Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/LBbxRLDdOIi5fknOMtNXAveXLPM.roa
File:                     LBbxRLDdOIi5fknOMtNXAveXLPM.roa (raw, json)
Hash identifier:          vYTaYtNXd2KfMizc1egmWZHlSLFL1qRjahKFLRhK1/M=
Subject key identifier:   2C:16:F1:44:B0:DD:38:88:B9:7E:49:CE:32:D3:57:02:F7:97:2C:F3
Certificate issuer:       /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial:       02
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/LBbxRLDdOIi5fknOMtNXAveXLPM.roa
Signing time:             Thu 03 Jun 2021 02:26:58 +0000
ROA not before:           Thu 03 Jun 2021 02:26:58 +0000
ROA not after:            Sat 21 May 2022 02:33:57 +0000
asID:                     16509
IP address blocks:        202.244.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
        Validity
            Not Before: Jun  3 02:26:58 2021 GMT
            Not After : May 21 02:33:57 2022 GMT
        Subject: CN=2C16F144B0DD3888B97E49CE32D35702F7972CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:71:ce:4b:4f:0b:e7:e4:4a:35:2b:ce:1b:
                    f5:57:5c:e2:62:d0:c5:b8:a7:8a:7e:60:59:e9:59:
                    88:dc:fc:23:9a:37:0a:01:79:f2:5a:1b:46:10:2c:
                    f1:fc:d5:3a:b4:32:43:af:cb:7e:1f:9e:5d:cb:09:
                    f8:6a:9b:9c:66:5f:c2:16:25:23:1c:0a:16:f4:3a:
                    fd:8d:7b:5f:22:5c:37:88:44:b5:93:43:9b:f6:5d:
                    0e:45:89:84:96:87:c6:2a:4d:4b:65:ce:c5:24:0f:
                    53:b8:69:c5:47:2f:7a:7b:19:08:e2:80:e5:66:14:
                    1b:d5:b4:96:56:c2:00:d1:75:bf:82:6c:61:ce:2d:
                    a8:1d:dc:cb:fb:f0:ff:3b:12:12:00:f0:48:13:db:
                    93:38:db:df:34:61:ea:14:4b:6e:7a:96:6b:40:11:
                    af:d8:3f:1e:f5:ca:dd:18:00:f3:28:79:fd:05:d0:
                    93:bd:7a:03:9b:e0:f0:de:a3:f8:f5:e9:58:4c:78:
                    c4:80:62:ba:c3:f4:37:ac:d0:e2:3d:4c:22:fa:90:
                    96:cc:4a:bc:97:00:15:93:ea:28:b9:77:1f:33:73:
                    c8:d8:f5:c8:ef:99:37:3e:6b:8c:e3:10:fc:ef:8b:
                    5a:13:e9:af:e0:06:ab:02:7f:b6:d8:89:b0:e5:f7:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:F1:44:B0:DD:38:88:B9:7E:49:CE:32:D3:57:02:F7:97:2C:F3
            X509v3 Authority Key Identifier:
                keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/LBbxRLDdOIi5fknOMtNXAveXLPM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:c8:03:57:17:6c:4c:e9:e4:f3:2f:14:73:b0:b5:8c:eb:
         4a:51:c9:e4:ea:ea:c0:15:16:7f:da:43:29:94:cf:9a:a9:3d:
         5c:c9:e1:15:39:44:42:de:e3:4a:4e:25:10:ce:90:10:59:39:
         72:cc:3a:98:fa:d6:da:96:36:b2:b1:2b:d4:6f:04:14:d1:df:
         0f:c2:69:3b:cd:b4:db:ef:12:04:37:a9:ad:a7:b0:0e:af:cb:
         15:ce:b5:d0:e0:3a:08:1c:b6:b3:b6:f0:ba:41:5d:d7:7d:25:
         97:43:1e:4f:25:58:18:fe:15:87:49:f6:9e:f1:0d:65:fa:d2:
         5a:6b:eb:fa:a3:5f:f0:a4:e6:93:46:82:37:6f:ec:b9:9a:29:
         e3:ff:02:a8:19:fd:bc:24:7c:55:40:a0:ea:9c:30:76:fa:87:
         c8:17:e9:4d:cd:2c:4a:62:3a:75:ae:d1:7a:68:45:dc:4b:bf:
         99:7e:92:89:ce:ac:7d:8d:33:c0:f4:78:66:d6:49:00:27:91:
         35:cd:f0:20:72:4a:6c:a7:20:28:91:19:94:97:19:fd:a8:23:
         48:42:5d:c6:bb:8f:9b:b9:8a:2f:ad:c8:5d:63:fe:87:82:4f:
         40:82:e3:ef:05:ff:cd:c0:fc:62:3e:5e:b8:91:a2:ef:75:7b:
         4b:b3:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org