Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/BlQcUaNxMgwaWJhNVM-NKQgh3X0.roa
File:                     BlQcUaNxMgwaWJhNVM-NKQgh3X0.roa (raw, json)
Hash identifier:          LCBYgj8zxOFcY67ZrQB0tMQMhzdQoahvbu3+fQ01jvQ=
Subject key identifier:   06:54:1C:51:A3:71:32:0C:1A:58:98:4D:54:CF:8D:29:08:21:DD:7D
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       17
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/BlQcUaNxMgwaWJhNVM-NKQgh3X0.roa
Signing time:             Wed 15 Mar 2023 07:22:03 +0000
ROA not before:           Wed 15 Mar 2023 07:22:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     17530
IP address blocks:        122.201.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 15 07:22:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=06541C51A371320C1A58984D54CF8D290821DD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:75:60:db:24:dd:e1:3d:1f:aa:74:50:21:
                    f0:a3:89:48:08:e8:9b:de:3c:ff:18:02:52:d4:16:
                    c4:4e:16:10:ad:95:94:e5:f4:dd:db:10:12:38:f0:
                    96:4f:94:00:c2:c5:b5:f9:54:fc:bb:26:1f:33:92:
                    dc:2f:00:19:90:30:22:ed:ec:72:96:1c:10:61:b8:
                    1c:79:db:f8:c9:5d:0c:87:60:c9:c2:cb:4c:cf:e6:
                    de:24:e8:de:64:13:72:c5:d5:43:f5:4f:1f:01:f0:
                    df:b6:4e:72:31:85:64:f6:e1:60:cc:91:77:f6:b0:
                    db:88:da:22:97:bf:11:d4:bd:af:0e:df:9b:d6:a6:
                    55:0a:dd:3c:65:16:33:59:8c:4d:a9:62:af:8f:a9:
                    0b:9a:d8:32:fb:89:8b:24:ac:1b:b7:fc:76:a8:52:
                    9f:31:73:fb:ac:58:ba:58:7b:58:d2:99:40:64:36:
                    c3:99:eb:db:97:9f:75:ca:d8:07:eb:ec:67:c0:95:
                    2b:fa:5a:c7:f4:89:1a:b7:c8:f0:ac:6a:5d:19:90:
                    48:a3:7f:05:72:2a:10:70:66:6f:34:fa:a5:b2:65:
                    87:40:7a:a6:8c:a9:30:5a:ab:1a:04:30:ec:dc:a1:
                    b7:91:4d:31:7d:cd:a9:55:68:59:5e:35:50:5b:9e:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:54:1C:51:A3:71:32:0C:1A:58:98:4D:54:CF:8D:29:08:21:DD:7D
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/BlQcUaNxMgwaWJhNVM-NKQgh3X0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:cf:c4:03:2d:73:6d:d1:d0:03:24:92:ee:1f:11:db:d7:fb:
         31:41:3f:cf:81:ac:bf:a8:af:d6:4d:ee:28:df:e3:78:01:08:
         c4:23:c9:fb:8c:92:56:db:84:e9:32:11:b5:18:37:de:d1:b2:
         d0:b4:42:6e:48:6b:6b:8d:04:83:d8:7d:3f:10:64:c2:03:61:
         4c:db:9f:1e:59:20:f6:bb:a4:ff:40:4c:f0:f6:98:ec:45:36:
         7c:52:b3:6b:fa:d9:ed:2d:05:fd:d3:a2:36:4b:d9:23:1c:52:
         85:13:95:52:da:ae:57:e7:42:bf:5d:a5:26:87:ca:d8:f8:c3:
         d5:88:ad:59:16:7e:94:24:a0:88:ec:53:d6:13:61:69:0a:bf:
         22:24:81:df:4f:d6:5b:90:3c:df:b8:69:3b:bf:d7:bf:ac:2f:
         31:49:c5:74:4d:4b:76:68:eb:42:e4:e6:b2:e9:bf:3b:7a:74:
         f7:a0:3d:c2:4b:25:9f:da:d7:69:9a:30:b6:7f:db:70:9a:c2:
         a9:94:79:8b:3a:42:b1:a0:92:d0:42:10:22:b8:84:cf:2c:47:
         0c:6b:0b:41:99:6b:03:5f:3a:d6:20:0b:b6:75:00:d8:3c:aa:
         24:ff:82:e5:f6:f5:02:1e:9c:fa:6f:e2:49:9a:4a:45:8c:e3:
         49:07:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org