Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/R-KhiGa3RTyU9iWsx1kfkUbY_yI.roa
File:                     R-KhiGa3RTyU9iWsx1kfkUbY_yI.roa (raw, json)
Hash identifier:          lBpLQ8iTuQbAwev/dCEl6Lf4/rETlo4f4cE+Zw/ZwL8=
Subject key identifier:   47:E2:A1:88:66:B7:45:3C:94:F6:25:AC:C7:59:1F:91:46:D8:FF:22
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       61
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/R-KhiGa3RTyU9iWsx1kfkUbY_yI.roa
Signing time:             Wed 01 Sep 2021 01:30:21 +0000
ROA not before:           Wed 01 Sep 2021 01:30:21 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        110.44.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:21 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=47E2A18866B7453C94F625ACC7591F9146D8FF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:21:1f:8b:4e:f5:13:91:8a:0a:78:9a:a6:
                    9d:85:a0:2a:22:fa:38:8d:bb:c6:0f:8c:9f:70:fd:
                    45:41:ee:a9:94:70:df:c5:08:78:0b:0c:4a:e4:99:
                    ad:64:d9:9e:0e:ec:11:b6:46:ee:d8:a9:72:d3:3e:
                    7c:5f:f9:fa:83:cd:59:c8:98:31:97:2c:33:3a:d8:
                    54:3d:5c:89:a0:f6:a2:5f:63:ed:80:1d:a6:fb:09:
                    ae:ea:64:2e:b7:21:26:6f:29:1f:35:7c:1c:25:56:
                    f6:71:4c:1a:7b:ad:bb:68:db:ab:ee:97:26:05:43:
                    96:5f:a5:67:ab:53:ae:a5:90:a9:87:93:1d:f7:3e:
                    ed:d4:9a:d8:c4:a8:b1:05:6f:91:57:bf:22:e6:2c:
                    a6:21:16:49:32:e1:1b:3d:35:e6:ef:a8:9a:b2:e5:
                    32:a5:78:a6:ba:5a:e6:4d:85:4b:7f:2b:20:24:f0:
                    cf:f4:60:1f:83:75:f7:28:8a:09:fe:d8:d4:54:4c:
                    dc:b5:2b:14:d7:93:e2:8e:57:46:d1:f2:67:37:29:
                    7a:d0:14:70:8a:e6:b8:75:ef:14:87:f1:1e:4e:65:
                    a8:16:ed:61:fd:95:4b:9d:89:d0:1f:67:10:b2:14:
                    e2:17:9b:6c:91:fd:96:cc:39:8c:d4:5f:50:47:d6:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:A1:88:66:B7:45:3C:94:F6:25:AC:C7:59:1F:91:46:D8:FF:22
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/R-KhiGa3RTyU9iWsx1kfkUbY_yI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:80:92:46:2e:b4:19:df:73:07:ef:65:56:90:e0:77:88:
         17:95:49:28:46:4f:55:a8:20:76:ec:c2:e1:73:98:55:58:04:
         fd:e1:37:58:44:06:db:f0:8b:79:15:d8:a2:f6:9e:ea:46:d9:
         8e:f5:89:8d:ef:ae:c5:da:fd:00:41:6c:69:29:e1:9b:37:56:
         34:6c:20:dc:19:d3:99:4f:ed:b3:30:a6:a4:d9:fc:e1:59:68:
         70:65:30:d0:68:c7:8b:b6:ec:5f:70:97:30:ee:71:29:fc:90:
         c5:11:3b:95:13:16:19:19:8e:c9:a9:2a:92:c9:07:1c:45:cf:
         e2:c0:63:9d:2f:f5:d4:28:23:1b:25:5a:87:65:e6:0a:27:38:
         e3:80:fd:aa:f9:d9:65:0b:b9:9b:01:78:89:ad:8a:e5:04:17:
         29:82:c4:d7:7c:fc:84:79:94:50:93:4b:cc:0a:5e:5b:9d:40:
         8b:45:c0:ae:00:9a:98:14:8d:d4:5d:0e:45:9d:ac:68:cb:4c:
         8c:9d:91:a6:6e:08:b2:a6:d7:ad:99:56:f8:ab:86:df:ee:0a:
         fc:fb:d0:fe:ad:39:56:0d:67:97:b6:84:62:fe:ae:22:a9:d2:
         80:15:7b:64:44:af:53:17:bd:42:5b:9f:95:b0:a6:28:96:96:
         d9:53:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org