Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/1SIXLUH7MG0epJKjEA7cBdNJkmA.roa
File:                     1SIXLUH7MG0epJKjEA7cBdNJkmA.roa (raw, json)
Hash identifier:          NOMUY2iyVE8i3gTSyKS6DrFoMY9l/XWpG9SfwB7nVnY=
Subject key identifier:   D5:22:17:2D:41:FB:30:6D:1E:A4:92:A3:10:0E:DC:05:D3:49:92:60
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       68
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/1SIXLUH7MG0epJKjEA7cBdNJkmA.roa
Signing time:             Wed 01 Sep 2021 01:30:22 +0000
ROA not before:           Wed 01 Sep 2021 01:30:22 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        202.181.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:22 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=D522172D41FB306D1EA492A3100EDC05D3499260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:9f:18:97:23:fb:70:8a:d8:d7:35:38:28:
                    44:0c:a1:f4:58:83:ff:9e:0e:30:9a:e9:a1:be:23:
                    2d:e7:fb:bc:da:0d:9b:5b:e6:6b:fd:9f:75:ce:f4:
                    32:eb:25:76:a7:67:05:56:10:0d:17:0f:6d:7a:f9:
                    a1:af:c1:fb:cd:40:7f:a4:20:82:ac:bb:14:a2:d1:
                    fe:69:9f:1c:b0:39:3b:7f:db:8b:80:93:94:91:c8:
                    a9:df:d6:f0:49:a1:37:be:20:82:33:3a:52:cb:91:
                    95:9e:2c:3b:30:62:4d:22:fb:50:84:9a:a5:cc:e1:
                    1a:9f:52:af:4d:92:73:75:8a:af:73:5b:60:48:4e:
                    3f:78:6f:de:e7:c2:b1:fb:6e:ef:ee:56:2f:c5:bf:
                    f6:4a:68:2a:c8:05:4e:01:09:04:13:c8:a4:35:1d:
                    a5:bc:7d:9d:43:98:fa:71:6f:5f:9c:6a:f9:c7:34:
                    64:55:ac:c7:49:a1:3c:6e:fd:0a:29:f9:b9:47:d3:
                    02:6b:88:be:3c:fa:0b:71:c4:67:62:a9:d8:4c:35:
                    7c:26:fc:80:a3:1a:ec:e1:92:52:fc:5b:f1:42:1f:
                    2d:0c:2b:32:d0:c5:a0:65:12:54:35:10:a5:e4:65:
                    88:20:2e:7f:96:7f:6c:00:05:f5:8a:8b:47:7e:45:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:17:2D:41:FB:30:6D:1E:A4:92:A3:10:0E:DC:05:D3:49:92:60
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/1SIXLUH7MG0epJKjEA7cBdNJkmA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:07:78:1d:c5:25:92:ab:4f:86:49:9a:73:92:83:ef:d1:0a:
         86:88:a1:cc:e9:46:48:5f:01:7e:de:da:89:22:1a:84:f5:44:
         d4:b2:26:d5:f2:7d:b9:1a:f8:1a:47:83:3b:e0:64:f8:b7:d6:
         7e:b8:2b:e5:86:90:35:be:ad:ce:23:2c:01:62:dc:6f:77:ae:
         33:90:69:1a:c7:59:ed:39:f5:76:ed:8f:21:eb:b9:f6:b7:16:
         a8:ff:e7:b5:1c:fe:de:11:87:85:5e:43:ad:9b:6d:1c:c7:8d:
         d8:cd:f6:1f:01:eb:e2:13:13:05:01:6d:6f:ad:13:db:fe:1d:
         6c:21:4e:6d:34:73:c6:53:c4:85:b1:af:c3:51:25:0f:cf:2c:
         35:5b:c4:ac:b6:bc:b8:73:03:f1:26:7d:a3:d3:f2:d6:d2:1f:
         09:42:93:07:93:55:a6:0f:b9:40:94:ce:ee:ef:ad:23:9d:60:
         f4:28:87:b1:2c:23:9c:a2:d3:67:71:41:fc:04:a2:e8:b0:79:
         36:69:97:8f:90:e0:40:64:fe:96:dc:10:36:da:b8:73:78:24:
         47:ea:1b:43:cb:47:ec:43:3b:d1:e9:02:71:40:8c:b8:4c:3f:
         45:5c:46:75:a4:b7:bd:4d:fd:61:58:5e:4e:b9:df:f4:a4:b4:
         d2:8a:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org