Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/Ct8PnYbfTalZA2_P29FdCXcndPs.roa
File:                     Ct8PnYbfTalZA2_P29FdCXcndPs.roa (raw, json)
Hash identifier:          NeLYEMlZapXgmXxBkObNGJyQTs5zSERrUUrRNsaIC24=
Subject key identifier:   0A:DF:0F:9D:86:DF:4D:A9:59:03:6F:CF:DB:D1:5D:09:77:27:74:FB
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       28
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Ct8PnYbfTalZA2_P29FdCXcndPs.roa
Signing time:             Wed 11 May 2022 01:48:25 +0000
ROA not before:           Wed 11 May 2022 01:48:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        210.141.216.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:48:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0ADF0F9D86DF4DA959036FCFDBD15D09772774FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:f3:bf:a0:19:26:46:55:b1:33:50:43:e5:
                    8c:bc:8c:a4:f2:f0:e6:0d:6c:39:71:44:f7:13:70:
                    ec:3c:bd:65:32:7e:e0:99:e3:f4:ec:45:fb:13:e3:
                    53:35:c2:f9:1e:95:53:b1:74:a5:12:6b:de:df:3c:
                    bb:b0:b7:45:0b:24:11:38:b4:77:5a:f7:a6:fb:f5:
                    ae:5a:d6:63:fb:db:6e:8d:c5:8a:bd:98:86:4d:4f:
                    1b:7a:82:d8:fc:ab:66:63:b4:ee:bc:9b:df:c3:9b:
                    4b:7a:7f:de:92:ce:f3:91:df:4a:bd:84:40:ed:8c:
                    d9:f9:74:fb:be:15:21:ca:05:d7:2b:1a:88:65:b3:
                    b0:a6:0c:02:cc:0f:1a:64:d4:43:e5:28:82:00:f0:
                    8b:3f:79:22:0b:5d:bc:00:dc:c4:ea:97:6a:63:2e:
                    4e:75:8e:62:07:e6:91:14:53:1a:04:be:f7:12:1a:
                    7a:dc:54:92:48:5d:93:8e:76:0e:43:19:2a:80:5a:
                    d1:66:0a:c9:7a:42:89:ec:6c:06:d1:3f:29:6f:ca:
                    29:6a:4f:9f:5f:83:fc:22:6c:04:db:c2:b3:71:e4:
                    e8:2b:80:69:64:33:b4:cd:e2:1e:6a:71:3e:18:4f:
                    7a:f6:ae:13:25:d9:45:36:eb:61:a0:be:c6:62:e0:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:0F:9D:86:DF:4D:A9:59:03:6F:CF:DB:D1:5D:09:77:27:74:FB
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Ct8PnYbfTalZA2_P29FdCXcndPs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:81:84:38:2b:88:55:0f:39:e4:f4:fe:50:9a:46:66:07:19:
         a4:4d:f8:25:4b:61:a7:c2:2e:08:f1:31:c2:90:7e:af:9b:89:
         78:fa:30:47:52:36:4e:06:8f:9d:4a:1f:08:fd:83:5e:4c:4e:
         89:91:75:cd:43:94:d7:8d:3a:f6:10:6e:92:a7:40:cc:4a:e6:
         56:d9:29:57:d7:65:2c:21:33:61:73:c2:6c:f1:50:de:28:35:
         76:23:4d:70:77:8b:ee:e7:5b:ff:0a:5a:c4:13:eb:15:cf:ac:
         81:fc:95:14:ee:5a:61:49:b3:d5:3a:8c:e6:34:7b:f8:90:c6:
         78:74:26:35:1a:ed:96:1e:df:84:f7:a7:ec:18:80:4c:b8:58:
         20:43:85:fb:de:28:43:50:e7:ae:d9:35:a3:33:33:a1:ce:e1:
         19:b5:a5:f1:76:9b:34:b8:12:f8:b5:a7:a3:1f:0e:da:c7:74:
         33:af:6e:d9:a5:82:be:73:1c:07:65:6c:26:9f:f2:0c:a4:0c:
         06:be:c1:c5:45:01:74:e7:46:a2:b2:78:8c:b0:0e:32:4f:d9:
         f4:5c:18:48:45:ab:8b:e8:1f:18:ec:ef:7e:03:c3:95:cc:b0:
         28:3e:86:bf:c4:17:e0:a9:4c:b1:03:df:9e:ee:32:71:4a:d0:
         21:25:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org