Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/QWWZCjOv2HA_N_MsMEVY2zE_6gE.roa
File:                     QWWZCjOv2HA_N_MsMEVY2zE_6gE.roa (raw, json)
Hash identifier:          yGvxDVtiC8pGllvH6hmz3EEJtXzNqXhHUCVbZ4U8B8o=
Subject key identifier:   41:65:99:0A:33:AF:D8:70:3F:37:F3:2C:30:45:58:DB:31:3F:EA:01
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       20
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/QWWZCjOv2HA_N_MsMEVY2zE_6gE.roa
Signing time:             Tue 25 May 2021 02:31:50 +0000
ROA not before:           Tue 25 May 2021 02:31:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     55392
IP address blocks:        103.2.252.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: May 25 02:31:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=4165990A33AFD8703F37F32C304558DB313FEA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:ed:2c:2d:01:5b:64:c2:79:0f:a8:7c:7e:
                    f8:a4:b5:5c:46:1b:77:76:9a:30:83:64:74:11:e6:
                    ae:60:d9:0b:40:ae:da:37:14:fd:38:45:72:09:b8:
                    72:3d:8c:cb:6a:3f:8e:01:79:37:7f:60:71:f1:a0:
                    de:1b:40:c0:1f:8f:df:70:e2:21:bc:0a:2e:dd:0a:
                    09:0a:74:c0:d3:c2:de:0f:54:91:22:06:79:81:c5:
                    9a:17:3e:24:4e:ea:3f:be:ed:65:cb:5a:63:05:48:
                    82:1d:c0:e2:78:8c:1d:41:b6:05:24:28:96:30:3f:
                    69:53:12:ad:37:b5:f4:fc:29:ec:97:bd:ac:df:9b:
                    dd:6e:2b:5b:af:7b:1c:57:d0:3d:32:d2:ac:f3:c3:
                    56:19:55:94:e0:08:70:ee:f0:fd:48:be:db:e2:45:
                    61:48:77:69:5c:65:fe:28:f6:8b:19:9c:35:c9:b2:
                    37:2e:52:7e:4f:a5:38:e5:a8:34:19:16:d7:50:21:
                    14:22:d0:f3:4d:24:4c:2e:cd:49:e0:07:c6:d0:5c:
                    77:7a:33:fb:3b:5d:02:dc:c8:c0:5e:ab:33:46:e3:
                    1a:3c:70:5f:fa:db:a6:e8:6a:e0:ab:26:d2:e9:e1:
                    39:1b:5f:9d:46:43:4b:82:45:5c:6d:6f:b4:8c:c4:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:99:0A:33:AF:D8:70:3F:37:F3:2C:30:45:58:DB:31:3F:EA:01
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/QWWZCjOv2HA_N_MsMEVY2zE_6gE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:4f:6b:f8:8c:34:6c:85:e9:5c:ab:7e:3b:d0:3d:98:f8:3d:
         51:ac:95:2c:43:63:da:7f:76:1e:d7:55:b7:d5:38:63:0c:71:
         a1:51:99:d7:89:9a:e7:31:c6:69:01:cc:de:9b:67:37:ef:5d:
         c0:88:00:98:32:df:3b:bf:e6:3f:60:60:02:2e:86:45:16:2c:
         8f:40:c1:18:71:38:36:d3:8b:3c:cd:71:38:f4:65:0f:a1:54:
         60:48:99:8a:52:88:a1:3d:9d:c1:0b:23:8b:60:3c:11:d9:3d:
         65:b1:71:db:60:54:68:f4:ea:3f:0c:d8:24:d0:fb:a1:4b:91:
         14:71:ed:38:b4:b9:85:f6:6e:5d:a7:fb:5f:2b:0d:f1:65:0c:
         b9:9d:fb:1d:d0:a6:d7:0f:80:8b:65:bd:25:a1:af:63:73:b0:
         dd:1e:09:ab:a2:c2:c5:8e:32:ad:19:8b:60:74:03:5d:47:da:
         72:c4:81:c0:5b:fb:4a:75:69:d0:2e:82:8b:83:1d:e2:3d:14:
         2f:90:80:3d:cd:4a:49:b4:58:ed:14:c9:c4:54:46:cf:ab:fb:
         89:38:9c:b7:53:db:f8:d3:2f:d9:65:cb:8b:4c:e5:e0:cf:e6:
         8b:31:47:ee:be:04:0f:b5:b2:8c:7c:1e:5b:45:cb:60:d7:6b:
         25:3d:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org