Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/MJ2inu4nUxozhoRqRCyf5swXSCM.roa
File:                     MJ2inu4nUxozhoRqRCyf5swXSCM.roa (raw, json)
Hash identifier:          rlf3qoQcU2QktULxitJHAX9c+8VQbyZbQ75BndRGACo=
Subject key identifier:   30:9D:A2:9E:EE:27:53:1A:33:86:84:6A:44:2C:9F:E6:CC:17:48:23
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       63
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/MJ2inu4nUxozhoRqRCyf5swXSCM.roa
Signing time:             Wed 01 Sep 2021 01:30:21 +0000
ROA not before:           Wed 01 Sep 2021 01:30:21 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:21 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=309DA29EEE27531A3386846A442C9FE6CC174823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:ff:e7:1e:83:08:4e:d5:3f:ac:44:6e:1e:
                    b7:16:d6:30:89:8b:ae:c5:08:09:6c:ce:e7:06:3b:
                    90:8e:a1:8d:f0:d2:63:7e:ca:00:14:c6:37:a3:74:
                    64:0f:dd:2b:64:5f:26:5c:fb:a3:9a:b7:a7:0b:5d:
                    e0:c5:29:a1:b4:00:47:fb:38:ed:e3:ee:48:2c:d9:
                    df:22:36:22:68:4a:cc:65:58:11:d6:63:31:d0:8c:
                    b2:89:c3:8e:25:e3:06:99:46:b9:4e:4d:e6:58:fb:
                    ed:d0:c9:7d:3a:4b:de:36:72:81:65:61:ac:86:ff:
                    28:40:f7:b1:00:d4:81:4f:75:09:60:87:88:3d:4f:
                    fd:e5:39:3a:68:07:7e:19:77:59:e3:0b:b4:17:68:
                    ea:9b:94:12:49:4c:22:7f:9c:0f:20:17:fe:8e:83:
                    33:49:da:85:e8:be:95:64:ca:7b:4c:53:b6:b6:91:
                    dd:9b:89:42:f3:0f:0f:77:ad:90:5a:14:e7:74:39:
                    15:ec:65:24:39:68:8b:5d:3b:3b:d7:6a:44:e4:55:
                    79:a4:58:c1:58:f0:d2:14:57:01:7c:91:5d:22:7c:
                    db:0c:c8:fe:c2:e6:7b:2c:01:90:ca:06:93:c6:54:
                    f8:20:83:91:0f:d4:83:31:9d:77:65:bd:43:c9:16:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:A2:9E:EE:27:53:1A:33:86:84:6A:44:2C:9F:E6:CC:17:48:23
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/MJ2inu4nUxozhoRqRCyf5swXSCM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:37:28:9d:90:41:4f:c0:62:c1:28:2a:e3:a3:db:4c:01:
         cb:5d:e4:81:21:6f:39:05:cd:b3:f6:16:cf:ab:78:84:03:32:
         1e:61:0e:c1:74:67:d3:40:23:70:e5:ec:ab:2f:5c:4c:77:40:
         a1:ab:c2:db:4f:3d:65:c5:4d:2b:70:6d:ff:44:42:cd:8b:00:
         0a:8b:27:eb:e5:af:3e:ef:e9:02:8e:be:e4:96:fe:34:e0:eb:
         bb:0b:77:eb:4c:03:32:0d:43:af:1c:ee:2b:0c:4d:4c:b2:23:
         99:bd:d2:d0:38:53:8d:dd:f5:48:6e:d0:5a:59:60:e7:c0:1c:
         56:ff:f7:b1:73:2a:4a:86:d1:f0:29:64:d4:d5:b7:4c:a1:36:
         b9:28:28:6d:22:3e:c8:3f:95:43:e2:07:c1:9b:5b:85:2c:20:
         cf:16:0a:a9:98:b3:6a:c5:b2:3b:09:b7:17:91:df:83:63:87:
         1b:5e:95:4a:a3:08:c7:9a:59:c4:8c:87:d3:77:c7:6f:13:65:
         ac:70:0f:40:68:60:d5:51:98:1e:93:3d:68:0f:23:bf:9a:7e:
         f6:dd:d8:14:5a:b8:90:c2:87:5a:d4:d3:aa:98:bd:9f:82:10:
         b9:51:80:45:b7:fe:3a:99:58:cc:7d:64:4f:e5:e3:c8:be:67:
         82:9c:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org