Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/aSyE1KdRS0frq1k1OV7dKyrDdZY.roa
File:                     aSyE1KdRS0frq1k1OV7dKyrDdZY.roa (raw, json)
Hash identifier:          dhlMSWmgHQIER80JKNI2fC9m3SPvEzExZbGY2VdjZ3U=
Subject key identifier:   69:2C:84:D4:A7:51:4B:47:EB:AB:59:35:39:5E:DD:2B:2A:C3:75:96
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       1E
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/aSyE1KdRS0frq1k1OV7dKyrDdZY.roa
Signing time:             Wed 01 Jun 2022 01:28:59 +0000
ROA not before:           Wed 01 Jun 2022 01:28:59 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     63789
IP address blocks:        202.9.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Jun  1 01:28:59 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=692C84D4A7514B47EBAB5935395EDD2B2AC37596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:07:55:2e:35:9b:c9:98:eb:d5:c8:8c:2a:e6:
                    60:81:78:a8:e6:08:f4:ab:d1:d7:55:3a:54:cc:9f:
                    7e:e0:06:f5:20:15:eb:91:d1:98:2a:cc:5e:98:01:
                    bb:d9:80:6c:71:58:1c:65:1f:e7:75:6e:ec:41:3c:
                    80:50:80:29:4b:69:9f:bd:42:6b:8a:5c:02:c8:27:
                    17:3b:7c:71:52:37:a9:2e:fd:a8:b3:f4:55:ed:c6:
                    6c:0b:db:3b:d6:ff:f1:b0:d3:2e:43:de:ce:b3:5f:
                    86:e1:06:bb:64:80:c7:3e:4a:ec:a5:2b:dd:f2:ff:
                    68:bc:c5:7c:6e:73:d0:69:b6:d9:65:0b:bb:4d:48:
                    f1:16:dd:4e:28:f7:d3:d4:39:73:44:e2:a7:96:3e:
                    68:90:e7:44:b6:63:09:6a:8b:e4:21:0e:76:c7:74:
                    fd:21:ff:af:80:70:04:4b:b7:75:7c:ae:b5:08:04:
                    af:fb:e2:b5:44:9f:6a:7a:81:24:80:6c:f0:96:19:
                    ca:c9:45:0d:9b:1b:c6:a3:a2:3c:40:b3:5d:17:b8:
                    e9:51:86:2c:25:43:1f:b9:64:7c:f4:f5:a5:e4:e8:
                    bd:25:91:49:c9:88:cf:ac:5d:ee:cf:05:87:8f:50:
                    62:e3:8b:64:47:9b:7f:a4:82:57:6d:28:7e:37:8d:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:84:D4:A7:51:4B:47:EB:AB:59:35:39:5E:DD:2B:2A:C3:75:96
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/aSyE1KdRS0frq1k1OV7dKyrDdZY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:f9:c7:81:d4:96:2f:b1:51:18:40:c0:5d:7f:20:8f:50:
         0e:fb:ab:99:f5:ab:53:80:f1:b1:f2:c1:ba:6a:07:b9:e5:4c:
         0a:e3:2b:1b:15:05:6c:38:b5:12:21:e8:33:8e:f8:a4:e2:25:
         05:93:72:fb:15:e5:df:aa:69:51:0e:9d:17:b8:18:98:5c:78:
         98:94:bb:24:97:38:93:5b:d3:33:f8:a7:38:60:ba:48:fb:42:
         6d:8e:14:49:6c:73:9b:a8:5d:11:e9:7c:f7:c4:3b:a5:35:79:
         ce:8b:ae:0b:c7:67:b9:6a:25:f3:f4:e0:be:11:73:99:1e:b0:
         db:b6:d7:4d:c2:a5:ef:c0:cc:f6:6e:5b:f4:5f:2c:90:8d:bc:
         7a:e2:7e:f4:c3:33:ed:06:e0:ca:98:e9:4b:bf:c5:5a:a1:1c:
         93:e9:4a:f9:ad:a4:6b:99:7a:e7:e3:3a:06:d1:11:e3:4a:c3:
         e9:cb:73:68:83:d7:32:1d:58:0f:b4:10:79:95:e1:e9:95:f4:
         4b:d9:e5:7a:5c:68:0d:25:0c:29:8d:0b:0c:57:ed:98:90:c5:
         60:6c:97:71:db:85:7f:7a:a1:86:52:cf:f1:e2:60:64:3f:3e:
         25:64:86:a5:c9:df:a8:ce:ea:ff:a6:8d:93:a6:71:dd:98:7f:
         fd:44:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org