Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/xRtc2vnPgMoa4ywY2GkMmlFZTQ4.roa
File:                     xRtc2vnPgMoa4ywY2GkMmlFZTQ4.roa (raw, json)
Hash identifier:          G7k5mEn2yQ5RL5nZo0XUsW4bnjXizxRBZ2maxSiV7Ac=
Subject key identifier:   C5:1B:5C:DA:F9:CF:80:CA:1A:E3:2C:18:D8:69:0C:9A:51:59:4D:0E
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       5E
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/xRtc2vnPgMoa4ywY2GkMmlFZTQ4.roa
Signing time:             Sat 01 Oct 2022 01:28:57 +0000
ROA not before:           Sat 01 Oct 2022 01:28:57 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     131079
IP address blocks:        210.173.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct  1 01:28:57 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=C51B5CDAF9CF80CA1AE32C18D8690C9A51594D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:0d:74:bd:d3:d1:5e:1c:a7:0e:75:c6:4c:
                    c7:14:56:23:d3:e9:19:19:09:6b:60:6f:f8:08:27:
                    97:19:76:ad:be:3a:ef:15:75:f1:97:d4:b0:2a:5d:
                    e2:0b:91:d9:aa:7b:11:5f:98:64:d0:8b:c7:b7:c4:
                    74:7f:ac:82:ac:4f:c6:95:81:4d:04:e1:ba:d4:91:
                    64:9c:28:07:e3:78:37:94:72:f6:81:a3:08:5c:53:
                    a8:26:8b:d2:89:8c:53:a4:72:ce:86:31:6e:95:63:
                    56:b2:b1:7c:d6:03:a0:e6:36:a4:a0:f2:48:22:d8:
                    33:9e:fc:b5:b9:90:1a:e5:06:a8:9d:bc:21:58:6a:
                    df:d0:47:2d:fc:61:eb:7b:cb:7f:59:08:33:02:1e:
                    74:7b:a3:40:13:0d:c5:7b:64:42:2f:dd:af:56:d2:
                    f6:a9:cd:23:62:b8:0f:da:86:b5:bd:f0:ef:3a:e6:
                    c1:01:c9:07:53:99:69:45:f7:cb:e9:e1:2d:3b:d8:
                    e3:b1:cb:b4:4a:0b:2f:ce:8e:66:cb:8b:18:0a:08:
                    91:e8:29:e5:d0:64:1f:05:0c:47:53:c9:e9:70:8d:
                    60:a9:f7:4d:84:c5:3b:f0:99:e5:a1:c6:4b:e0:6e:
                    00:5e:89:5d:a7:06:f2:20:4f:1e:e0:2b:2d:02:99:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1B:5C:DA:F9:CF:80:CA:1A:E3:2C:18:D8:69:0C:9A:51:59:4D:0E
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/xRtc2vnPgMoa4ywY2GkMmlFZTQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:52:51:2f:cd:f6:ce:f2:2a:6b:05:56:bf:04:7b:9b:14:
         93:0a:4e:77:9e:65:7a:38:e7:79:ed:c2:2f:9e:f1:e6:ef:8e:
         80:88:4e:f7:29:d1:d7:48:8c:a6:38:35:64:54:78:90:41:8b:
         69:93:55:dc:36:ee:e9:92:8a:8d:3c:5c:a4:3d:99:9d:88:af:
         23:2f:f7:ab:97:d6:0c:fe:2b:81:ca:3d:26:a1:43:2e:26:1b:
         1f:5d:2b:73:a4:77:13:46:44:49:90:28:d2:2c:2f:b1:c0:f8:
         8d:76:63:82:4b:fd:54:75:b6:94:83:9f:78:6f:91:c1:0c:a9:
         08:92:81:a0:f2:05:12:c2:4e:63:50:fb:86:32:47:64:44:51:
         8e:86:65:06:c4:62:ae:a7:ec:ee:47:e8:8a:e3:42:1c:4b:df:
         48:2a:f4:fc:e3:cd:f7:57:60:02:99:ef:df:dd:d3:73:d6:4c:
         bd:32:37:f4:57:b8:d1:ae:7d:4b:0b:55:ee:79:a3:4b:29:56:
         08:ed:8d:41:53:10:b7:7d:fe:b3:14:fc:49:1c:b5:79:6b:63:
         45:df:1c:4f:6c:37:ce:09:5b:5b:bf:10:8a:10:73:7d:5a:8c:
         e4:da:a3:f1:68:59:42:2e:6a:00:3d:94:98:b8:7f:06:83:c4:
         12:53:6b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org