Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/5nc0waudyll5QYs3II5S_KqJnHg.roa
File:                     5nc0waudyll5QYs3II5S_KqJnHg.roa (raw, json)
Hash identifier:          xidl+VK5waWo3cOpJAbWtjxPRKIRkL+9kZCEPJLKP2c=
Subject key identifier:   E6:77:34:C1:AB:9D:CA:59:79:41:8B:37:20:8E:52:FC:AA:89:9C:78
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       6E
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/5nc0waudyll5QYs3II5S_KqJnHg.roa
Signing time:             Tue 28 Sep 2021 08:05:31 +0000
ROA not before:           Tue 28 Sep 2021 08:05:31 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     23816
IP address blocks:        202.93.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 28 08:05:31 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=E67734C1AB9DCA5979418B37208E52FCAA899C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:59:1d:60:12:cb:74:84:71:72:f3:6f:f2:
                    89:48:06:1f:80:a6:fe:c6:24:d2:17:e1:88:bd:19:
                    b8:0a:f4:9a:31:97:4b:61:02:26:d9:d8:49:74:af:
                    c6:37:9c:d5:53:1f:e8:00:cd:51:d1:31:7f:20:5f:
                    8d:19:ab:98:c9:a3:d3:c5:fc:8c:23:db:e2:ac:23:
                    75:8c:00:6e:a2:48:1a:2d:44:45:e6:cc:de:32:59:
                    e2:79:7e:08:43:0e:d1:1d:0c:59:2f:e7:25:f0:d6:
                    51:50:a5:72:9b:86:37:59:4e:b4:07:8f:05:a6:be:
                    68:72:96:fa:89:8f:b3:e8:05:96:cd:f8:c4:70:f3:
                    57:92:2d:13:0c:08:ea:8d:53:38:aa:0d:2d:7d:5f:
                    95:8e:b0:be:61:c2:49:e3:e4:b2:6b:25:10:e0:4e:
                    e5:ec:83:11:2d:fe:23:69:09:95:3a:45:40:7d:4e:
                    a7:d4:f4:f6:65:72:7c:0a:78:2a:35:3c:52:13:ab:
                    70:d5:84:b7:28:8b:29:9d:ca:e7:92:eb:4b:8f:fc:
                    75:9f:f0:a3:e3:0c:d7:9f:b7:a7:ef:70:a8:ae:11:
                    ed:49:03:ee:93:19:e9:82:2d:4e:49:3f:76:e3:c2:
                    70:15:ee:a4:e1:95:2c:06:19:84:8f:66:4a:93:c9:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:34:C1:AB:9D:CA:59:79:41:8B:37:20:8E:52:FC:AA:89:9C:78
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/5nc0waudyll5QYs3II5S_KqJnHg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:cd:45:fe:72:d4:8a:6a:0c:68:da:2f:26:d9:dc:43:e2:db:
         39:55:20:77:f1:18:26:06:5a:ec:39:87:a6:bf:9f:66:56:24:
         ad:70:cb:b1:3c:36:fc:98:14:af:53:fe:c2:c1:f0:d7:59:4d:
         1d:55:55:80:5f:66:a0:22:d8:5d:13:8a:bd:66:b1:f1:49:bf:
         17:96:22:f3:e0:3c:a6:80:25:20:7b:f4:e7:59:0e:17:26:9d:
         da:9a:79:bb:2d:7b:07:b2:8d:63:18:55:fe:21:b7:66:5a:04:
         43:2b:c6:55:ab:60:13:06:24:15:88:ec:20:ca:63:fa:07:75:
         4c:a5:77:56:48:29:da:c0:2c:e9:98:ac:75:a3:8d:c1:51:ff:
         7d:6e:51:67:89:b5:58:75:e2:96:59:db:46:4a:2a:62:85:0c:
         96:1f:78:d2:9f:56:62:a4:5d:93:97:48:3b:29:98:d1:7b:5e:
         b3:a2:d6:ba:e5:71:e3:b1:0c:11:02:fc:46:0d:d8:80:57:83:
         54:e3:87:e0:f0:bb:93:1d:dd:6f:b5:0d:bf:94:03:ae:8a:50:
         01:c3:94:07:4e:e3:cd:d0:1d:2e:d8:20:d5:9b:f2:16:02:a5:
         14:c2:64:15:7c:71:0e:da:35:ff:3a:21:94:7b:99:44:91:b7:
         fd:48:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org