Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/bfPV9kT5mqkKlUvf6dElgT-nfUs.roa
File:                     bfPV9kT5mqkKlUvf6dElgT-nfUs.roa (raw, json)
Hash identifier:          j13GR2oTLjZbuwmNUYcPEHc4LjlNn5H+h3s3u1QIlZU=
Subject key identifier:   6D:F3:D5:F6:44:F9:9A:A9:0A:95:4B:DF:E9:D1:25:81:3F:A7:7D:4B
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       8B
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/bfPV9kT5mqkKlUvf6dElgT-nfUs.roa
Signing time:             Thu 01 Sep 2022 01:28:18 +0000
ROA not before:           Thu 01 Sep 2022 01:28:18 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     19905
IP address blocks:        14.192.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Sep  1 01:28:18 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=6DF3D5F644F99AA90A954BDFE9D125813FA77D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:75:86:d6:2a:de:bf:39:12:eb:c5:ef:e1:
                    d8:39:0b:dd:77:3b:6d:36:e6:db:9b:22:9b:d3:8c:
                    05:6b:7a:6b:d8:af:54:d6:5d:3a:8f:0e:f4:1e:05:
                    e7:a5:30:76:4d:80:a4:ec:57:cd:75:5d:db:8b:01:
                    97:77:ba:ae:74:a6:e6:04:dc:32:17:4f:1e:2c:24:
                    47:4d:8b:61:fc:a4:fb:43:ee:dc:8b:93:c5:84:71:
                    a0:ad:97:6c:a6:75:29:6b:62:6e:fc:e5:ee:60:9a:
                    ca:cc:46:42:40:b2:eb:0c:64:8c:9b:34:9a:d9:7a:
                    70:40:61:be:84:ea:44:96:4f:3e:a8:30:7f:38:e6:
                    d5:ec:4d:be:fc:e5:7b:cc:fd:d9:68:12:c5:5a:12:
                    ad:cd:a9:85:83:ac:80:c1:f7:2c:52:c1:fa:e8:d0:
                    17:16:59:15:33:c6:62:f7:a6:13:51:0a:df:13:06:
                    df:1d:b7:d7:0c:2b:2b:f8:82:49:7b:ea:ad:11:bd:
                    02:4b:d8:f4:55:f4:c0:a6:88:a8:8d:a6:0b:30:27:
                    fd:8d:77:1c:cb:c9:da:ed:dd:59:2b:04:31:89:63:
                    f3:45:4d:a1:96:bd:cd:07:82:a8:61:9f:4b:e7:69:
                    65:b7:b7:b7:9a:d0:fe:16:52:3b:b0:14:37:33:49:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:D5:F6:44:F9:9A:A9:0A:95:4B:DF:E9:D1:25:81:3F:A7:7D:4B
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/bfPV9kT5mqkKlUvf6dElgT-nfUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:fe:f8:16:ca:c8:51:7a:54:21:f6:b4:76:14:88:a3:ab:53:
         55:ca:b5:25:39:1f:56:62:e7:55:93:19:7c:dd:b4:27:ce:70:
         7e:20:55:d6:03:c8:de:d5:72:24:75:20:88:0f:e8:43:fa:17:
         40:06:0f:e8:7f:fc:b9:fb:af:39:f6:f7:e2:39:2c:06:f4:b9:
         a9:7f:b9:8c:27:58:4a:b8:f4:4c:ca:14:52:ab:a4:42:8f:6c:
         1e:61:74:4f:54:1e:8e:20:0b:a4:c0:5c:41:98:07:08:84:e0:
         e5:52:bf:59:df:fb:91:c8:19:2f:17:df:3c:36:d4:82:37:81:
         e5:c0:4d:fa:da:c9:9f:94:13:5e:28:cf:04:d3:9b:fe:33:b2:
         d9:b5:67:da:0a:19:3c:c6:01:cf:41:e5:a7:74:8a:73:42:b8:
         66:17:14:99:48:75:ba:16:e3:62:36:8c:16:15:30:bb:99:f2:
         13:60:56:8a:65:bc:55:47:97:e4:db:4a:fc:45:25:ed:12:81:
         27:3b:14:9f:02:d6:40:06:05:05:42:6d:e0:d6:04:d3:f1:8b:
         2f:85:59:2c:97:90:c4:4a:fc:8d:ec:f5:0e:80:73:c9:aa:d2:
         d7:41:ee:c1:6b:ab:b8:22:68:35:c2:0a:6e:a9:e1:3b:19:fd:
         ec:17:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org