Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/0Mg88Z9HYPFEgXodgaUPVeBxd3Y.roa
File:                     0Mg88Z9HYPFEgXodgaUPVeBxd3Y.roa (raw, json)
Hash identifier:          hwpew6iD6vLqGWcqYgDNUL1cW7rNFnVUTqAkUrNJf8o=
Subject key identifier:   D0:C8:3C:F1:9F:47:60:F1:44:81:7A:1D:81:A5:0F:55:E0:71:77:76
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       83
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/0Mg88Z9HYPFEgXodgaUPVeBxd3Y.roa
Signing time:             Sun 01 May 2022 01:30:33 +0000
ROA not before:           Sun 01 May 2022 01:30:33 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        202.124.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:33 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=D0C83CF19F4760F144817A1D81A50F55E0717776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:21:76:db:1d:1d:22:f2:c8:5b:5a:13:84:
                    38:6b:0a:c4:89:2a:a6:f8:64:d4:aa:bd:14:62:a6:
                    9c:15:06:57:99:ad:4a:4b:74:27:d6:d4:1d:22:56:
                    27:aa:fe:bf:b1:fb:44:b3:7f:cd:cc:4f:38:ef:84:
                    f4:4d:9e:82:c9:c3:9b:6a:09:68:ce:c2:42:f0:7f:
                    7e:76:42:72:03:a4:37:2a:01:3e:d3:8c:b1:1f:b9:
                    2c:82:ad:50:72:02:22:16:74:b6:44:a1:05:f6:c5:
                    bb:81:d1:e3:cf:65:2f:34:0d:02:21:f1:98:81:6f:
                    d6:26:b7:28:30:b1:73:9a:3a:3b:86:2d:7b:29:2a:
                    93:cc:0b:c4:ad:72:0e:b9:f0:90:ef:4e:3e:60:1c:
                    c2:3b:23:92:87:30:01:96:8d:5c:25:65:fe:79:d8:
                    40:1d:74:a4:d9:85:d4:42:aa:8a:6d:c3:a4:61:1e:
                    d9:85:6a:13:ff:a1:0d:2a:51:a5:46:3b:33:7a:03:
                    03:16:74:ff:26:35:8d:51:b5:ea:8f:03:53:54:ce:
                    52:ff:f6:ef:4f:3f:eb:09:1b:dd:dc:b8:71:08:ab:
                    2d:10:4f:13:a1:8d:ca:46:12:8b:57:ab:d3:47:33:
                    e9:87:5b:8c:2b:19:56:c4:63:49:11:e4:28:b0:5d:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:3C:F1:9F:47:60:F1:44:81:7A:1D:81:A5:0F:55:E0:71:77:76
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/0Mg88Z9HYPFEgXodgaUPVeBxd3Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:f9:5f:72:74:08:ce:a5:e4:79:7b:26:12:e6:32:56:74:36:
         d7:9b:79:76:a9:aa:c5:8b:09:23:07:cf:f6:53:e5:81:c7:3e:
         4e:5f:2a:a7:24:e5:bc:52:a7:ba:d5:4f:f2:8d:b3:d3:a4:8b:
         83:ba:49:12:0e:fa:de:34:25:d6:41:3f:c4:80:48:cf:10:b7:
         6c:50:1e:41:c3:76:2a:31:57:60:1e:a0:f1:64:7f:c7:d5:bc:
         2c:21:4b:9e:1d:4f:55:d3:91:88:81:3a:66:5d:a4:c3:bb:dd:
         72:aa:9e:53:9f:d8:30:e2:e3:ce:a8:98:d7:3c:19:5d:fe:e1:
         bd:03:f8:3f:ea:eb:13:ae:84:cb:38:06:e9:ae:8d:b3:86:33:
         0d:25:dc:c9:d5:47:43:de:6b:6e:82:cc:4e:24:81:29:6c:05:
         3a:ba:d4:57:7d:bb:b9:95:15:ba:b1:94:79:8a:12:81:15:a0:
         c7:dd:1f:51:94:57:51:23:74:14:48:97:ce:45:d2:8f:58:77:
         9f:cb:55:0a:bf:2a:84:05:4c:de:f8:ab:b5:4d:a2:9a:fd:3a:
         2f:f6:41:aa:a7:d4:c1:3a:d7:22:07:09:7a:bc:97:ca:69:62:
         01:63:a1:2a:78:da:ec:02:32:1b:14:36:83:66:ae:ca:c7:8b:
         34:83:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org