Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/EiQJNL4d2_VJaac1KMaiBGmR-oc.roa
File:                     EiQJNL4d2_VJaac1KMaiBGmR-oc.roa (raw, json)
Hash identifier:          GiO6OTF9a7I64Qjmjs48Jvqxcy+H5AAUd2S5s/Qww14=
Subject key identifier:   12:24:09:34:BE:1D:DB:F5:49:69:A7:35:28:C6:A2:04:69:91:FA:87
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       A6
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/EiQJNL4d2_VJaac1KMaiBGmR-oc.roa
Signing time:             Thu 01 Sep 2022 01:28:15 +0000
ROA not before:           Thu 01 Sep 2022 01:28:15 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        203.141.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:15 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=12240934BE1DDBF54969A73528C6A2046991FA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:3c:d5:aa:a3:b2:46:79:42:46:c4:16:e7:
                    6f:4d:14:76:be:fe:79:ae:2a:74:58:af:83:87:91:
                    5a:74:f9:ab:db:00:b9:68:4b:61:d5:f3:b3:92:dd:
                    bb:8a:08:50:e9:bb:2d:2f:db:aa:e8:ed:9c:09:5c:
                    27:3b:16:47:23:d2:6d:1e:68:ec:57:08:d9:7d:32:
                    bb:1f:7b:27:fa:d5:10:98:56:7b:ea:89:7b:81:25:
                    fc:ce:0a:8f:49:5b:e3:78:ca:eb:7f:d0:e1:af:41:
                    99:7e:8a:ea:cc:13:78:fe:11:82:68:03:a1:2a:e0:
                    c6:7d:26:ce:04:58:e7:cb:8d:39:26:ec:81:23:ad:
                    23:c5:66:af:b7:44:4b:39:25:5e:67:94:a9:c3:6f:
                    90:a0:87:20:02:57:43:f6:27:9c:1e:bd:ca:e3:30:
                    c4:36:e3:70:b8:c0:7c:3d:10:32:3a:e5:54:13:f3:
                    eb:ac:b0:44:7e:80:1e:8a:fd:53:3c:1b:cf:20:9c:
                    6c:d4:8c:62:73:f4:42:41:40:77:76:84:9c:36:98:
                    6e:6b:68:b2:94:ba:c5:b2:b9:37:51:48:46:de:2e:
                    c2:9a:98:1c:91:73:c2:1a:ce:bc:41:eb:f8:54:49:
                    37:26:4d:50:b6:0b:47:e3:17:3f:e8:f6:42:86:30:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:09:34:BE:1D:DB:F5:49:69:A7:35:28:C6:A2:04:69:91:FA:87
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/EiQJNL4d2_VJaac1KMaiBGmR-oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:29:ae:3b:82:03:e1:24:4a:fa:c3:9d:6d:23:69:59:56:
         fd:63:ea:b6:0d:43:b3:33:42:ff:eb:ce:ea:ed:92:3e:7d:14:
         ed:48:78:6a:b9:45:32:59:05:a3:fb:16:5f:71:cf:16:5f:95:
         a7:a5:1d:7f:95:9f:53:33:ae:2b:0d:4e:71:ba:e6:8a:e5:a1:
         b8:93:7a:45:6b:3f:f8:fc:e9:88:c1:fe:e0:f6:2d:32:2f:29:
         5b:e4:bf:f6:d5:e5:85:a4:b3:5e:f5:80:54:29:e2:d4:2f:a9:
         f2:e9:88:c5:28:a8:8c:72:b6:66:65:59:dc:bc:9b:dc:6b:11:
         f7:81:ee:da:26:5a:93:ce:88:f5:76:68:43:14:15:19:14:8e:
         cd:b3:3c:f4:25:c5:89:10:af:d7:47:9b:0b:5b:1f:74:6c:1c:
         c9:55:96:83:e0:13:6c:03:bc:71:f7:f1:c3:6d:18:70:f9:01:
         dd:bc:d4:5b:f1:5b:9b:14:50:32:4b:1d:0f:2c:eb:d2:2a:98:
         4f:9d:c3:1a:e5:4a:59:40:ab:f9:81:1c:e1:9e:2a:1c:50:fd:
         4a:6f:ff:a2:33:4f:70:56:74:42:b8:c6:5c:1e:36:51:d3:b7:
         24:a8:20:94:2d:5b:1e:c8:25:38:45:18:14:98:ee:07:93:f7:
         04:0f:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org