Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/dBnLAfl8sxxJ3LXKF32WXF-dspA.roa
File:                     dBnLAfl8sxxJ3LXKF32WXF-dspA.roa (raw, json)
Hash identifier:          ipUJZSCJ8l7YYu/IqzDkzYnOho8V7kB+W75ELLdQ4eQ=
Subject key identifier:   74:19:CB:01:F9:7C:B3:1C:49:DC:B5:CA:17:7D:96:5C:5F:9D:B2:90
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       17
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/dBnLAfl8sxxJ3LXKF32WXF-dspA.roa
Signing time:             Wed 01 Jun 2022 01:29:02 +0000
ROA not before:           Wed 01 Jun 2022 01:29:02 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24277
IP address blocks:        115.166.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun  1 01:29:02 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7419CB01F97CB31C49DCB5CA177D965C5F9DB290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:d4:7d:98:33:b2:5f:bb:2a:0b:c6:23:53:
                    ae:4b:d0:99:85:8a:3e:1b:a6:0e:f9:4d:61:13:f9:
                    6c:62:2b:05:12:e9:b0:91:d6:ae:ec:d0:9f:3b:5f:
                    2c:1f:22:9b:7d:f3:7c:8c:ac:eb:a7:31:4f:f9:d4:
                    16:75:6d:90:64:e1:d9:57:3a:2c:ae:3b:35:ea:df:
                    a3:1d:a6:3f:cd:b9:37:4e:84:23:48:d3:14:7d:58:
                    07:86:f2:7a:cd:ca:af:02:33:13:b5:2a:c6:6e:eb:
                    54:6f:c3:c5:8a:c0:3a:9f:c2:83:0b:5d:25:6f:2e:
                    4a:af:3f:66:de:67:6d:3f:a0:54:27:b8:66:c6:bf:
                    bd:b7:9c:52:b9:b4:41:65:91:bf:e5:e2:92:31:d3:
                    42:23:40:1e:7a:d6:4e:f9:e3:72:88:43:6c:31:89:
                    a2:18:c3:19:3c:d6:97:27:9a:e7:eb:3d:03:19:1e:
                    23:84:9e:b3:ac:ed:a6:37:fa:0f:3c:74:da:d3:65:
                    be:47:78:6b:35:48:8e:1f:fc:27:88:6e:68:65:2a:
                    ce:51:33:d7:a8:07:9e:a7:e2:3d:50:b2:db:d6:b2:
                    e4:8f:45:57:8e:30:34:98:d7:96:14:6f:21:55:8e:
                    97:03:fd:45:1f:d6:8a:3f:ca:1b:c5:1e:91:12:37:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:19:CB:01:F9:7C:B3:1C:49:DC:B5:CA:17:7D:96:5C:5F:9D:B2:90
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/dBnLAfl8sxxJ3LXKF32WXF-dspA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:bc:8b:50:bf:f2:bf:66:60:1a:06:91:af:81:b6:48:51:1c:
         50:1c:14:24:cb:1b:c8:e9:5f:9a:57:3e:7c:10:e4:a4:2a:ab:
         20:b0:7a:a3:df:b1:66:44:91:f4:d4:6a:1e:b5:aa:26:2a:16:
         38:31:8a:bf:0f:e4:47:ac:a1:ed:f7:87:33:57:96:57:48:43:
         79:5f:e3:e0:52:c6:ca:b7:38:c3:7e:ea:13:9b:25:f2:eb:aa:
         e8:67:07:b5:14:c4:76:d5:40:22:a8:a7:35:fb:b4:95:8f:b8:
         bc:1b:2f:81:4f:45:d1:28:1e:6e:59:95:fb:fd:cc:29:5a:c6:
         02:9a:c9:f0:5b:5a:05:85:8c:22:5b:71:9e:71:67:05:a0:3c:
         1e:fb:8e:97:c0:ab:75:62:96:0f:b6:b9:9d:6c:1c:a7:6c:03:
         3b:4a:c0:5d:49:77:f6:ec:50:7b:64:fd:51:61:0d:91:0d:bd:
         59:0b:13:15:f3:cb:54:44:b6:18:c2:4c:b8:a8:4a:ce:5b:64:
         52:f7:c8:02:08:65:ff:f4:c0:88:e3:40:bd:df:d9:6e:37:3f:
         40:15:7a:2b:6a:3b:cb:08:6e:f6:d5:1b:ca:a9:4a:63:b1:00:
         43:57:f5:b9:38:ce:33:07:7a:b4:e8:d1:7b:57:2d:d1:a8:fa:
         71:84:71:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org