Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/lRFAy_kLCAqXw4n9s4DU9oxa7P8.roa
File:                     lRFAy_kLCAqXw4n9s4DU9oxa7P8.roa (raw, json)
Hash identifier:          KZAVqqXeRke60Y6gDmspAAhgecY99WEuldx5kk71+1U=
Subject key identifier:   95:11:40:CB:F9:0B:08:0A:97:C3:89:FD:B3:80:D4:F6:8C:5A:EC:FF
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       A2
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/lRFAy_kLCAqXw4n9s4DU9oxa7P8.roa
Signing time:             Mon 01 Aug 2022 01:28:52 +0000
ROA not before:           Mon 01 Aug 2022 01:28:52 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        210.188.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:52 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=951140CBF90B080A97C389FDB380D4F68C5AECFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:6e:5f:95:fb:74:26:7b:5f:e2:e8:1f:86:
                    ac:09:42:3a:f3:ce:15:ca:03:43:48:d2:b3:8b:3d:
                    cb:61:52:8f:8a:35:ff:3e:ff:be:6c:19:db:8a:28:
                    ea:a5:02:22:e9:dc:63:ce:ce:57:4d:5a:8f:2b:60:
                    15:1b:f5:57:d0:bb:6f:af:3f:34:a1:43:e3:c5:a3:
                    be:3d:62:05:de:b0:36:1f:9d:62:70:6e:ea:a3:55:
                    9b:5b:a0:1a:8e:bb:f8:fa:89:f9:0f:bf:88:1d:3c:
                    49:8c:e4:d8:84:33:b6:ea:5d:81:a7:85:cb:64:a8:
                    95:e2:42:3f:f9:e8:4d:bf:a2:3c:b1:38:83:ff:c2:
                    a4:45:5a:a0:77:a4:9c:ff:12:97:fe:d7:ff:60:70:
                    88:75:f9:5c:ae:45:13:72:6b:b2:79:fc:2c:15:8e:
                    38:b1:c9:9b:fd:ad:6b:4b:82:3c:ec:24:66:df:f9:
                    29:09:6b:93:57:40:5a:92:fd:f4:70:8c:5d:86:12:
                    9b:90:55:a8:ec:0b:1a:f1:3c:1f:20:46:10:48:b6:
                    59:4c:b3:89:ad:c8:34:2f:1b:a5:37:d7:b8:5f:e6:
                    53:81:60:b9:09:e5:64:11:e2:ec:ca:36:4a:a2:cb:
                    34:b7:dc:71:26:6a:47:a8:a8:15:3b:fc:94:9c:75:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:11:40:CB:F9:0B:08:0A:97:C3:89:FD:B3:80:D4:F6:8C:5A:EC:FF
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/lRFAy_kLCAqXw4n9s4DU9oxa7P8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:93:20:c5:7a:61:6a:4c:14:28:4f:62:66:46:72:db:53:
         b4:8d:77:08:75:11:ba:9c:e3:d9:8a:01:57:4b:6a:f9:e7:7c:
         a8:ea:d6:d0:94:e3:29:00:89:1f:34:b7:e9:21:85:57:f3:c0:
         a7:27:92:16:79:1c:d4:a7:d5:8a:21:2f:66:f8:7b:8b:bf:e8:
         d8:63:9f:c6:89:dd:b3:ba:3f:cc:06:1f:9b:72:ea:58:5e:cc:
         02:e6:a3:32:50:18:dc:74:e8:7b:45:1c:1f:d4:ed:3d:94:cc:
         3a:a7:61:aa:d4:f5:9c:0d:4b:a6:02:c6:b3:5f:29:f8:f0:40:
         30:81:a6:f2:2b:3d:c9:ff:a6:f0:93:b2:a3:bc:a5:87:62:72:
         55:3c:d9:67:c6:d6:14:a4:10:ca:4c:9b:55:35:91:84:60:f1:
         f3:3e:26:9e:de:8d:cf:0a:07:40:f6:7d:60:78:dd:e9:49:f1:
         1c:8e:71:86:49:02:1f:7a:8f:08:7d:9d:f0:d7:37:ce:cc:25:
         87:c8:66:e5:59:fb:b9:76:aa:c6:6d:c6:5d:77:c0:8b:5e:50:
         b1:e3:20:59:33:04:29:18:cc:d2:b0:7d:06:f6:a1:a3:5e:87:
         79:1c:7f:bf:20:4e:8d:88:3d:39:7f:f8:16:d3:34:23:54:e1:
         d6:b0:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org