Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/wKxuY_9vv_qPFI85AE1Yd1VY5Rw.roa
File:                     wKxuY_9vv_qPFI85AE1Yd1VY5Rw.roa (raw, json)
Hash identifier:          7WypXwLl09psa88os6uoaHjJpH5Vj00Gn1JTtRrHJjM=
Subject key identifier:   C0:AC:6E:63:FF:6F:BF:FA:8F:14:8F:39:00:4D:58:77:55:58:E5:1C
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       13
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/wKxuY_9vv_qPFI85AE1Yd1VY5Rw.roa
Signing time:             Wed 16 Jun 2021 02:38:07 +0000
ROA not before:           Wed 16 Jun 2021 02:38:07 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     17948
IP address blocks:        49.236.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Jun 16 02:38:07 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=C0AC6E63FF6FBFFA8F148F39004D58775558E51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:83:0f:b9:cf:a8:54:52:7d:a1:9e:c6:b6:
                    57:dc:43:ed:8c:56:86:c6:f6:77:28:56:42:ef:8c:
                    f9:4d:f5:3c:36:19:67:b5:85:73:56:3f:83:dd:0f:
                    05:c5:97:a2:7a:39:dc:3f:74:d4:ae:e0:a9:5c:dd:
                    f3:b0:39:3b:69:86:44:0f:f6:2f:7d:bb:38:c7:c7:
                    f6:0a:fd:2d:5d:fa:72:7f:05:f7:59:11:cd:3f:e8:
                    e4:f9:f2:31:d5:ab:5c:03:36:e5:0e:c9:d8:32:d3:
                    84:5c:9f:e5:ca:a9:ec:d4:0d:37:a9:7c:d2:63:63:
                    1e:b3:8d:63:1a:5c:18:38:31:fa:58:f3:35:81:c2:
                    03:2a:5f:30:b0:b2:d4:e2:e9:c9:72:61:4a:8a:33:
                    70:28:5a:59:88:6c:82:ca:67:8c:ce:e3:94:49:69:
                    73:36:92:b0:42:30:8c:53:06:a9:95:5b:33:d2:22:
                    ab:ab:19:8c:ca:e6:90:e8:39:97:55:d3:17:71:e6:
                    fd:89:e5:a0:2c:cb:df:5d:04:77:9f:b6:8f:97:b5:
                    16:01:43:33:4c:d8:be:21:a7:21:11:2d:88:87:49:
                    ad:2f:d6:e9:e6:7c:cc:6a:2b:8d:80:8a:d8:68:49:
                    62:22:b1:4d:ac:e2:e1:d0:ab:86:77:a9:50:00:24:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AC:6E:63:FF:6F:BF:FA:8F:14:8F:39:00:4D:58:77:55:58:E5:1C
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/wKxuY_9vv_qPFI85AE1Yd1VY5Rw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:22:4d:69:62:e4:50:63:0b:e4:15:84:92:b6:ad:ac:2a:
         57:34:bc:19:c9:32:63:b1:06:b8:ef:98:73:10:ce:cb:73:c4:
         ac:d5:4d:64:f8:78:78:5a:cc:67:e2:bc:18:45:a4:33:59:87:
         ef:e1:02:bd:92:fb:57:50:8c:47:81:de:6a:49:08:fd:bb:3f:
         38:f5:24:e1:e4:35:59:43:a1:0c:c0:a0:32:a8:ed:ca:46:54:
         7c:21:c8:c3:91:20:f2:73:e5:54:fc:e6:e0:18:0c:49:1b:a3:
         ff:7f:90:02:fa:e4:26:fd:8f:05:6a:76:0c:35:a4:8f:90:ff:
         8c:75:98:f1:ae:e4:e9:65:90:97:ca:3c:53:c3:d7:01:ab:fc:
         72:5a:14:90:8f:b3:73:15:b3:f0:66:e0:da:7e:4d:43:30:5a:
         ec:30:1b:6b:24:f1:df:ed:35:b9:76:55:27:8a:2d:fe:d0:dd:
         ff:34:54:56:4c:2a:e2:17:eb:55:5b:78:39:10:74:c5:f2:1e:
         b4:6c:52:64:f3:15:45:80:74:e0:78:43:92:49:35:ef:08:02:
         37:3e:aa:28:8a:71:e9:28:a9:80:20:8a:84:d4:b1:3e:7a:97:
         f7:76:57:25:1f:e7:77:e9:57:74:f4:48:3b:12:ba:99:44:2b:
         39:27:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org