Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/xyljojT7EXOMaHXyYdej9T7uTCQ.roa
File:                     xyljojT7EXOMaHXyYdej9T7uTCQ.roa (raw, json)
Hash identifier:          ptM5q/Oy1yHB+GC9Qv6FKmd6V9kF/BpKUKLY6pOUclg=
Subject key identifier:   C7:29:63:A2:34:FB:11:73:8C:68:75:F2:61:D7:A3:F5:3E:EE:4C:24
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       20
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/xyljojT7EXOMaHXyYdej9T7uTCQ.roa
Signing time:             Wed 01 Jun 2022 01:29:00 +0000
ROA not before:           Wed 01 Jun 2022 01:29:00 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     63789
IP address blocks:        202.9.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Jun  1 01:29:00 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C72963A234FB11738C6875F261D7A3F53EEE4C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:19:ce:df:63:a1:22:7d:3d:40:2a:20:a0:
                    ed:ec:2e:cd:1a:4d:11:93:3a:40:7f:96:8a:15:15:
                    e1:4e:8a:23:c0:37:37:e7:7d:61:d5:00:0b:3f:f2:
                    18:fe:d1:6d:a7:50:cb:b7:c5:9d:7c:40:21:56:c6:
                    64:33:f3:95:e4:fb:62:a3:70:79:b5:cb:3e:59:47:
                    5f:22:af:18:a1:1d:07:ac:5c:f1:15:37:83:a2:5e:
                    68:42:78:8c:f3:be:fd:f6:5b:ac:8f:4c:71:ac:c1:
                    14:96:47:22:5a:12:fb:a6:3b:ac:63:82:d0:01:38:
                    14:5f:c9:71:75:e6:d6:1c:be:c4:27:46:f7:57:76:
                    51:6e:78:2b:39:9b:8d:6d:08:23:b9:4a:66:dc:94:
                    b2:bf:20:55:23:24:2a:1f:03:82:f4:8c:13:15:7b:
                    31:1e:bf:2b:8b:01:96:be:18:9c:ae:3e:28:bc:e3:
                    80:e6:77:7a:fd:6b:69:4a:a9:37:26:ca:35:7a:6c:
                    2e:97:4c:d0:01:d3:52:40:ac:bb:19:89:e7:03:19:
                    91:a6:ed:c4:59:e0:57:3a:68:3d:18:83:44:80:15:
                    15:5c:c5:15:7b:25:86:3e:d6:14:e1:6a:ef:4f:b2:
                    17:f6:d7:18:b2:12:4e:fc:69:82:76:e1:09:0d:72:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:29:63:A2:34:FB:11:73:8C:68:75:F2:61:D7:A3:F5:3E:EE:4C:24
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/xyljojT7EXOMaHXyYdej9T7uTCQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:b4:d9:13:30:f4:cd:d8:c1:c1:5e:3d:90:3c:07:71:a7:
         6d:88:49:fe:80:84:32:eb:fd:12:c3:e2:b4:60:2e:fb:76:85:
         06:c1:85:2d:38:8f:79:f1:a0:a7:8d:d7:80:49:9f:d4:c2:4a:
         f5:be:1a:83:2e:13:33:18:85:c3:03:11:23:5b:11:3b:bf:2e:
         76:c5:2d:d8:13:c6:59:1c:4d:da:ea:60:94:82:33:24:67:2b:
         f0:62:55:29:8c:9f:5a:22:7f:64:ab:3c:66:cb:a7:ed:4e:be:
         c7:c6:63:47:91:a8:47:9c:ef:17:ec:06:67:4f:19:79:da:30:
         93:b6:8a:f4:f2:fa:af:ca:5a:2d:ff:1a:4b:ee:a2:29:72:e5:
         6c:2d:b4:0e:69:d1:c2:52:e3:f2:0c:1f:de:e7:a7:d9:70:5b:
         cc:6e:8b:6b:c0:4c:2c:1c:e1:ad:ca:e5:2f:0b:0a:93:3b:a9:
         84:6b:98:c2:3b:49:79:c4:61:e4:f3:ee:10:97:5e:39:8e:e9:
         40:8d:4e:30:a1:d5:90:db:f9:d4:c9:75:b7:52:e3:a4:7f:dc:
         94:64:6c:5c:ce:29:40:cb:37:80:96:92:b5:44:81:1b:51:81:
         d9:7b:8a:bd:ba:99:ce:a2:2b:93:42:94:61:75:25:8a:40:bc:
         31:12:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org