d0:8b:89:d9:01:e7:0a:db:2d:a8:84:d9:ef:22:16:45:f9:28:
         23:2c:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org