Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/yCZc8iPSIZi1muSQMKpaJaCH0Co.roa
File:                     yCZc8iPSIZi1muSQMKpaJaCH0Co.roa (raw, json)
Hash identifier:          kHP6cy52dYBb+bUOMQWlsllkJRMS+yffuGoEd/tdVLg=
Subject key identifier:   C8:26:5C:F2:23:D2:21:98:B5:9A:E4:90:30:AA:5A:25:A0:87:D0:2A
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       5E
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/yCZc8iPSIZi1muSQMKpaJaCH0Co.roa
Signing time:             Tue 25 May 2021 02:36:56 +0000
ROA not before:           Tue 25 May 2021 02:36:56 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        203.129.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May 25 02:36:56 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C8265CF223D22198B59AE49030AA5A25A087D02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:5e:40:4c:72:d9:c6:2d:07:f6:d7:41:51:
                    4e:9c:2d:c7:14:6a:fa:af:92:50:a9:bf:f3:89:3f:
                    58:49:9b:f5:4c:9a:cc:e3:95:c6:5a:88:ae:0b:5f:
                    9d:83:0f:98:b2:29:72:2b:32:5f:fa:4c:4f:a2:c2:
                    01:77:f9:8d:62:97:15:0b:de:80:06:26:11:1f:2e:
                    67:65:37:75:80:12:83:95:ef:ac:e8:ed:af:f7:7a:
                    f7:5d:65:b3:06:27:0d:33:c5:1c:60:64:3f:a3:28:
                    cf:c7:a5:1f:13:b6:ff:9b:eb:d5:86:62:84:9d:70:
                    94:dd:5e:0f:85:16:c8:8e:17:a8:6a:0a:1d:aa:41:
                    3e:76:fe:1c:53:08:66:e9:08:8f:b7:a4:04:7b:ed:
                    a7:ac:27:e3:30:29:9d:b6:ac:30:1a:db:8f:d1:ef:
                    73:c1:8d:ea:ed:57:80:a3:ba:b1:78:83:33:aa:77:
                    90:f6:36:9d:fd:2c:d7:3d:80:20:91:64:87:5e:f0:
                    35:fc:7d:47:9c:63:75:e5:66:a6:ce:8e:70:4b:ab:
                    d8:3b:ec:6b:58:5d:31:c7:55:85:41:c3:8a:65:57:
                    16:5a:94:0d:03:03:d0:05:3a:f5:ff:7a:ee:e0:e8:
                    66:41:5d:93:81:f5:57:56:2e:d4:11:5c:99:f8:0d:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:5C:F2:23:D2:21:98:B5:9A:E4:90:30:AA:5A:25:A0:87:D0:2A
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/yCZc8iPSIZi1muSQMKpaJaCH0Co.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:44:7e:f5:b9:78:ff:e8:6d:83:3d:1f:6d:91:0b:5b:93:
         5a:e2:c1:9b:ff:b9:e6:6f:1b:a3:df:82:87:ca:fc:ff:82:f8:
         24:6d:f4:3e:1a:cb:e8:0b:94:3f:b2:27:20:a4:22:c1:e2:4a:
         54:f1:60:87:8b:23:fd:42:d6:68:f4:53:09:3f:51:82:06:00:
         74:00:4e:f0:1b:55:7f:d8:3f:78:de:10:02:aa:17:f2:30:11:
         00:46:81:17:c5:41:08:03:76:58:2f:cd:43:ba:44:ee:ff:19:
         ee:ad:da:08:57:1e:fe:d9:e4:58:34:52:23:85:08:27:11:17:
         84:7e:19:48:98:42:cf:a0:3b:1f:72:10:cf:19:71:ac:b1:26:
         4f:6f:a0:21:7c:5d:99:83:80:df:a1:ad:b3:1e:5d:7b:4f:b8:
         70:58:54:d5:81:6d:a2:2a:c4:29:19:8e:f9:53:cf:ef:5e:60:
         cd:c5:69:2e:b6:0a:6f:2a:05:9a:cc:e4:5a:9d:e9:1a:ad:e2:
         e5:c1:2f:45:80:02:62:fd:8c:72:f1:bf:1e:f8:50:e9:ce:92:
         d3:b4:bc:14:9f:b1:3f:92:5e:d8:1e:a2:a6:66:fc:26:66:f7:
         c2:69:3f:9f:49:6d:25:23:87:72:f5:90:e5:2d:03:8a:7e:bc:
         4d:bc:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org