Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/MJTqEunNwfqxPDfOpBcRN3UtrpQ.roa
File:                     MJTqEunNwfqxPDfOpBcRN3UtrpQ.roa (raw, json)
Hash identifier:          Bs58N4Ygbw3BRg+whxPVyCjLBQXJoPyYmTVj7BOR69Y=
Subject key identifier:   30:94:EA:12:E9:CD:C1:FA:B1:3C:37:CE:A4:17:11:37:75:2D:AE:94
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       97
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/MJTqEunNwfqxPDfOpBcRN3UtrpQ.roa
Signing time:             Mon 01 Aug 2022 01:28:48 +0000
ROA not before:           Mon 01 Aug 2022 01:28:48 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:48 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3094EA12E9CDC1FAB13C37CEA4171137752DAE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4e:6b:55:d3:9e:48:8a:1e:d4:4f:2e:b7:2b:
                    99:d6:64:09:f5:d7:13:8c:15:d5:36:d1:26:86:51:
                    8f:65:0a:e9:f4:84:4a:0d:76:94:d6:52:b0:e4:33:
                    65:59:bd:92:16:55:df:6b:1b:79:a0:de:c7:08:33:
                    eb:a0:82:79:d7:e1:cb:c1:40:2c:5a:7c:a7:e5:c3:
                    87:e0:b6:2c:b2:61:97:3a:e0:57:78:ac:7a:33:2c:
                    be:c8:9a:80:28:42:69:47:bf:45:88:25:92:04:25:
                    ef:7c:53:d7:3a:4e:4a:7d:11:ac:66:bc:27:f9:d9:
                    c4:16:ad:3c:8a:69:66:af:17:69:9e:b0:b7:32:ad:
                    11:5a:9d:c4:13:ea:4a:35:fb:af:92:19:73:84:f2:
                    ca:b4:e0:0d:f3:f5:ca:72:e8:fc:43:1a:84:3e:d2:
                    50:35:46:b9:7a:89:d8:ad:06:56:e9:1d:ee:b3:85:
                    42:9e:a1:87:6d:2d:f6:0e:c1:1c:1b:32:46:c2:45:
                    fd:44:c5:61:79:4b:16:80:cd:6a:d3:c6:c0:c7:cb:
                    37:34:be:5b:73:56:88:27:25:2e:a6:7c:df:fe:18:
                    56:9b:b0:06:7d:a6:ec:9c:b2:bc:b7:48:c4:11:48:
                    ca:c0:57:17:11:18:8e:f2:d3:3a:6b:a8:3a:58:e3:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:94:EA:12:E9:CD:C1:FA:B1:3C:37:CE:A4:17:11:37:75:2D:AE:94
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/MJTqEunNwfqxPDfOpBcRN3UtrpQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:b4:8c:c2:a5:86:23:14:eb:54:94:97:2b:f0:1b:ab:a3:
         da:c9:7d:da:f8:e6:96:1e:e3:61:b6:db:65:76:94:e0:e6:a3:
         57:d9:04:93:b7:a3:41:41:3d:bf:ef:cd:fb:9f:b3:c9:67:ef:
         2c:a2:48:38:ee:fd:23:04:9d:61:f0:fb:9e:bf:38:a6:f4:c2:
         eb:86:a6:5c:9c:83:e4:b9:e0:0d:57:ce:06:cb:2c:93:34:78:
         79:d7:2b:1c:b0:63:3e:8c:8f:63:8b:9e:cb:ad:34:a6:12:bf:
         e5:0d:75:51:0a:da:49:6c:02:5e:c0:89:48:ba:25:56:ff:68:
         b0:f0:5a:57:35:02:df:3e:1d:6e:90:bf:92:ae:b8:0e:53:ec:
         f5:c5:26:f6:71:17:5b:c7:98:67:a5:a2:42:7b:fd:7d:1f:85:
         7b:fb:b2:ce:f4:2d:5d:16:84:9f:ab:3e:a4:13:ff:36:85:4c:
         0a:34:a0:fb:73:66:29:c7:e2:e9:42:2d:5e:2b:5b:6d:44:4e:
         c8:a6:4a:d4:2e:e7:de:8d:7e:80:25:05:ad:3f:44:e5:c5:a8:
         63:10:90:f9:b5:ff:54:87:c3:10:4f:72:94:68:bd:46:9c:e3:
         fc:a5:1c:a2:ff:3c:95:0c:b0:3c:77:f0:af:c8:93:0b:06:d1:
         93:33:04:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org