Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/LSxxRmcO5gvtPJpRHe-8xTJa79Q.roa
File:                     LSxxRmcO5gvtPJpRHe-8xTJa79Q.roa (raw, json)
Hash identifier:          W6rwvT+RFYMi0ib40BgIfjm7z0hle6vW43S1LBTzmIQ=
Subject key identifier:   2D:2C:71:46:67:0E:E6:0B:ED:3C:9A:51:1D:EF:BC:C5:32:5A:EF:D4
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       7E
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/LSxxRmcO5gvtPJpRHe-8xTJa79Q.roa
Signing time:             Sun 01 May 2022 01:30:32 +0000
ROA not before:           Sun 01 May 2022 01:30:32 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        202.41.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:32 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2D2C7146670EE60BED3C9A511DEFBCC5325AEFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:4c:d0:25:cc:51:c6:cc:e8:87:5e:e7:4c:
                    28:b4:81:a3:e0:1a:a7:4b:7d:6e:de:7e:59:4c:8c:
                    5b:12:f0:21:ca:b2:92:61:52:30:34:aa:73:38:48:
                    a4:7e:f4:99:14:c5:51:b0:d5:80:0a:c1:e1:77:ef:
                    e5:52:21:93:47:d2:d3:7e:d1:d1:8a:a2:7d:6f:b8:
                    6a:37:7e:95:ba:4e:2e:d5:9a:a4:f7:92:f1:67:79:
                    4d:fe:31:73:44:9f:63:77:1b:bf:70:98:22:2c:27:
                    b1:87:71:78:d5:89:e4:74:c1:d9:9d:9d:45:1d:af:
                    6f:e2:85:f1:3c:2b:3f:f1:02:c8:d3:57:3a:bb:07:
                    02:1c:13:79:27:55:96:11:fe:5a:77:8e:c7:0e:a0:
                    10:84:7c:09:bb:94:4e:b3:7d:a6:d2:00:e8:d4:84:
                    df:52:e0:1e:01:16:01:e5:8d:53:90:b3:6c:0d:f1:
                    30:44:3a:b2:3f:92:2a:c2:c3:fc:6b:17:dd:ca:dc:
                    24:68:c1:69:7a:03:0c:c3:d7:5e:a3:a3:a3:75:2b:
                    42:aa:03:73:a4:da:6e:ba:74:dd:63:28:ae:18:95:
                    92:04:af:b3:35:4b:26:98:a5:bf:f7:d5:f0:4e:d7:
                    f4:c1:17:6b:ed:b5:fa:87:b1:fd:e3:4a:9e:cf:c1:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:71:46:67:0E:E6:0B:ED:3C:9A:51:1D:EF:BC:C5:32:5A:EF:D4
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/LSxxRmcO5gvtPJpRHe-8xTJa79Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.41.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:05:90:28:be:61:47:36:de:fd:35:e8:01:ad:7c:ae:2e:
         68:76:71:da:d5:5d:9f:c0:db:0e:cc:54:c3:ac:56:0f:32:53:
         a6:eb:90:62:52:38:a2:0d:e1:3f:46:47:f4:5f:6c:2e:1a:c0:
         15:ef:74:7c:6d:6a:1b:a5:df:0e:85:1c:06:39:a0:0d:b9:28:
         9e:16:d0:eb:34:4b:78:9c:4d:02:9a:87:3b:24:49:d1:56:63:
         8a:ee:be:96:23:c1:fe:b7:b5:eb:89:fb:ab:bb:a6:60:4c:61:
         a2:31:6c:bf:bb:67:8a:4b:38:df:ae:a3:f5:1c:33:72:16:9a:
         a5:65:2e:bf:28:5e:79:b8:88:d3:14:c1:81:e0:24:d5:7c:4d:
         4c:11:10:f4:28:2f:75:26:8b:e5:37:43:e8:ae:46:2d:2d:53:
         1f:7a:e2:c0:d6:f9:22:69:1b:de:0e:2d:f2:8c:2b:c8:96:46:
         bc:22:97:11:bc:82:22:76:d7:c0:e0:90:ea:02:c5:2a:56:42:
         99:9f:88:76:b6:43:70:52:ef:d9:5c:9d:6f:2a:6e:d1:34:98:
         fe:26:1f:5b:52:64:f7:ae:89:b7:0b:54:d4:f4:14:84:4d:ce:
         0d:cf:69:43:7b:12:fb:80:6b:66:44:26:33:0c:3e:f7:3f:21:
         09:6e:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org