Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Ei1kkiNv8nd1Zf1YRewaCP1SAqY.roa
File:                     Ei1kkiNv8nd1Zf1YRewaCP1SAqY.roa (raw, json)
Hash identifier:          Nr+ovak08ijE2KXCocvdag+T6M7OaUN+CW6EvLS+7Dk=
Subject key identifier:   12:2D:64:92:23:6F:F2:77:75:65:FD:58:45:EC:1A:08:FD:52:02:A6
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       05
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Ei1kkiNv8nd1Zf1YRewaCP1SAqY.roa
Signing time:             Thu 17 Jun 2021 09:41:58 +0000
ROA not before:           Thu 17 Jun 2021 09:41:58 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     24277
IP address blocks:        122.128.112.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 17 09:41:58 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=122D6492236FF2777565FD5845EC1A08FD5202A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:ad:bb:1a:83:b1:a7:5c:ed:03:21:34:e3:
                    b3:17:74:bc:f5:a8:a7:9f:33:94:07:ab:e9:76:d6:
                    d7:e5:f5:5f:73:b3:ef:e6:cb:94:69:fc:0c:88:79:
                    a6:02:97:03:3d:24:7a:04:44:23:f5:d0:d0:1a:9f:
                    22:9c:45:b5:f0:be:71:56:1d:46:f7:05:00:77:4c:
                    82:74:66:ea:5e:a9:cc:17:da:0d:b4:37:ec:85:5c:
                    52:71:5b:a7:c1:ec:fd:b7:b6:76:a5:cd:7c:ef:ac:
                    21:e2:1a:55:d1:75:a1:01:9c:fe:03:4e:ff:03:07:
                    3d:19:dd:7e:d7:87:eb:74:49:fe:7a:14:ce:41:9a:
                    0b:c0:af:71:8c:92:1b:4d:a7:da:fc:2f:eb:f6:b0:
                    75:1e:fc:c1:02:ba:0d:ca:22:db:bb:3d:33:50:20:
                    72:3a:b1:db:f3:e3:2a:bc:9d:22:a8:db:a7:61:01:
                    e3:18:d6:9d:a8:b4:7a:53:74:6b:ff:3b:32:f6:18:
                    7d:3c:09:59:a5:5a:ed:72:ed:44:3d:2e:cd:a4:22:
                    46:6f:e5:f0:a2:8b:06:f7:4a:72:ea:a2:9d:9d:bc:
                    3d:1d:82:83:77:ab:90:c9:4c:1b:bd:65:44:0c:c9:
                    c2:5a:6d:4e:29:69:5a:11:5a:39:4e:f7:5e:51:82:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2D:64:92:23:6F:F2:77:75:65:FD:58:45:EC:1A:08:FD:52:02:A6
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Ei1kkiNv8nd1Zf1YRewaCP1SAqY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:7d:44:9c:70:7f:14:ce:de:f2:33:c0:7f:65:c1:20:f1:6a:
         40:4d:86:f5:2a:cd:00:71:ba:6c:70:9c:f7:e5:1b:b6:89:e3:
         34:04:e9:e2:ba:05:8e:06:54:a0:67:81:dd:26:a6:be:fa:59:
         e6:68:e6:3d:ca:b9:84:4d:56:11:a0:ef:82:98:6b:3c:f7:18:
         57:87:c8:aa:d0:2c:e8:76:f7:75:76:f4:70:4a:f8:6a:b6:c4:
         62:be:2c:d1:26:b7:b0:38:fc:cc:77:d5:9e:61:73:e8:dd:4f:
         9f:83:83:b8:a5:bd:95:dd:89:19:a4:74:ed:5e:6d:9c:9c:b8:
         3f:9a:26:c7:a1:47:c3:80:bf:f2:24:41:3c:c1:7c:56:25:f4:
         57:a4:2d:a3:af:45:04:4b:05:3c:5b:51:33:70:5a:c2:de:ae:
         88:05:b9:2c:f5:fc:b0:a3:5f:f0:1f:d1:0f:73:a4:12:96:a1:
         97:1e:cd:ad:19:d8:0d:a2:04:9f:2b:c6:44:f1:53:09:6a:d2:
         d4:66:a4:6d:76:36:49:af:ae:a0:bb:43:7d:e3:88:a4:2b:97:
         89:f1:cd:02:e0:a8:93:65:23:92:dd:ad:47:07:3a:12:c0:3d:
         5f:ce:2f:13:f8:01:75:c3:8b:4e:d8:0f:1b:43:e6:dd:3b:42:
         7d:bf:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org