Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/OiQenU0g-RU0hZf7zPRgwhrulys.roa
File:                     OiQenU0g-RU0hZf7zPRgwhrulys.roa (raw, json)
Hash identifier:          gb+mccSfwIvxjhHYVuF71xwbrke7LZB2X1Hl3Fs8zK4=
Subject key identifier:   3A:24:1E:9D:4D:20:F9:15:34:85:97:FB:CC:F4:60:C2:1A:EE:97:2B
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       0B
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/OiQenU0g-RU0hZf7zPRgwhrulys.roa
Signing time:             Tue 31 May 2022 01:42:44 +0000
ROA not before:           Tue 31 May 2022 01:42:44 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24271
IP address blocks:        202.177.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: May 31 01:42:44 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3A241E9D4D20F915348597FBCCF460C21AEE972B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:6d:7f:00:1f:bd:30:2a:66:02:4f:a2:f5:
                    3b:ea:37:b0:a1:bd:20:46:91:e4:a3:73:60:c8:82:
                    16:7f:1d:b1:18:91:a6:0b:fb:8b:e3:86:18:e6:02:
                    bb:19:fe:f3:ab:08:8f:cc:4c:a0:f1:3d:a9:1d:b1:
                    27:a7:28:d6:1b:d0:18:86:c1:a4:8c:6b:ee:c5:b6:
                    cd:26:0a:50:e0:af:af:b3:14:2f:bf:a8:06:a1:24:
                    75:de:57:27:2f:7a:90:af:11:34:26:50:e1:f1:7e:
                    55:22:af:cc:2f:60:e0:aa:07:87:70:2e:24:0f:a6:
                    8e:38:01:2b:f1:29:c7:85:11:f1:ae:63:55:53:f0:
                    60:69:d0:9f:a2:52:b9:a2:ea:8e:ac:9c:d9:19:0b:
                    93:98:fa:84:80:bb:12:f6:eb:15:1d:28:03:55:6e:
                    41:e5:90:73:39:4c:d8:72:2c:f3:6e:9e:c1:72:06:
                    51:1d:76:d6:7c:c0:40:d5:b2:7a:6f:b9:f1:ae:9f:
                    ac:1c:51:6e:d1:86:4d:ef:96:66:2c:f6:59:c5:82:
                    1d:a9:71:bb:54:72:27:90:a3:44:20:e5:72:be:e2:
                    1f:42:8d:ef:7c:59:f8:39:e5:33:54:1f:1d:03:3f:
                    c2:0c:93:6f:52:ef:1a:87:ca:ce:3a:ed:bc:28:7b:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:24:1E:9D:4D:20:F9:15:34:85:97:FB:CC:F4:60:C2:1A:EE:97:2B
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/OiQenU0g-RU0hZf7zPRgwhrulys.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:9f:2c:e3:58:f3:cd:70:cc:93:54:f0:79:c4:28:2b:30:
         68:5d:cc:ad:53:35:e4:2f:6b:6f:c8:0f:47:a4:ac:21:e2:45:
         be:76:09:3f:dd:c0:05:2a:c1:89:8d:9c:8f:32:21:7d:fa:62:
         0a:4e:e6:7b:ff:f7:97:42:b4:ed:6a:98:c4:28:7d:b2:c3:37:
         bd:d9:2e:f5:cb:3d:92:2b:c3:2b:19:c1:71:c8:13:30:e5:c4:
         1f:c9:73:b1:8b:e8:2e:ca:c7:f7:57:f9:45:da:35:70:8e:ab:
         78:fb:04:1d:10:3a:16:d3:9b:8b:be:71:de:f4:b3:f4:cd:c4:
         b3:ee:7f:34:b9:11:fc:47:d5:e6:32:d4:af:dc:94:1a:fb:c2:
         9d:ea:aa:d1:93:a8:d5:7d:60:55:fe:45:21:4b:ce:dd:7c:5e:
         c0:d0:84:3a:c5:9e:cf:57:a1:2f:e0:9f:29:7f:52:16:d5:e9:
         d8:18:1c:cd:d4:63:20:16:fe:16:4d:a9:58:ab:23:90:7c:b4:
         ea:8a:6f:6e:e0:56:42:98:78:dd:14:77:f4:f7:94:6a:c2:84:
         99:3d:a6:26:55:2f:0e:91:8f:ed:6d:81:7a:0c:dd:c8:8b:96:
         c7:33:02:be:c8:56:ff:83:b9:ce:88:5d:f9:4c:bd:13:5d:95:
         ed:c8:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org