Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/iAbv720XWVj923BKb7iThn5G-Oo.roa
File:                     iAbv720XWVj923BKb7iThn5G-Oo.roa (raw, json)
Hash identifier:          mhUo64gUlar/MJBRxgj8KqjNxkf5aPTfckth4emrvKs=
Subject key identifier:   88:06:EF:EF:6D:17:59:58:FD:DB:70:4A:6F:B8:93:86:7E:46:F8:EA
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       02
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/iAbv720XWVj923BKb7iThn5G-Oo.roa
Signing time:             Thu 25 Aug 2022 08:26:33 +0000
ROA not before:           Thu 25 Aug 2022 08:26:33 +0000
ROA not after:            Fri 25 Aug 2023 07:39:18 +0000
asID:                     9615
IP address blocks:        119.63.112.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 25 08:26:33 2022 GMT
            Not After : Aug 25 07:39:18 2023 GMT
        Subject: CN=8806EFEF6D175958FDDB704A6FB893867E46F8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:2c:2b:bc:cf:d3:37:1c:0a:ca:28:e1:48:
                    31:31:77:39:f2:0e:ac:85:b1:39:44:46:0c:63:bc:
                    11:76:f1:a4:ba:44:8d:46:ef:5d:00:65:74:57:63:
                    6a:b0:61:79:36:0c:3f:28:0c:47:a2:8c:bb:6a:a7:
                    42:9a:51:4c:cd:f7:bc:e4:2f:19:7c:9a:05:03:7f:
                    82:a3:48:2b:3d:d7:49:0d:78:74:7b:63:d7:88:04:
                    07:f4:45:19:76:a0:ce:1d:04:99:46:fe:ca:8f:f5:
                    50:88:db:9d:ab:91:53:aa:20:fd:ed:f5:98:cb:4a:
                    c5:41:ad:e0:49:a4:38:c3:e9:ab:e8:43:fe:f6:d4:
                    71:b3:96:c0:17:d8:07:bf:a2:bb:b2:43:e5:bc:97:
                    c0:55:07:6f:92:58:1a:31:0c:92:bc:23:7b:ea:06:
                    3f:e8:08:38:76:de:51:6a:3d:96:7d:e2:2b:e6:85:
                    d1:21:46:07:4a:14:27:d8:10:30:0e:08:76:e5:6a:
                    47:10:2f:5d:69:e7:22:27:7c:ec:c2:6b:3a:b5:91:
                    6b:de:9b:96:f3:76:f3:65:0b:c4:2e:68:1e:ef:1a:
                    87:a4:60:e9:c0:47:1d:f2:1a:86:6d:f7:c0:06:00:
                    b0:c6:3e:45:3d:df:e7:e1:a1:02:88:73:cc:06:2c:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:EF:EF:6D:17:59:58:FD:DB:70:4A:6F:B8:93:86:7E:46:F8:EA
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/iAbv720XWVj923BKb7iThn5G-Oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:47:db:fc:25:54:30:58:01:7e:12:e3:c8:74:5b:c2:f3:
         ab:a8:7c:68:2d:d2:11:8e:6c:13:fc:89:c2:c5:04:c2:dc:0c:
         22:af:8c:9c:41:a7:37:25:b1:b1:95:b1:f1:1d:a2:b4:42:6d:
         2c:be:7c:7f:76:03:39:cf:1d:51:24:e0:ce:8e:f3:07:2b:17:
         79:43:85:49:03:4b:f1:a4:92:e8:23:52:6b:cc:cd:e2:f1:ad:
         a7:61:0a:0b:07:4c:1b:86:65:6e:ed:f1:94:15:d7:dc:39:df:
         15:6a:96:5e:29:a6:12:33:d7:e9:4f:c8:b6:b8:e2:66:e1:3c:
         91:e4:46:f1:af:f8:20:c3:56:68:f2:ff:1f:3c:14:34:02:00:
         82:8b:f2:4d:2f:6c:24:a8:f3:0f:86:12:3f:55:da:63:2e:0c:
         01:e5:83:d6:d1:08:63:ef:ca:ef:a7:eb:f9:95:d2:a5:09:f1:
         0b:cc:a1:fc:aa:26:7d:83:6c:17:38:1f:96:9b:39:39:6e:fa:
         77:f7:f2:52:91:1a:68:fe:15:6c:6b:a0:9c:54:c1:f4:dc:ff:
         8c:28:f7:ac:71:5e:00:c6:70:d4:ac:96:77:f2:d0:77:0f:12:
         85:12:74:64:f1:48:21:59:47:63:5c:b0:6c:a9:cc:b8:9f:aa:
         de:4c:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org