Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/X0eKqsdCZ1CJMqqCOOt1Cl9vgqI.roa
File:                     X0eKqsdCZ1CJMqqCOOt1Cl9vgqI.roa (raw, json)
Hash identifier:          OQSymnJlzeKGGzDFYAdiYCf5kO2NOtYJUiCpqpyXWY4=
Subject key identifier:   5F:47:8A:AA:C7:42:67:50:89:32:AA:82:38:EB:75:0A:5F:6F:82:A2
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       32
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/X0eKqsdCZ1CJMqqCOOt1Cl9vgqI.roa
Signing time:             Mon 01 Aug 2022 01:28:55 +0000
ROA not before:           Mon 01 Aug 2022 01:28:55 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     17675
IP address blocks:        218.216.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug  1 01:28:55 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=5F478AAAC74267508932AA8238EB750A5F6F82A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:22:ea:5b:c0:a1:bc:98:46:9b:23:8d:81:
                    4b:7c:5b:e8:09:53:8d:95:29:9f:91:4e:ff:5e:1e:
                    da:2a:d1:ec:3f:81:e1:41:69:03:4a:bf:fa:5a:5e:
                    2b:0f:e5:30:15:47:68:bf:07:be:e7:3c:8a:50:7a:
                    4c:98:42:7c:8f:3c:da:33:b1:09:a6:96:92:4e:72:
                    eb:b3:ae:80:99:69:aa:78:ad:29:9b:9f:a8:84:c0:
                    43:10:c2:77:0a:77:85:5c:ab:18:0b:cd:83:78:8f:
                    da:46:0f:11:c1:79:b1:fa:f8:c3:3f:8a:25:3b:85:
                    38:ac:38:56:6a:1a:42:4b:16:e7:a6:a7:11:58:f0:
                    c4:10:72:54:a1:b4:2f:b7:00:b7:a7:fc:91:fe:9a:
                    cd:c4:53:89:12:0e:4e:5e:f4:8e:f5:4f:64:f1:64:
                    42:33:6b:8b:6f:e7:b3:23:08:6b:8a:ec:a0:42:7e:
                    63:c2:e6:86:f6:de:62:3f:e9:b1:c3:32:c9:8f:e9:
                    98:db:df:e1:38:75:35:40:97:65:2f:37:9c:9e:49:
                    94:db:ce:e3:79:b3:ed:22:52:61:f1:34:40:0c:a1:
                    af:09:5c:f6:19:75:6f:bf:34:ae:9e:3b:55:36:f4:
                    ce:f2:09:26:b7:62:37:b1:b2:6b:a6:df:ea:c7:cf:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:47:8A:AA:C7:42:67:50:89:32:AA:82:38:EB:75:0A:5F:6F:82:A2
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/X0eKqsdCZ1CJMqqCOOt1Cl9vgqI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:8b:b9:1d:3d:e0:b4:bd:81:ec:56:d3:ff:20:5f:a5:1f:db:
         4e:4a:01:1f:12:cb:5e:de:4e:78:43:49:55:f2:2f:e3:58:20:
         ad:23:c9:32:f5:db:80:18:c5:57:31:c9:d2:a2:90:d7:c5:a6:
         e4:98:f5:2d:08:6a:3c:0b:75:25:f1:3c:d4:9a:bb:f5:64:00:
         01:1a:5d:c7:bb:f9:5e:b0:41:c8:c9:e8:93:d9:47:b0:0c:d0:
         b6:e7:ef:92:b7:22:bc:8e:2f:82:74:99:0b:28:3d:4a:50:74:
         04:14:b8:cc:33:04:84:b5:e8:83:d7:3e:2f:53:bc:b8:44:06:
         7b:c7:ed:82:28:26:bd:fc:7e:e2:61:d0:c8:b8:04:99:04:19:
         66:1e:93:78:98:51:6c:f6:ff:f3:74:21:7a:de:d2:72:c8:59:
         31:ef:90:61:8d:84:6b:41:7f:b7:88:c6:c9:18:72:92:26:6b:
         2e:2e:31:bb:ad:3a:63:52:6c:ac:be:8c:b3:62:15:bf:c9:6c:
         2e:c4:8b:19:37:f4:88:f7:a2:d0:5c:02:1a:9c:5b:04:43:6d:
         e8:d2:b1:3e:79:ab:b5:b7:e6:ea:98:f4:fd:f9:55:98:11:27:
         c7:24:aa:ed:12:59:bf:02:97:9c:53:01:f3:44:cc:2d:af:d2:
         89:4e:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org