Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/B4rXoZap78if14Ks9qf8U0IeXj8.roa
File:                     B4rXoZap78if14Ks9qf8U0IeXj8.roa (raw, json)
Hash identifier:          QYleuAh6nwlNFYCjMzosVhW3hQyNiAnpiZBunWgdQlk=
Subject key identifier:   07:8A:D7:A1:96:A9:EF:C8:9F:D7:82:AC:F6:A7:FC:53:42:1E:5E:3F
Certificate issuer:       /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial:       10
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/B4rXoZap78if14Ks9qf8U0IeXj8.roa
Signing time:             Wed 18 Aug 2021 07:54:21 +0000
ROA not before:           Wed 18 Aug 2021 07:54:21 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     131949
IP address blocks:        202.226.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
        Validity
            Not Before: Aug 18 07:54:21 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=078AD7A196A9EFC89FD782ACF6A7FC53421E5E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ad:97:09:15:f2:b5:bb:3d:c4:70:09:85:64:
                    c9:0e:96:b9:22:b5:71:e2:71:4a:6b:00:68:58:a7:
                    05:04:5f:7b:1e:37:80:d6:27:b1:d6:4d:75:39:c7:
                    fc:14:92:45:21:98:c6:7f:3f:c8:5d:60:3a:ce:8b:
                    cb:00:d9:17:c4:33:87:77:86:c7:01:62:0f:b9:48:
                    0d:35:3f:2b:72:95:6d:40:25:29:3e:02:6f:c2:26:
                    a0:de:20:18:ca:b5:2d:1f:ad:6d:0d:17:6e:f2:fc:
                    bb:4f:52:1d:29:a9:16:e2:c5:13:e1:61:82:aa:2d:
                    21:45:f5:0e:b9:7a:09:94:b1:b2:06:02:3f:4c:c7:
                    8b:03:3b:56:a9:44:73:f8:4b:bc:92:40:c6:b3:b1:
                    2b:df:59:ba:cd:da:93:e5:6e:8b:12:11:be:0b:13:
                    ae:92:43:7f:f2:c9:1e:14:84:db:84:e1:38:d6:b3:
                    c6:d4:6a:46:5f:16:1f:e7:42:b6:37:a6:9a:dd:87:
                    5f:74:ed:22:a8:45:44:25:88:13:66:0e:ae:cc:fc:
                    d3:4d:6d:c1:38:6f:21:9f:df:0f:3a:03:be:3a:ba:
                    9e:db:2a:1a:07:28:05:28:3b:13:c9:2a:d1:b3:64:
                    f7:54:63:06:c3:aa:d7:82:e4:1f:a0:34:17:67:8a:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:D7:A1:96:A9:EF:C8:9F:D7:82:AC:F6:A7:FC:53:42:1E:5E:3F
            X509v3 Authority Key Identifier:
                keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/B4rXoZap78if14Ks9qf8U0IeXj8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:26:e8:59:42:a9:d0:c9:03:73:bf:ff:55:cf:fe:5a:e5:
         67:9f:f0:04:9b:f2:8a:bc:2b:e2:e0:b4:b9:c6:e6:0f:f8:a6:
         d0:d6:d3:44:3f:f0:77:dd:ee:a8:81:09:c9:d2:2e:89:7a:ce:
         5f:7e:3b:a9:b0:94:72:69:88:1c:0f:34:49:84:2b:84:ad:b8:
         61:45:cb:40:5c:73:ae:46:16:86:27:24:2a:d4:ab:de:dd:9e:
         c5:b1:d7:48:2c:a0:40:05:c9:62:4f:cd:64:d4:34:2e:d1:52:
         eb:1c:e1:77:4a:2e:73:77:a5:e4:65:95:69:7b:86:d4:10:e9:
         33:03:a4:e2:18:8c:34:5a:42:9b:20:35:7c:62:dc:ee:10:ab:
         9b:d3:94:c1:07:8a:63:e2:99:fa:72:3b:71:49:77:4d:9e:4c:
         81:fb:49:e0:04:99:6b:af:0c:5b:a2:9b:17:fe:dc:df:57:5d:
         a7:85:2f:48:fa:f2:a7:1a:80:72:eb:49:1d:14:ed:ea:b1:7e:
         a5:50:36:41:8b:77:cb:40:70:c9:46:ad:fa:7e:ee:15:27:ce:
         64:53:42:7a:d6:35:e3:2e:be:3f:9b:c4:39:72:38:0d:81:65:
         23:b3:71:db:47:08:00:8f:26:7a:d9:a1:4b:dd:27:10:0d:fe:
         85:5e:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org