Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/UP6nAO5-3MbwqbKIvuxgSZTZiK4.roa
File:                     UP6nAO5-3MbwqbKIvuxgSZTZiK4.roa (raw, json)
Hash identifier:          CGVcmA+Qe85tXSo5fwra1q+0NLhqiIw65/hcbtr5IGU=
Subject key identifier:   50:FE:A7:00:EE:7E:DC:C6:F0:A9:B2:88:BE:EC:60:49:94:D9:88:AE
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       1A
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/UP6nAO5-3MbwqbKIvuxgSZTZiK4.roa
Signing time:             Sat 25 Sep 2021 03:52:02 +0000
ROA not before:           Sat 25 Sep 2021 03:52:02 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     23816
IP address blocks:        103.2.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Sep 25 03:52:02 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=50FEA700EE7EDCC6F0A9B288BEEC604994D988AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:ff:ef:92:3c:9d:9e:1d:16:a5:56:e5:4b:
                    b0:8d:04:b3:78:4e:c7:42:16:d5:c9:c8:d6:05:2d:
                    d4:60:eb:8a:68:5f:17:e7:11:23:e6:5e:7f:d6:ba:
                    5e:59:af:26:35:a5:5e:a1:da:8a:ec:7a:d2:41:f7:
                    b9:a0:aa:f2:06:3a:cf:a5:16:00:71:23:d2:b1:2e:
                    34:a8:2e:3d:90:75:46:a3:1e:db:25:81:38:f6:59:
                    95:9b:2b:ac:12:d9:4d:99:5b:5f:4b:b8:6b:41:82:
                    66:a0:fe:eb:41:7e:30:0e:fe:ef:20:66:f6:81:d0:
                    6b:1b:d7:c7:47:d6:11:38:f1:ee:f7:61:c2:79:d4:
                    0b:38:46:17:b4:1a:54:50:47:8a:ee:a8:3c:44:f1:
                    b9:49:5b:1c:cb:65:7c:ea:95:44:f4:ce:be:21:c6:
                    83:9f:f8:4a:23:ad:80:f6:9b:04:4a:e6:6b:2f:2b:
                    80:63:29:57:c8:90:6e:48:52:7f:14:ab:eb:75:bd:
                    a9:dc:63:95:0c:65:ec:d0:f4:4f:22:07:a7:69:16:
                    92:84:29:c8:52:d9:5b:43:14:51:a2:99:7c:ce:be:
                    73:c0:65:eb:cf:15:b6:16:b5:06:cb:44:34:a6:b9:
                    86:ea:d0:99:49:9b:48:3c:fa:e8:1e:32:7f:07:76:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:A7:00:EE:7E:DC:C6:F0:A9:B2:88:BE:EC:60:49:94:D9:88:AE
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/UP6nAO5-3MbwqbKIvuxgSZTZiK4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:71:a6:eb:63:fb:64:7f:d4:a6:59:3d:9f:06:69:a3:b2:
         c6:05:05:94:cd:bf:62:75:8a:8d:58:31:31:81:c1:6d:00:36:
         83:d0:73:64:6a:a2:7e:ba:0a:70:30:0f:31:ee:ca:a2:33:f5:
         55:e3:6a:c2:a9:2a:c6:2e:24:0d:69:16:fb:81:c7:35:89:9c:
         3b:9d:03:fd:e3:2d:80:fe:1a:b4:30:5c:6a:50:82:5d:f4:a8:
         b6:a9:97:3a:60:3f:68:98:ea:54:3e:72:79:f2:a2:27:94:1b:
         37:49:92:bd:38:af:df:b3:fe:ac:d6:32:d0:10:e5:5e:b5:78:
         ff:89:12:32:48:8a:94:21:e4:1f:fb:ef:a4:c4:ae:7f:71:a2:
         5e:a7:f1:4d:16:6a:7d:14:21:22:68:57:48:b0:89:2d:c8:4c:
         a7:63:18:f7:7d:09:fb:1e:f6:5a:b0:aa:c7:0a:eb:16:71:57:
         61:77:6c:04:d2:2d:26:e3:ed:6b:ee:b5:4d:27:50:be:e1:6f:
         b4:44:cd:b9:2c:4b:3b:98:32:ca:4d:81:41:d5:4e:fc:b2:9d:
         ab:5c:11:de:f7:d3:f6:e7:06:34:d7:cc:40:77:2a:0f:0c:c5:
         27:64:7a:a7:02:77:20:a7:17:c9:da:2e:bc:5e:f2:7d:cb:27:
         30:c3:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org