Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/mIEXlMTcaS-Iei4Z5yOb4FYuZSs.roa
File:                     mIEXlMTcaS-Iei4Z5yOb4FYuZSs.roa (raw, json)
Hash identifier:          y+WeQH/HVJCFG1motZ17SAKUlDYw3Bji/yoTWBBHqCI=
Subject key identifier:   98:81:17:94:C4:DC:69:2F:88:7A:2E:19:E7:23:9B:E0:56:2E:65:2B
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       6A
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/mIEXlMTcaS-Iei4Z5yOb4FYuZSs.roa
Signing time:             Tue 28 Sep 2021 08:05:30 +0000
ROA not before:           Tue 28 Sep 2021 08:05:30 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     55898
IP address blocks:        211.14.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 28 08:05:30 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=98811794C4DC692F887A2E19E7239BE0562E652B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:1b:53:41:4e:6e:7d:7b:8b:e7:73:90:b7:
                    1a:ff:55:a9:cb:dc:e8:e5:70:9a:de:5e:bc:7d:49:
                    77:1b:9f:3e:b3:29:24:6a:76:52:a9:65:3b:ba:0f:
                    22:cf:d2:a7:9d:ab:9f:3e:35:be:74:a8:4b:83:4c:
                    5c:aa:70:2b:5c:c0:46:e8:2c:a5:49:df:50:24:c6:
                    ea:93:58:52:86:f1:d0:35:70:a1:68:a7:b0:00:2b:
                    43:2c:17:38:42:d4:85:a2:cd:5d:6b:9f:5c:48:dc:
                    b7:36:80:a3:90:e6:32:54:b1:64:cf:42:42:b9:cb:
                    91:a4:3b:99:61:24:c6:e1:c8:b6:56:15:b1:33:db:
                    b9:df:78:24:e0:f5:cc:0f:e4:fe:ef:f5:2a:10:dd:
                    f4:4f:d9:f6:e5:3d:06:69:da:8c:48:bb:08:b4:7d:
                    ff:15:5b:b8:39:d7:0f:3e:cb:7c:31:d3:47:9b:66:
                    13:4f:37:fd:36:89:7e:20:16:9c:ea:01:0b:b1:f0:
                    1d:6e:4d:8f:51:3e:61:9e:bb:94:d6:09:4a:f3:5a:
                    de:b5:22:e5:46:af:04:48:f5:f5:01:e4:e7:37:ae:
                    c0:8c:b9:aa:dc:b1:ca:3a:42:71:97:11:f3:54:18:
                    44:e2:f5:54:39:e7:05:60:fb:f2:73:e1:58:63:99:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:81:17:94:C4:DC:69:2F:88:7A:2E:19:E7:23:9B:E0:56:2E:65:2B
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/mIEXlMTcaS-Iei4Z5yOb4FYuZSs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:98:fc:f7:38:60:9a:03:e8:3f:0a:50:47:e8:fc:68:e1:
         8e:93:1b:16:77:bf:a0:ea:a8:05:16:50:94:e9:ed:21:d9:06:
         ef:24:7e:cc:0e:10:7c:5a:d7:0a:9a:ab:7b:f1:6a:d9:1e:d7:
         ae:be:90:2f:c2:8f:f2:24:d1:7d:3c:52:22:1b:50:6b:b2:e5:
         94:d2:5e:5e:1d:ca:37:1e:b5:33:05:aa:1f:14:44:b2:d0:61:
         41:22:b0:16:94:f2:ea:72:2a:34:ae:8c:5c:33:2a:a0:ce:fe:
         25:46:91:92:42:03:45:88:90:cb:a3:1c:9d:30:5e:57:7b:6c:
         61:66:0d:b3:fe:71:7e:b3:73:fc:87:39:e3:6b:6d:d6:3d:93:
         01:ca:2b:d2:77:7e:32:01:ae:11:82:f9:3e:77:14:9e:9f:13:
         cd:50:13:fd:cf:1d:f3:5a:1b:a5:b0:50:41:f9:f6:0a:ca:dd:
         f6:60:e1:88:f4:ab:b6:d1:8a:58:46:d4:3d:ad:3b:24:91:79:
         bf:42:80:ef:af:cf:7c:96:41:38:95:75:d9:a0:d8:8d:76:49:
         2e:ca:8d:09:6c:6c:28:21:bb:9e:b9:84:7b:96:c4:df:14:96:
         81:c6:6b:a5:1e:71:9c:e1:96:4e:01:29:5c:f2:0f:a5:e1:69:
         6f:b9:3a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org