Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/PArMMCgvcAXaIPuUnU7L4DRpdjw.roa
File:                     PArMMCgvcAXaIPuUnU7L4DRpdjw.roa (raw, json)
Hash identifier:          /Xjg/ZD4ZwtW9GLeRlTE9/9+EdECaxXOqza8MGTX2E4=
Subject key identifier:   3C:0A:CC:30:28:2F:70:05:DA:20:FB:94:9D:4E:CB:E0:34:69:76:3C
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       6B
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/PArMMCgvcAXaIPuUnU7L4DRpdjw.roa
Signing time:             Wed 06 Oct 2021 03:01:54 +0000
ROA not before:           Wed 06 Oct 2021 03:01:54 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     19905
IP address blocks:        218.216.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Oct  6 03:01:54 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=3C0ACC30282F7005DA20FB949D4ECBE03469763C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:fd:7d:1b:e5:d1:2d:80:11:55:0e:3d:1c:
                    d6:70:cd:76:90:d3:cf:23:62:1e:27:a7:c4:c2:de:
                    c1:ce:6f:d9:7e:43:2a:95:c6:17:ad:ae:f7:f8:76:
                    44:c6:5e:cb:19:f8:c4:ea:2f:7c:7c:b3:2c:77:00:
                    12:8a:bf:4e:ce:fd:19:cd:a5:8d:a4:1d:5f:36:5e:
                    a7:d0:10:a7:7d:a9:39:7a:01:05:77:a5:d1:b7:5e:
                    6b:d4:6e:97:bf:67:ed:f3:0b:7f:06:d5:13:31:f0:
                    ec:b4:24:fd:92:fa:9c:ff:73:7d:4a:ed:93:8b:96:
                    0c:01:cd:36:c1:4b:21:89:2a:5d:77:59:7c:03:35:
                    31:3a:05:64:90:15:70:c2:a4:02:65:9d:9a:c3:73:
                    87:f5:f8:b8:a5:40:82:be:47:bf:af:76:62:f4:aa:
                    90:e4:cd:75:74:f5:3f:11:e7:cb:9c:5f:04:1d:89:
                    eb:17:31:50:ff:18:a6:7c:c8:42:a8:88:98:c2:aa:
                    93:ce:19:2c:72:46:b8:57:c6:6e:b3:04:82:9f:99:
                    b8:0d:1d:de:19:01:13:d4:0f:f4:c2:ec:c4:bc:09:
                    5e:13:b9:1d:7a:ca:40:61:42:35:c2:78:cd:18:3f:
                    fd:88:dd:29:2f:8a:e0:12:8c:16:96:fd:3d:01:1d:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0A:CC:30:28:2F:70:05:DA:20:FB:94:9D:4E:CB:E0:34:69:76:3C
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/PArMMCgvcAXaIPuUnU7L4DRpdjw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:68:1b:ba:7a:92:fe:2b:ab:f2:d4:d7:fd:08:55:5e:1c:
         b7:f5:dd:26:58:ce:2e:e2:43:d3:90:97:0e:68:97:a7:97:f8:
         3b:34:24:93:05:d9:9c:77:b2:e0:8c:17:b4:34:90:2d:84:a8:
         0b:17:d4:73:f9:65:c7:6b:01:ef:58:a8:cb:b4:ea:2a:9b:fb:
         d4:2a:b5:90:f9:e0:5d:46:ea:31:7a:83:99:bf:ab:5f:1b:b8:
         9e:b3:49:b7:ad:1e:4b:21:93:f2:af:2c:2c:43:a8:6f:6c:0e:
         07:53:85:01:a7:a2:23:94:7a:16:35:ae:40:40:c5:b9:70:b9:
         e6:dd:82:69:1e:70:77:02:28:50:d2:a2:74:b9:a0:3f:e4:cc:
         e0:f9:6d:0a:52:96:51:c6:dc:7d:b5:80:3d:4d:b7:fb:d5:33:
         16:0d:3b:81:81:f9:ac:c5:30:96:04:b0:ea:40:e9:ca:de:f2:
         fe:54:d8:2a:7f:c8:05:5c:5d:31:03:5b:6d:2d:1b:91:ca:b6:
         7e:d2:87:5a:98:83:35:66:72:63:1d:46:4f:0a:be:14:4e:09:
         2f:40:45:20:87:db:ed:e4:72:e5:9d:c0:8e:11:09:88:9c:37:
         1c:8a:c4:8e:13:45:fe:c8:03:80:3a:24:eb:ab:b5:a7:ab:8c:
         11:fb:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org