Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/LXwg2v6wU9J7LbnhsypXluV4pBM.roa
File:                     LXwg2v6wU9J7LbnhsypXluV4pBM.roa (raw, json)
Hash identifier:          vbKKvKv4GfPhNWaHPMLfEOXRiFUJzu+U/d8ZrcvQZ1M=
Subject key identifier:   2D:7C:20:DA:FE:B0:53:D2:7B:2D:B9:E1:B3:2A:57:96:E5:78:A4:13
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       9C
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/LXwg2v6wU9J7LbnhsypXluV4pBM.roa
Signing time:             Mon 01 Aug 2022 01:28:50 +0000
ROA not before:           Mon 01 Aug 2022 01:28:50 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        202.222.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:50 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=2D7C20DAFEB053D27B2DB9E1B32A5796E578A413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:99:ae:2c:0c:2c:83:fe:7d:98:bb:01:24:
                    c4:1c:b3:db:57:c8:cb:cb:da:a2:9e:1b:13:c6:15:
                    ad:1b:68:9d:c4:d9:49:47:19:40:ea:ab:db:40:6d:
                    40:17:2b:07:4d:2d:e3:ff:32:4a:e7:e8:94:b8:75:
                    2e:7f:c8:d0:79:74:88:e7:25:d0:1f:11:6c:5d:45:
                    0d:f7:b7:5b:3b:02:f7:44:05:6d:3a:e6:47:2c:a6:
                    6b:39:b0:bc:7e:81:be:ff:44:67:ce:54:9e:a2:db:
                    1f:29:18:dd:fd:ce:c1:f9:1e:ea:8f:2c:04:ce:42:
                    a9:b9:00:28:83:a9:a4:a8:cd:7c:7f:b1:cc:9a:a8:
                    e3:f1:bd:81:d5:f5:f0:ef:29:15:83:c4:2f:21:ae:
                    0d:63:d3:91:4a:11:b0:ec:86:4e:13:ee:b9:1c:15:
                    32:b4:13:80:77:54:3f:af:6a:ce:19:1e:12:fc:3b:
                    29:e9:38:ed:4a:10:45:b9:0b:e6:f8:89:e2:47:2b:
                    96:4d:bb:cf:de:e3:40:bb:eb:b0:16:e5:23:0e:bf:
                    82:c8:ad:6f:ee:21:72:b3:fc:a2:65:bd:9a:de:d6:
                    ef:ad:3a:b7:28:51:2d:b3:a9:fd:66:72:d9:7f:8f:
                    1f:52:71:dd:e7:a1:aa:65:89:22:9e:4c:d6:df:c5:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7C:20:DA:FE:B0:53:D2:7B:2D:B9:E1:B3:2A:57:96:E5:78:A4:13
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/LXwg2v6wU9J7LbnhsypXluV4pBM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:78:1d:c2:a6:a5:81:93:88:38:6a:c6:ae:50:78:ed:ef:
         71:7d:bb:f3:ae:b8:87:45:5a:9f:92:73:38:6a:fc:e8:83:45:
         1c:8d:5c:79:82:0c:1d:4d:5c:69:a3:13:50:f9:63:bb:38:9b:
         b2:b2:24:36:96:a2:85:7b:3f:07:44:de:ea:9a:32:ca:72:5c:
         4d:07:19:db:38:9c:10:6a:20:59:6b:86:d9:b2:65:e1:32:a7:
         75:b0:52:f4:f4:64:77:a9:8f:d6:f8:b7:2b:9f:fd:6e:8f:97:
         e7:19:0f:3a:1e:80:3f:8a:b8:be:84:3d:72:cb:a7:af:a7:27:
         11:c5:6b:28:a8:2c:71:82:9f:e6:b8:e0:d9:9e:ed:02:0e:56:
         51:ac:a8:e9:bc:bc:45:ee:a7:c1:e1:81:55:ae:5d:ff:e4:b1:
         75:6c:12:e3:6c:dd:0d:9b:ed:5a:3d:19:4e:23:45:1b:7d:69:
         02:66:fa:bb:8a:32:2e:78:26:90:9c:ac:a9:d5:a5:67:4a:af:
         8e:df:10:26:05:3d:63:47:3e:ac:33:d0:87:9e:6a:df:55:f7:
         44:3c:5b:57:ef:15:dd:eb:2d:a0:37:f0:7c:5a:eb:1a:49:40:
         25:86:d3:54:ab:ca:c1:56:ad:ac:ce:51:65:2c:0c:6a:43:3e:
         8e:50:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org