Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/8wrhayITiojz6Pj7UIIRmEL7LRc.roa
File:                     8wrhayITiojz6Pj7UIIRmEL7LRc.roa (raw, json)
Hash identifier:          HTpSjeqEdP1jBMHTLZrJ1S8kTwjISzyFeKM4WKlFBZg=
Subject key identifier:   F3:0A:E1:6B:22:13:8A:88:F3:E8:F8:FB:50:82:11:98:42:FB:2D:17
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       60
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/8wrhayITiojz6Pj7UIIRmEL7LRc.roa
Signing time:             Wed 01 Sep 2021 01:30:20 +0000
ROA not before:           Wed 01 Sep 2021 01:30:20 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        153.121.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:20 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=F30AE16B22138A88F3E8F8FB5082119842FB2D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:10:b6:7d:dc:94:db:b6:ea:da:d0:bb:61:
                    95:8e:90:13:3f:34:e8:9c:a4:66:df:fc:c0:4a:a7:
                    de:8e:27:85:df:8d:67:1c:2d:84:a6:d3:94:d3:7c:
                    d2:0a:3a:41:c4:49:86:cd:98:f2:10:40:85:c3:af:
                    a7:6b:88:d6:8c:59:07:19:6f:26:25:88:96:8f:13:
                    a1:ac:c8:b4:ed:db:bf:44:5f:6a:e4:de:a1:ef:ec:
                    c7:9f:fc:0f:6a:cf:9f:13:61:78:a6:c0:33:59:26:
                    4f:41:c4:d4:73:56:15:35:76:5d:7d:e5:95:48:c9:
                    6d:da:8e:74:17:1a:ed:0d:51:2c:ca:fb:e6:b2:09:
                    1d:1f:c4:46:c8:d8:6b:b7:8e:23:44:60:02:95:0b:
                    3b:b8:73:55:19:00:a9:a5:a5:58:14:13:d8:ab:6b:
                    7d:5f:7c:a6:19:67:bc:f8:06:a4:d9:34:32:ff:5c:
                    46:6f:ce:1a:ef:49:c5:ac:5e:67:a2:0d:ff:d8:88:
                    40:fd:05:98:2f:d3:7b:fa:ce:f2:d7:29:ff:8e:b5:
                    70:72:1c:67:11:5f:a7:09:55:54:14:66:59:57:d7:
                    75:cf:de:dd:31:d2:07:51:b7:32:51:9b:63:b1:c0:
                    b6:17:51:20:b7:e2:e7:91:6d:b1:2f:7e:08:53:94:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:E1:6B:22:13:8A:88:F3:E8:F8:FB:50:82:11:98:42:FB:2D:17
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/8wrhayITiojz6Pj7UIIRmEL7LRc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:b1:2d:38:60:da:1b:76:a4:de:f1:e6:25:3d:83:e9:0c:
         c6:09:82:65:7b:25:5b:04:35:9c:59:88:d9:88:9d:81:43:1b:
         61:a1:10:9f:5c:2d:0c:b4:58:e1:9d:98:14:b5:39:bf:73:00:
         4c:a4:2f:81:7d:b1:3b:86:63:fc:aa:75:36:cd:10:9e:a9:13:
         37:32:aa:a0:f6:97:1e:d6:47:c6:a2:76:70:0f:8e:fd:36:ee:
         46:bb:74:84:f7:97:c7:92:4a:1e:32:e5:ed:ec:8d:36:f3:39:
         b6:19:5a:a3:aa:68:81:de:3c:fa:c7:75:09:55:4c:93:70:41:
         11:fe:d2:62:f2:4f:eb:db:9f:34:55:d2:e5:7d:5b:9e:1d:3d:
         c2:82:64:5c:4f:b2:9f:0d:05:54:e1:1d:16:0b:55:88:6f:d6:
         dd:93:5f:4b:79:f0:8d:28:15:83:ab:f2:65:71:45:84:92:10:
         f2:8e:a1:ac:bc:82:d4:7f:22:47:f0:80:d8:cc:44:dd:3a:25:
         a5:f8:a0:01:2d:f0:ab:4c:12:76:47:9b:8e:69:29:f7:a5:50:
         ac:ca:a8:5b:d8:a2:f0:06:4f:70:bb:40:5a:93:9d:5a:ab:2e:
         53:40:a8:17:e7:42:10:77:2a:1d:8f:40:c0:81:d4:31:dd:6c:
         71:1d:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org