Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/q-bd0lBNee0nfmGIb-IPSsGbYOg.roa
File:                     q-bd0lBNee0nfmGIb-IPSsGbYOg.roa (raw, json)
Hash identifier:          r2e+pxOMeTt90HemSWebQb2wFrMVF1c/i8xPtl0oZn8=
Subject key identifier:   AB:E6:DD:D2:50:4D:79:ED:27:7E:61:88:6F:E2:0F:4A:C1:9B:60:E8
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/q-bd0lBNee0nfmGIb-IPSsGbYOg.roa
Signing time:             Sat 01 Oct 2022 01:29:18 +0000
ROA not before:           Sat 01 Oct 2022 01:29:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        220.156.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=ABE6DDD2504D79ED277E61886FE20F4AC19B60E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:f3:8c:c1:52:c9:47:fe:23:d3:05:7e:f9:
                    c6:74:5a:92:76:9c:80:05:5d:11:59:f1:2b:3e:f4:
                    32:65:fb:a9:24:f3:ca:46:fa:97:30:77:dd:70:0f:
                    3e:c2:0b:2d:f5:ea:c2:21:57:82:d6:89:cd:07:f5:
                    70:c7:91:c1:96:02:70:2d:91:45:43:dd:39:22:50:
                    d8:79:91:91:0b:2b:eb:cb:f2:04:94:be:e6:e4:a0:
                    cc:1c:75:9b:eb:69:ed:20:bd:85:5c:bb:d8:a7:fc:
                    a2:24:8d:51:bb:67:b5:cf:1f:90:2b:e1:a6:58:79:
                    91:5b:de:5e:7b:93:2b:c0:59:c4:82:80:33:64:b4:
                    d9:57:07:cd:1b:9b:4b:d5:02:3e:e6:90:11:ec:e3:
                    60:b9:23:f5:9a:4b:9f:90:22:26:81:b4:0d:84:2e:
                    b4:08:74:27:09:16:4d:7c:e6:2c:11:5a:db:87:25:
                    c1:75:f6:7e:25:8c:b5:e2:b2:4d:7e:cd:ba:00:49:
                    f7:9c:6e:ab:e2:7f:75:90:95:eb:0e:a8:71:b7:9d:
                    df:4b:ee:e4:00:65:56:6d:c3:c5:6a:42:f1:c4:f5:
                    42:67:31:19:26:da:e6:cd:79:24:a0:76:03:3c:e0:
                    ed:b6:ef:cc:82:83:d2:f0:05:26:1e:60:f1:16:02:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:DD:D2:50:4D:79:ED:27:7E:61:88:6F:E2:0F:4A:C1:9B:60:E8
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/q-bd0lBNee0nfmGIb-IPSsGbYOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:87:ba:07:52:5f:7a:1b:b5:9f:47:33:50:6e:54:f7:0b:
         d1:61:4c:d6:2f:d9:b9:ba:af:54:e8:b3:0c:f8:bb:db:3d:0f:
         1c:11:68:53:07:3d:a6:75:2f:ca:ae:a0:04:04:83:49:9b:90:
         5d:78:a5:95:1a:75:59:8f:2e:84:20:77:2c:1a:46:aa:8b:9f:
         1f:dc:49:fd:97:50:b3:33:d4:9a:1a:7c:05:51:8d:63:75:16:
         3c:84:7f:66:1e:61:bc:e8:6e:92:1b:a0:c1:8f:08:b9:f7:c4:
         ea:5f:1d:5f:72:11:ea:4b:79:f9:d9:98:d1:71:e8:f2:ce:17:
         01:5b:69:b6:c8:6d:eb:3d:47:fd:21:1a:0a:83:41:4b:d2:b0:
         22:a1:c7:cf:88:a9:b2:09:5a:c7:24:b2:7b:d2:dd:07:7b:ad:
         97:d0:c1:f4:58:77:d8:50:21:41:e4:42:e7:6e:7f:57:3a:44:
         eb:27:56:ca:5d:de:e4:28:09:90:f9:7e:2b:c8:fb:69:75:25:
         33:ce:fe:38:ab:83:06:d0:7a:79:94:30:e9:6b:66:2a:9c:5f:
         cb:1f:b1:8f:4c:f3:b2:12:ce:b9:86:73:6b:9c:e1:82:40:ff:
         4e:aa:d1:2d:a5:4c:e8:ed:8b:d5:33:f7:28:d9:1a:a5:20:ea:
         03:52:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org