Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/mh9Zt86sOK24sSRNIHq1sEtrUlM.roa
File:                     mh9Zt86sOK24sSRNIHq1sEtrUlM.roa (raw, json)
Hash identifier:          QWX+oO9pD70Vy0ChlASWsFL1Tf1HxSyHKuQMHo27c24=
Subject key identifier:   9A:1F:59:B7:CE:AC:38:AD:B8:B1:24:4D:20:7A:B5:B0:4B:6B:52:53
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       2B
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/mh9Zt86sOK24sSRNIHq1sEtrUlM.roa
Signing time:             Tue 01 Mar 2022 08:33:58 +0000
ROA not before:           Tue 01 Mar 2022 08:33:58 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     9351
IP address blocks:        219.103.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar  1 08:33:58 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=9A1F59B7CEAC38ADB8B1244D207AB5B04B6B5253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:4a:66:65:c9:2d:24:ec:ef:56:6d:77:62:
                    7f:e0:2f:b0:27:fb:b1:c6:0b:ae:52:b7:c1:f1:c1:
                    8d:c2:f6:57:fe:be:4b:5a:bc:8e:67:12:bc:5a:cb:
                    ac:3f:1f:1e:a7:43:93:bf:59:3e:93:f6:6b:16:b7:
                    f1:6d:a0:80:c6:c6:e5:3e:5d:df:27:38:6c:04:d9:
                    77:0c:86:dd:f7:1f:49:ac:95:f1:81:ae:18:35:57:
                    da:b2:b1:0f:e8:09:2e:7a:80:ce:ab:67:07:ec:79:
                    c3:c9:fc:e7:c2:85:a0:ee:df:31:6c:e2:2f:9a:e8:
                    1b:7e:db:b7:90:2c:1c:2f:ab:86:a2:81:7c:70:a3:
                    b1:e2:be:e1:b3:09:72:ad:ed:a7:c7:21:22:34:7b:
                    e0:ed:48:79:90:b8:bc:72:bf:8f:76:69:cf:70:01:
                    2b:d2:d4:f4:77:b7:da:d3:2d:17:cf:f5:97:8c:9a:
                    66:57:f5:43:e3:45:86:8f:f2:de:87:02:17:6d:39:
                    36:d7:ac:bc:ec:cd:6e:a9:8c:b5:bd:ff:8d:9c:a2:
                    48:b2:c0:d9:87:37:36:5d:7f:bb:6a:28:a4:9f:67:
                    04:19:49:d8:00:d3:eb:92:ca:fe:a9:63:e8:7e:c3:
                    ba:e9:43:f9:2f:2f:00:15:e0:bf:4c:ae:dc:5e:26:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1F:59:B7:CE:AC:38:AD:B8:B1:24:4D:20:7A:B5:B0:4B:6B:52:53
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/mh9Zt86sOK24sSRNIHq1sEtrUlM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.103.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:2e:75:2b:62:41:85:d6:57:6a:d4:f8:b7:d7:48:24:a1:
         3d:fa:26:dc:33:ec:5e:73:1d:c4:8b:bb:b1:e7:60:59:72:43:
         c3:57:df:6b:b3:1e:5d:3f:74:89:fa:96:67:4f:de:14:68:be:
         79:c5:9f:42:0a:7a:bd:69:f8:45:59:b5:96:dc:2f:30:2a:59:
         dc:ea:fa:62:b0:57:45:0b:d2:7e:a3:e6:6f:b1:6a:98:81:69:
         20:82:c9:75:9a:91:10:6e:97:fc:b0:58:8d:1a:b4:fa:f2:2f:
         bb:03:69:10:82:a9:c6:10:51:72:a2:9f:ac:0e:5a:c7:80:c1:
         04:d1:06:9e:67:d6:55:46:10:31:23:49:fb:b6:5c:b6:1e:e5:
         b5:b7:3b:f2:d1:0c:1b:eb:35:2b:e4:87:3d:e1:78:3f:3a:85:
         f4:e3:1d:1e:fb:74:92:57:17:9d:5c:7d:09:23:e7:67:d0:85:
         25:88:76:37:73:97:25:8a:ac:54:ed:67:a7:24:3a:04:da:d7:
         b1:b6:d0:83:d7:4b:d2:31:dd:2d:49:aa:27:6d:d8:1a:36:33:
         ad:2d:6a:75:60:3a:88:3b:db:c2:7e:37:b7:06:9a:c7:fe:bd:
         c2:ee:5c:7f:7c:eb:e9:f5:01:e3:47:7c:90:5b:05:83:f7:25:
         73:ab:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org