Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/MnHLPYMyS6_BhnLqBB46GSWRoyo.roa
File:                     MnHLPYMyS6_BhnLqBB46GSWRoyo.roa (raw, json)
Hash identifier:          lue+jT25RwUn88+BZHgizyQZks4s8nAdaTrNXHZlnDE=
Subject key identifier:   32:71:CB:3D:83:32:4B:AF:C1:86:72:EA:04:1E:3A:19:25:91:A3:2A
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       26
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/MnHLPYMyS6_BhnLqBB46GSWRoyo.roa
Signing time:             Tue 19 Apr 2022 07:19:04 +0000
ROA not before:           Tue 19 Apr 2022 07:19:04 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     9622
IP address blocks:        103.235.124.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 19 07:19:04 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=3271CB3D83324BAFC18672EA041E3A192591A32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:2a:34:02:bc:67:5f:60:55:c3:1d:83:c8:
                    c8:08:56:3d:c1:41:62:29:84:2d:e6:06:54:43:f9:
                    60:37:34:b3:ab:9a:bc:89:aa:79:ea:21:84:08:87:
                    63:1e:97:34:03:bb:67:83:84:00:ca:73:47:5b:50:
                    3b:65:d8:93:5d:50:45:77:2e:6c:73:a7:e5:3f:b3:
                    1a:86:bd:f1:3f:c7:d8:9b:e3:6f:1a:c0:df:58:25:
                    e9:90:ce:80:7f:05:6e:54:c8:80:0a:e7:53:f2:c2:
                    25:44:c7:2b:ed:1f:9b:1b:c5:e4:bf:a1:18:6b:72:
                    9c:0c:4d:7a:49:cd:dd:f8:83:61:09:bf:79:39:fa:
                    a5:65:40:be:12:9f:af:0c:a2:2d:ad:9f:1b:1c:b4:
                    3c:d8:b2:d0:54:42:f1:ff:69:0b:a4:ed:15:17:d4:
                    cc:94:a9:5a:bd:be:cc:67:63:da:83:f2:98:3f:55:
                    f2:6d:13:a2:92:a7:17:9b:5f:bb:b1:d7:96:86:23:
                    a2:d4:95:7b:d3:29:bd:a3:a4:14:0b:b6:97:75:6f:
                    72:0a:43:5c:b5:1f:f1:71:1a:ce:5e:f0:84:3e:80:
                    be:20:04:52:a4:9d:09:88:0f:aa:65:01:b5:6a:34:
                    96:bc:3f:c8:1d:44:a1:29:0d:66:aa:c4:8c:11:59:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:71:CB:3D:83:32:4B:AF:C1:86:72:EA:04:1E:3A:19:25:91:A3:2A
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/MnHLPYMyS6_BhnLqBB46GSWRoyo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:e3:c2:a0:bd:8f:8f:5e:9f:64:87:de:88:6b:84:ad:d9:
         ac:df:2e:b4:6f:2b:1c:62:9f:6d:2f:88:1a:40:5f:a0:b3:72:
         48:0f:a9:a1:14:cd:f0:91:c2:dc:41:a2:40:55:3a:b3:c2:a4:
         c5:40:74:d5:5e:35:f8:11:11:15:4f:84:77:39:72:97:30:a6:
         c8:89:c3:4a:54:9c:bc:a1:75:e5:61:ea:ab:f4:c5:3b:66:a4:
         e5:3c:d0:d8:ed:b7:fa:12:1e:0f:58:eb:0a:df:7b:e5:87:4b:
         c0:2a:0a:56:0d:17:ba:ea:ac:58:ae:2d:b9:ac:b4:b9:1d:73:
         75:23:6d:a7:0d:1b:fc:c2:e5:9b:0b:37:f2:e8:4b:d5:23:db:
         94:29:2f:29:3d:09:35:8e:f8:ca:6f:f5:84:20:14:12:30:14:
         ce:cc:33:bf:3c:ca:9a:13:57:e3:86:bc:75:04:9d:64:e8:75:
         47:d2:17:7c:bd:5a:ee:67:7f:6c:2f:5f:9e:6c:7c:19:07:31:
         10:89:2c:a8:1d:aa:24:11:97:2d:f2:e5:c0:48:f1:08:d3:52:
         fe:18:dd:06:25:1c:46:5d:3a:ec:67:35:97:9c:7b:c5:4f:6d:
         11:b8:5a:fd:de:1b:0a:e4:5d:c4:3d:17:2b:cc:1b:fc:4b:9e:
         68:b4:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org