Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/3zR2S_zcOZNJQKdJ8zAbAbzaJHw.roa
File:                     3zR2S_zcOZNJQKdJ8zAbAbzaJHw.roa (raw, json)
Hash identifier:          40R8WH+tzxFPODIurUwFzu4qzlc7Qpj2hSZovPuqGJk=
Subject key identifier:   DF:34:76:4B:FC:DC:39:93:49:40:A7:49:F3:30:1B:01:BC:DA:24:7C
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       04
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/3zR2S_zcOZNJQKdJ8zAbAbzaJHw.roa
Signing time:             Thu 13 Oct 2022 06:46:09 +0000
ROA not before:           Thu 13 Oct 2022 06:46:09 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        61.206.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:46:09 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=DF34764BFCDC39934940A749F3301B01BCDA247C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:a5:65:2d:fa:f0:b8:83:7d:4b:42:dd:07:
                    75:f1:25:f3:1c:f2:69:98:9d:a3:d4:33:eb:b1:1c:
                    6a:4f:55:c0:72:4e:2e:2c:a5:66:cb:78:68:57:ba:
                    2b:b3:34:c4:d4:76:85:74:91:93:ae:a9:f3:49:d5:
                    dc:09:5b:76:71:e2:4d:f2:68:74:69:89:42:af:1c:
                    2d:6e:f5:13:68:9c:dd:e9:da:2e:ff:e2:19:5f:b8:
                    f6:69:4e:bd:f7:01:4a:0e:f2:f4:8b:38:f7:da:0f:
                    53:34:2c:ad:ea:1e:89:92:a9:ee:bc:06:a4:86:19:
                    fd:9b:88:b4:11:1b:37:4b:43:86:3b:6e:d3:90:c4:
                    3c:ad:8e:a9:5e:36:c4:14:bd:73:11:58:8f:80:83:
                    0d:de:0f:a6:06:7f:43:fe:6b:61:78:40:ae:45:f5:
                    22:8c:f5:7d:0f:db:bc:e2:a2:15:8f:28:f7:75:7a:
                    ba:3f:3f:a4:07:ec:95:32:e4:ba:1f:1a:a1:41:d2:
                    b3:8b:4a:56:f5:18:06:b3:1f:a8:6c:7b:ac:c9:06:
                    aa:e5:3e:e8:6c:e4:f9:2d:c1:5f:29:96:a8:d2:4d:
                    9e:fd:8d:3b:d2:bd:80:7f:da:86:ad:8c:15:db:67:
                    21:f1:02:3d:fe:6e:02:d1:86:4d:83:93:9c:52:fd:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:34:76:4B:FC:DC:39:93:49:40:A7:49:F3:30:1B:01:BC:DA:24:7C
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/3zR2S_zcOZNJQKdJ8zAbAbzaJHw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:ef:52:4b:dc:3d:9b:8c:e3:c8:09:8a:7a:ef:04:e7:22:
         6d:ee:f2:23:6e:db:9c:2f:dc:e3:98:e2:05:a7:22:cc:f9:55:
         49:5c:4d:77:93:d8:28:08:4f:c2:01:fb:5b:9b:68:37:74:01:
         9b:fc:9e:c9:b2:ec:7d:f7:83:de:2a:4c:d9:e7:c2:9d:19:4d:
         80:80:b6:a7:ae:40:01:a8:4d:40:b4:6a:29:40:52:37:fc:29:
         72:af:f9:d8:1c:de:62:a4:9c:d4:9e:96:16:68:5e:a7:a9:82:
         51:6e:95:fb:39:fd:4e:f0:a5:98:ce:54:fb:85:72:73:e2:7f:
         33:5f:15:ee:96:40:79:76:06:05:a6:05:a5:6e:ec:c7:46:69:
         8d:f5:6a:e2:ae:1d:b8:b8:46:88:71:a8:0f:ec:55:71:07:5c:
         be:73:9e:7f:36:a1:d0:10:bf:6c:86:14:86:97:12:a4:72:5a:
         24:12:9c:fb:13:6d:ff:54:06:05:8d:24:74:9b:7c:c3:3e:db:
         88:0f:1f:ab:1f:f4:9c:62:4f:25:69:f2:2c:64:ab:00:1d:39:
         df:f4:32:4d:c9:8f:3a:07:7c:73:3e:fc:5c:95:b1:d0:db:70:
         3f:ad:b0:63:a4:65:b6:b5:b4:e0:7f:b5:27:b0:fb:ac:14:d4:
         5d:69:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org