Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/UZKrdAfKZGfvre-2a0xv0Cf7jYg.roa
File:                     UZKrdAfKZGfvre-2a0xv0Cf7jYg.roa (raw, json)
Hash identifier:          i5rkKsYyzsdqiJzYbzNg5KYW08L9VjUWfLJAmJL7FDs=
Subject key identifier:   51:92:AB:74:07:CA:64:67:EF:AD:EF:B6:6B:4C:6F:D0:27:FB:8D:88
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       320D
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/UZKrdAfKZGfvre-2a0xv0Cf7jYg.roa
Signing time:             Sun 01 May 2022 01:30:24 +0000
ROA not before:           Sun 01 May 2022 01:30:24 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        210.233.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12813 (0x320d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: May  1 01:30:24 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5192AB7407CA6467EFADEFB66B4C6FD027FB8D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:df:52:a1:71:d9:93:67:6d:b8:cb:1d:d4:
                    24:ea:ce:c2:3c:6e:c7:d2:57:f6:e4:70:ef:8d:78:
                    12:a8:ed:dd:bd:2b:29:2a:5a:69:66:b9:33:d3:2a:
                    5c:de:f7:f4:58:dc:a8:46:7d:f1:84:31:f3:91:32:
                    6d:97:f3:1a:5c:39:8d:ee:de:6a:ef:4e:94:83:ee:
                    0c:87:51:de:29:99:0d:69:3d:04:68:4f:64:6a:51:
                    1e:92:b2:f3:83:10:59:9e:dd:81:04:da:7d:77:da:
                    ce:b5:04:e4:b4:63:04:23:07:f7:a7:88:c3:ca:c9:
                    f2:40:57:62:dc:1a:70:aa:0c:8a:1b:f3:25:ea:64:
                    36:8b:cc:4b:f7:19:70:cc:7f:42:26:d3:d2:8f:b4:
                    3d:aa:0b:93:33:03:7a:84:37:77:79:7b:2c:99:23:
                    a5:45:70:7d:27:ee:65:8a:21:b8:7c:66:25:37:a5:
                    b0:36:0b:26:36:d2:e9:09:74:08:74:ca:66:18:41:
                    50:52:45:06:e2:e2:ce:45:6c:ec:95:de:13:49:9c:
                    dc:24:5e:25:df:bd:8c:54:75:e8:75:9b:58:b4:dd:
                    f9:82:83:3c:3d:0c:5d:7c:91:0d:11:9b:3a:fa:d8:
                    aa:f8:2b:e2:ae:57:0b:66:f4:ff:24:93:0e:f9:f7:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:92:AB:74:07:CA:64:67:EF:AD:EF:B6:6B:4C:6F:D0:27:FB:8D:88
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/UZKrdAfKZGfvre-2a0xv0Cf7jYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:74:a5:ce:c5:78:2a:4b:b3:58:49:bd:f9:26:4c:f6:7c:
         c2:8f:d1:93:9a:eb:82:f7:19:e3:83:be:5d:b5:b9:bb:a1:48:
         89:aa:9e:a6:6f:f7:64:71:ff:5f:0c:34:e0:ff:e2:e8:a5:2f:
         88:52:4d:6e:f7:d9:8e:df:30:ca:c1:97:91:62:da:ef:cb:22:
         bb:bb:60:42:14:7c:2e:b0:da:95:59:b2:1d:e2:ad:6d:b5:55:
         89:bb:c9:8c:25:54:d8:29:74:28:c5:64:0a:73:14:73:20:19:
         a8:e9:ce:22:9c:14:7c:60:f3:ec:28:22:82:8a:a6:32:00:e2:
         ca:2c:b0:b4:76:d3:f1:39:87:2f:28:5d:4c:25:31:7e:e4:87:
         48:88:40:22:fc:e9:b3:2a:7e:0e:cb:1e:de:e1:7a:f7:85:ea:
         b6:13:6d:f9:e5:83:e9:ff:a3:63:1b:3a:76:ea:04:7e:7c:55:
         38:2a:06:f5:0e:d7:1c:94:45:09:51:f3:6f:da:2b:be:42:f1:
         ce:73:c6:76:2b:49:0c:d6:a1:94:2d:2e:19:32:96:30:1c:d1:
         78:80:c1:bd:2e:4b:ba:e4:b6:3b:f2:83:42:4c:7e:c5:61:08:
         f4:62:4d:0c:ed:7c:72:d2:64:85:cb:21:5e:54:75:9d:57:bd:
         e2:52:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org