Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/9xPdI3_qFHIDZHnr9D1RDbvRhmc.roa
File:                     9xPdI3_qFHIDZHnr9D1RDbvRhmc.roa (raw, json)
Hash identifier:          yB0PykKTV3/QqSG1krWbiUuZa9RBBVe+sIcy22JQZv4=
Subject key identifier:   F7:13:DD:23:7F:EA:14:72:03:64:79:EB:F4:3D:51:0D:BB:D1:86:67
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       06
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/9xPdI3_qFHIDZHnr9D1RDbvRhmc.roa
Signing time:             Mon 13 Jun 2022 06:28:59 +0000
ROA not before:           Mon 13 Jun 2022 06:28:59 +0000
ROA not after:            Tue 13 Jun 2023 06:06:17 +0000
asID:                     17958
IP address blocks:        220.247.184.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Jun 13 06:28:59 2022 GMT
            Not After : Jun 13 06:06:17 2023 GMT
        Subject: CN=F713DD237FEA1472036479EBF43D510DBBD18667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:9b:aa:15:d5:44:13:92:90:bd:da:1c:5f:
                    b9:52:d6:35:1c:59:98:27:7f:b0:de:9c:6d:d1:1e:
                    ae:07:54:7d:1e:7e:27:cf:95:36:a6:77:04:cf:d6:
                    83:98:9e:32:7b:3a:bf:36:f4:fc:75:fe:c5:9d:e4:
                    fc:c2:36:08:30:87:6e:87:58:64:75:23:4e:83:22:
                    fd:9a:79:36:74:e3:33:3e:0e:69:bc:21:0e:e3:a6:
                    5a:da:08:1f:2c:28:96:f1:4a:0b:1d:2d:8d:ef:83:
                    45:37:aa:85:fd:a6:c1:94:2f:eb:60:7a:4e:0c:3f:
                    73:0e:5e:46:81:62:9e:86:56:fa:cd:4c:e1:12:7f:
                    8f:39:ff:67:17:98:40:1b:20:16:95:a9:ab:70:8c:
                    52:4b:6c:53:b6:4f:1b:a9:89:a7:aa:b2:44:71:85:
                    cf:8b:b6:91:4d:cc:4e:79:65:66:d8:6a:59:30:c6:
                    61:25:e0:55:1a:a9:31:2a:df:b8:f0:7b:ea:29:97:
                    50:77:73:33:53:fc:98:ca:d9:3b:13:c1:db:b9:ed:
                    ca:67:8a:ed:6f:fd:15:6c:01:c7:33:22:1d:3d:41:
                    a5:c0:30:3e:1a:ff:6f:e3:6f:20:ad:de:37:49:62:
                    3d:c8:87:54:73:32:46:77:78:41:c7:0c:b1:2e:c5:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:DD:23:7F:EA:14:72:03:64:79:EB:F4:3D:51:0D:BB:D1:86:67
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/9xPdI3_qFHIDZHnr9D1RDbvRhmc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:a2:17:b1:d7:3f:e0:77:54:bd:b9:97:06:96:53:e7:48:f5:
         e8:0c:ca:9a:47:e2:43:9f:f0:85:18:8d:cd:2b:99:39:d0:42:
         d8:0f:32:4f:80:ec:e4:f6:2e:9c:e7:72:f5:e6:ad:36:fa:4b:
         19:6a:1e:f5:62:f3:3c:1e:59:5a:1c:52:4d:a0:f0:e7:f4:6e:
         a2:63:ed:d1:52:69:1f:df:14:60:d3:e3:17:7a:84:12:c5:46:
         65:c6:cc:e5:b6:9f:06:d6:82:62:2e:0d:85:50:b0:a8:77:c0:
         85:9d:32:bb:ca:78:e5:9b:c1:3d:3d:d8:18:dc:4f:e5:e9:e3:
         7a:22:3c:1c:c1:91:6c:f3:37:ca:bc:42:5d:2d:94:d7:84:6c:
         dd:70:c5:a0:f1:b1:7d:39:ae:34:5a:fb:91:25:03:b1:0f:5a:
         2e:26:d7:e6:35:a3:ee:2f:19:5b:d2:32:1b:9f:10:de:e0:86:
         68:6b:48:d3:07:df:44:1f:39:ad:57:e2:48:10:d1:64:de:30:
         fd:a7:26:59:12:98:24:df:28:33:7b:de:c6:b4:ee:80:17:c6:
         30:ca:bb:ac:cf:aa:4c:58:b7:96:b0:de:4e:62:9f:2f:d7:77:
         54:48:ed:6f:c8:d2:b1:5a:38:ab:b9:ad:bb:b3:7d:15:a3:b1:
         83:5c:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org