Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/LLnBuNYHZAOO0iHnhGIw95qDf0M.roa
File:                     LLnBuNYHZAOO0iHnhGIw95qDf0M.roa (raw, json)
Hash identifier:          5lS3cyVzwZBHYdHUxxAh5J/XemlPcd4NWINoxIeYFR4=
Subject key identifier:   2C:B9:C1:B8:D6:07:64:03:8E:D2:21:E7:84:62:30:F7:9A:83:7F:43
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       23
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/LLnBuNYHZAOO0iHnhGIw95qDf0M.roa
Signing time:             Fri 01 Jul 2022 01:28:26 +0000
ROA not before:           Fri 01 Jul 2022 01:28:26 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     63789
IP address blocks:        202.9.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Jul  1 01:28:26 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=2CB9C1B8D60764038ED221E7846230F79A837F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:f8:3d:8c:52:72:5a:cf:63:0b:8a:76:0a:
                    e6:dc:6f:44:03:d5:46:88:7f:20:91:5c:bf:2a:2c:
                    5e:18:a5:90:38:de:b7:3c:cd:ce:ed:93:4f:78:8c:
                    80:7c:04:8b:86:e3:5a:74:59:00:16:17:62:ff:aa:
                    29:ae:11:39:b9:49:35:49:c9:7e:87:9e:8f:b0:4b:
                    92:54:59:d5:ca:90:e2:cd:b1:fd:84:03:5e:28:d4:
                    82:52:fb:96:98:f1:51:7e:18:4e:f9:00:b2:7c:1a:
                    83:0a:84:f8:6f:ff:db:b5:e4:19:49:9e:7b:26:6e:
                    7f:50:56:77:70:33:9c:6b:4a:a5:a0:95:14:ee:f7:
                    3a:20:22:7d:88:1a:e8:59:d8:32:77:52:44:6c:a8:
                    9d:38:5b:67:c1:10:5b:ee:9a:37:8f:f9:98:1a:d3:
                    ba:e1:a6:4d:11:e4:97:27:ab:8b:7c:d4:53:11:23:
                    95:bf:3c:b1:72:eb:20:62:8e:69:7a:87:27:ea:0f:
                    43:d9:58:0b:cc:24:9d:c5:49:09:c4:9e:54:e4:b1:
                    fe:26:19:a4:56:48:e6:65:08:7d:d5:eb:66:ad:4d:
                    35:f8:2f:59:91:fe:0b:ee:94:28:75:ac:cc:fc:e7:
                    11:d4:8a:d9:48:30:c0:bd:c7:22:a3:be:60:1b:24:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B9:C1:B8:D6:07:64:03:8E:D2:21:E7:84:62:30:F7:9A:83:7F:43
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/LLnBuNYHZAOO0iHnhGIw95qDf0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:90:31:fa:0f:f5:75:b0:1d:6c:2d:83:e9:fe:60:b4:16:
         c6:11:f0:ce:96:22:12:c6:b1:05:5c:32:d5:1c:af:86:45:26:
         30:ac:23:41:7e:2a:18:58:ad:11:d7:81:2c:10:a9:df:7b:ae:
         d8:6e:13:40:2c:85:70:f7:d7:1d:3f:54:9f:23:47:47:c9:c4:
         97:a2:8c:64:97:d8:06:97:53:39:79:f0:62:d7:87:95:02:bf:
         fe:a5:1a:d2:89:a3:d0:af:7c:6d:74:03:b8:cb:07:68:89:91:
         dc:11:7b:c2:04:ff:18:d7:8c:8c:96:9f:49:d8:5f:18:5e:55:
         0d:73:9b:dd:3a:3e:36:e0:a8:6a:7b:84:03:02:fb:be:3b:f3:
         7b:e0:99:4c:90:b4:bb:c0:73:46:89:2e:e5:12:75:84:07:1d:
         a9:2f:c6:78:18:09:cd:07:cf:f7:fa:27:9d:48:9f:23:d6:2e:
         9c:c7:f6:2c:f1:bc:d3:fd:9e:23:ff:71:40:fd:a2:d4:26:46:
         5c:36:dc:24:a8:90:79:ef:93:1b:ca:46:e9:8e:dd:0a:03:6d:
         82:d2:84:36:2a:b3:a5:e7:ec:81:df:d0:5a:d1:15:99:03:78:
         ce:5c:6f:58:16:86:88:39:bd:dc:d9:15:75:9d:cd:af:23:2d:
         5a:75:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org