Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/4KrRQQZV8Yp8vcatf2fuJSDkBPI.roa
File:                     4KrRQQZV8Yp8vcatf2fuJSDkBPI.roa (raw, json)
Hash identifier:          WWuT5yc+JqPFgVGqkIsRZB8h8FSL2eAY6VWXsD9JNdE=
Subject key identifier:   E0:AA:D1:41:06:55:F1:8A:7C:BD:C6:AD:7F:67:EE:25:20:E4:04:F2
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       2E
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/4KrRQQZV8Yp8vcatf2fuJSDkBPI.roa
Signing time:             Thu 01 Sep 2022 01:28:53 +0000
ROA not before:           Thu 01 Sep 2022 01:28:53 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     24296
IP address blocks:        210.171.32.0/19 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Sep  1 01:28:53 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=E0AAD1410655F18A7CBDC6AD7F67EE2520E404F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:21:c2:30:57:8e:ec:6e:53:ec:56:ce:4e:
                    d7:54:0e:cb:8e:ec:2a:2e:05:fb:4d:da:91:4a:fc:
                    d8:50:c1:1e:d0:ba:91:af:b3:63:f9:99:78:3b:03:
                    b0:6a:c4:40:6b:a8:95:6b:a4:cb:d1:8a:f3:85:5c:
                    d2:4e:9e:d9:89:10:ab:6e:99:bd:05:8d:56:98:96:
                    04:00:36:c4:81:33:37:0b:fe:3f:eb:18:31:ae:13:
                    7d:53:bb:af:c9:7f:86:30:6e:1d:ce:9e:e6:6f:42:
                    db:af:47:dc:41:fa:d4:d7:b8:ef:85:69:7f:5f:6e:
                    6a:55:16:8b:86:a9:09:b2:5c:21:c3:17:83:f4:24:
                    a1:94:5a:38:89:8e:9f:51:f3:4b:c5:ba:22:de:36:
                    e2:22:4b:a3:69:6f:7c:d0:58:8d:81:3a:4e:c4:b9:
                    bd:79:c5:68:1a:97:76:32:97:f6:d8:32:11:d1:24:
                    08:cc:1d:c2:6c:46:71:78:73:11:9d:2f:c5:ac:48:
                    d3:63:6a:06:fe:20:df:f3:e5:5f:03:2e:ec:ca:a3:
                    75:d0:84:e5:6d:18:98:05:90:2d:1b:af:de:43:40:
                    5f:b0:0a:bd:bd:42:01:f7:37:bc:66:c9:3f:52:dd:
                    b8:4c:c4:94:95:8e:d0:52:eb:2d:8b:de:76:73:a5:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AA:D1:41:06:55:F1:8A:7C:BD:C6:AD:7F:67:EE:25:20:E4:04:F2
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/4KrRQQZV8Yp8vcatf2fuJSDkBPI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:fc:93:15:25:1b:17:22:9d:8d:7f:23:02:b5:a6:9c:be:1a:
         dd:fd:d4:38:ef:dd:ac:53:b9:95:80:4e:1b:fb:e9:7e:e4:8f:
         6d:bc:36:db:94:eb:ed:05:48:52:08:f5:9f:1d:d6:24:be:47:
         20:2d:8f:c4:d6:ea:53:6c:ff:59:9b:fc:be:55:c3:41:38:07:
         ef:89:14:31:4c:46:3e:15:41:07:11:b6:47:ef:2a:dc:ca:b4:
         85:e1:a0:b9:43:14:f5:be:1b:72:d0:84:3b:93:b0:11:82:e4:
         1c:05:b7:78:19:62:28:bc:04:75:a8:57:11:74:e9:62:19:4d:
         9a:77:a0:fc:bc:30:84:a5:42:8b:43:3c:c4:bc:a3:16:a4:2a:
         fa:2a:02:c0:9d:56:1f:6e:ac:05:53:b2:ec:a6:ca:79:cb:38:
         32:01:39:4e:bd:ae:3e:8a:c7:85:01:de:bc:72:9b:b7:6a:a0:
         4b:91:90:a1:fd:51:d0:a5:49:da:f2:c9:f9:ff:c5:d5:71:c3:
         74:45:77:4e:2f:ed:d3:06:e2:c8:dc:d4:f3:b7:ff:d2:94:db:
         23:79:8d:fb:54:46:a2:c9:61:13:72:25:0a:6f:8d:a9:a7:e1:
         48:21:c0:ab:d6:e6:da:c4:29:79:75:c1:77:ed:f6:25:d9:09:
         0c:e6:25:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org