Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/CmUQGSfLpVOgmERsLPo9B38UtHU.roa
File:                     CmUQGSfLpVOgmERsLPo9B38UtHU.roa (raw, json)
Hash identifier:          T6DqivKj0eBZ7Nv3LG5Zj/4C1iJtCyeYvQOQfwcGCrQ=
Subject key identifier:   0A:65:10:19:27:CB:A5:53:A0:98:44:6C:2C:FA:3D:07:7F:14:B4:75
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       2B
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/CmUQGSfLpVOgmERsLPo9B38UtHU.roa
Signing time:             Sun 01 May 2022 01:30:57 +0000
ROA not before:           Sun 01 May 2022 01:30:57 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     63774
IP address blocks:        202.226.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: May  1 01:30:57 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0A65101927CBA553A098446C2CFA3D077F14B475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:ae:ae:c1:58:5b:e8:85:9b:2f:52:24:02:
                    a1:fa:07:62:8d:3c:aa:94:09:a3:43:6b:37:80:1b:
                    9d:7f:c4:4d:16:14:8d:e3:d9:45:15:b6:11:4a:83:
                    74:ff:cc:3f:c7:ae:b4:15:fb:90:44:8e:d3:e7:19:
                    20:10:74:d0:75:03:28:22:7f:4b:b3:cc:32:c3:44:
                    db:88:3f:d1:c1:4b:16:a2:a0:7f:08:0f:0d:0b:c9:
                    61:fe:be:7f:94:fc:c4:4e:31:e7:54:43:66:d9:27:
                    48:93:c8:92:08:ea:81:10:e6:96:7a:df:9c:f3:75:
                    91:78:f2:ab:ba:38:4c:87:57:e4:f1:78:29:06:96:
                    94:7e:ad:86:6d:ee:10:52:7c:69:bd:e8:f9:09:28:
                    6e:0c:b5:a7:e9:3a:89:1f:86:f8:09:e5:2a:8b:1e:
                    5d:dd:6f:b3:bb:7a:ea:aa:3a:2f:7b:f6:06:40:ef:
                    31:bb:94:9e:cf:a6:e2:62:a9:94:cc:40:88:e4:9d:
                    e3:83:e3:61:e7:49:ad:e9:e3:91:ae:b8:54:78:90:
                    05:ac:4c:61:b9:55:24:36:0a:51:9b:69:b1:49:ca:
                    58:81:9e:18:aa:76:02:4c:fa:86:f0:5d:3c:dc:0b:
                    5f:83:de:41:58:aa:40:cb:94:a3:51:c7:ad:9c:3d:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:65:10:19:27:CB:A5:53:A0:98:44:6C:2C:FA:3D:07:7F:14:B4:75
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/CmUQGSfLpVOgmERsLPo9B38UtHU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:60:0b:b1:b3:63:6b:7f:25:0d:50:cd:c2:fd:20:89:8c:
         30:2a:ee:d8:33:ef:17:ae:9c:db:ed:a0:97:62:fe:c5:ab:2b:
         2a:d9:9e:b1:8a:88:cf:fd:eb:a1:7f:e5:77:80:68:b1:84:b4:
         61:56:02:f6:b8:31:58:00:e6:be:dc:ff:fe:1f:b5:d9:4a:a2:
         e0:d2:2d:10:29:53:17:32:7a:40:78:c9:17:50:84:b4:35:d5:
         78:f5:f0:58:c1:a8:e6:33:4a:22:4b:63:0c:66:f3:60:2c:de:
         8c:70:4f:2a:f4:57:b0:22:a2:10:92:a2:50:91:b2:b1:f5:ba:
         e3:3f:d8:72:06:73:fa:02:a4:e9:d1:22:a4:27:7d:3d:1b:12:
         b7:07:4f:bc:7f:4a:02:b9:b9:00:1d:be:5d:df:bd:85:89:52:
         64:40:3f:81:b0:38:5b:2b:4c:26:fb:41:c2:f0:50:97:df:1c:
         5f:4f:da:53:68:08:c8:34:9a:27:28:d0:ef:11:04:a3:13:de:
         88:9d:0e:65:b7:d4:68:96:82:b4:81:d6:bd:9c:d5:ac:d7:a2:
         ae:5a:b2:0b:b5:cb:99:75:ae:62:13:1d:a4:34:e8:d6:79:43:
         73:bd:ef:80:03:34:bf:58:2b:6e:07:c5:b3:1e:f6:4b:27:b9:
         5f:d6:4a:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org