Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/LHc1ZgmGfORMo3-U-iJv1eULsi4.roa
File:                     LHc1ZgmGfORMo3-U-iJv1eULsi4.roa (raw, json)
Hash identifier:          XczG/H0qM44P1j06Cb0NJLrQ70gRu/N5iAQGzLVVH6U=
Subject key identifier:   2C:77:35:66:09:86:7C:E4:4C:A3:7F:94:FA:22:6F:D5:E5:0B:B2:2E
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       05
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/LHc1ZgmGfORMo3-U-iJv1eULsi4.roa
Signing time:             Tue 11 Oct 2022 04:37:04 +0000
ROA not before:           Tue 11 Oct 2022 04:37:04 +0000
ROA not after:            Wed 11 Oct 2023 04:31:36 +0000
asID:                     55376
IP address blocks:        202.6.68.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Oct 11 04:37:04 2022 GMT
            Not After : Oct 11 04:31:36 2023 GMT
        Subject: CN=2C77356609867CE44CA37F94FA226FD5E50BB22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:33:9f:0e:7d:f1:71:b1:13:09:88:a4:dc:
                    6a:78:43:7a:07:fc:0b:c1:ec:90:24:36:81:6a:bd:
                    f6:22:b7:63:b1:8f:24:e9:f3:fa:51:72:e4:8e:38:
                    1b:5c:63:94:f0:f4:58:fd:a3:07:0d:a3:c4:a7:eb:
                    ce:ed:53:9e:20:3b:ff:52:8c:3e:e0:92:b5:08:cd:
                    5c:c6:f2:50:23:41:bd:c0:de:08:aa:7a:a7:8c:74:
                    e0:23:66:d3:e2:13:e7:39:ce:78:d8:a0:41:a7:6a:
                    fd:d1:fc:70:82:a2:e6:76:50:6b:c3:6a:08:fb:78:
                    c9:96:43:59:6f:84:8e:29:22:a1:25:28:b5:ff:3e:
                    76:a1:52:c9:f0:01:f9:c1:12:e5:a4:9e:2a:93:d1:
                    05:6a:11:e7:b5:70:ce:01:27:8a:ed:5e:59:55:81:
                    aa:23:4e:d9:55:e0:f8:67:29:df:b0:e6:e2:a0:03:
                    19:05:4c:cf:8d:62:2f:23:6c:99:43:5d:55:1e:66:
                    7d:24:34:a3:2f:3d:f0:ab:81:3e:c8:7d:30:eb:16:
                    21:21:85:82:d8:2b:26:06:3d:ea:26:99:89:a5:b0:
                    81:99:13:10:4a:22:c3:29:0d:09:22:7e:74:c5:a8:
                    0a:82:1e:85:44:03:89:14:73:b4:83:c5:47:73:da:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:35:66:09:86:7C:E4:4C:A3:7F:94:FA:22:6F:D5:E5:0B:B2:2E
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/LHc1ZgmGfORMo3-U-iJv1eULsi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:27:64:78:af:0e:60:60:b6:ef:c8:12:72:d2:7d:7b:34:
         4b:2e:35:88:98:2b:ea:a8:13:09:80:c3:6c:89:ba:f1:e7:58:
         96:44:eb:22:17:75:37:ee:8b:5a:87:9f:cd:90:14:f2:37:89:
         ff:e0:c9:48:b7:67:20:74:98:25:d8:5f:3e:0a:c5:30:5c:5e:
         37:d0:f8:25:78:c7:3f:84:1b:5e:37:ff:5e:d3:39:32:f9:2a:
         b2:3e:a4:ca:52:26:bd:a9:4a:16:95:d6:f4:de:95:42:73:0c:
         e3:5d:ae:cb:cc:15:6d:a4:7f:ac:fd:41:6d:66:70:91:a2:e7:
         44:b1:03:15:56:02:29:3d:77:cf:57:82:16:8b:9b:8e:5a:ae:
         46:5b:c7:19:25:42:7c:a8:5b:b3:14:4d:e9:e5:52:8c:9f:4d:
         30:aa:7f:49:86:b3:94:03:08:10:67:15:a6:64:75:7c:84:2e:
         e5:59:e5:46:2f:15:5f:9f:75:b4:44:ea:3c:3a:a2:d4:1c:4b:
         3a:72:e6:0c:fb:ae:28:6f:a5:3a:82:b5:99:7e:cc:21:4b:fc:
         66:bf:74:c3:ec:8c:93:17:f5:d3:b7:ad:44:d5:b6:43:60:54:
         36:f4:86:ff:1b:50:ec:19:5f:65:1a:51:c5:c7:03:3b:ed:9d:
         8e:82:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org