Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ItT0Ede70e8mRKKpsCbWEoTrTwU.roa
File:                     ItT0Ede70e8mRKKpsCbWEoTrTwU.roa (raw, json)
Hash identifier:          OQ74vvIF5XN3dX7N/4278pOBvC9pv0eSfBxR0GsAvfE=
Subject key identifier:   22:D4:F4:11:D7:BB:D1:EF:26:44:A2:A9:B0:26:D6:12:84:EB:4F:05
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       49
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ItT0Ede70e8mRKKpsCbWEoTrTwU.roa
Signing time:             Sat 01 Oct 2022 01:29:34 +0000
ROA not before:           Sat 01 Oct 2022 01:29:34 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9621
IP address blocks:        211.120.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct  1 01:29:34 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=22D4F411D7BBD1EF2644A2A9B026D61284EB4F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:25:b8:02:20:b6:93:9e:9e:87:e6:8e:7c:b1:
                    b5:4d:6a:40:4d:bd:f4:06:7e:29:c1:d9:da:63:c5:
                    b1:09:4b:d1:5a:7e:38:7f:30:eb:d8:39:fa:66:06:
                    f6:d8:1b:bf:69:f1:d4:18:19:ae:70:f5:52:eb:93:
                    a8:e1:64:29:d9:64:b0:e4:8f:79:ca:8b:e1:c4:fe:
                    40:58:d9:80:7d:04:1b:6d:ca:97:47:ae:3d:fd:0d:
                    6d:63:1a:77:38:00:fe:dc:a4:11:6e:2b:73:f6:fb:
                    9b:c9:45:f7:16:64:29:3e:23:45:34:c5:a8:32:c6:
                    49:94:2e:a7:be:e3:e6:0a:4f:a4:a6:29:0a:d6:b4:
                    1e:39:d7:42:72:8b:33:72:f9:6a:3b:2f:a0:63:67:
                    f7:da:3a:7c:66:ac:af:2b:68:54:7b:5e:ac:e5:89:
                    70:56:fe:73:fc:ec:31:99:57:b6:5d:2e:4d:c0:5b:
                    cf:1a:cd:ce:cd:7c:4e:d2:62:e4:d9:83:9b:93:0a:
                    c5:75:75:85:e9:63:35:27:7b:33:9a:70:53:97:40:
                    1b:2f:dc:64:c7:11:c0:9b:c8:00:55:e7:de:45:77:
                    57:7c:d0:05:78:a7:04:bd:95:81:f0:2d:a8:91:07:
                    ca:7e:4e:d3:8d:7e:46:3a:17:34:24:46:25:bb:ad:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:F4:11:D7:BB:D1:EF:26:44:A2:A9:B0:26:D6:12:84:EB:4F:05
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ItT0Ede70e8mRKKpsCbWEoTrTwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:d9:f0:cf:af:43:9b:21:32:75:5c:f9:67:d3:19:f1:7d:
         0b:72:85:31:c0:78:33:d2:5d:08:6b:02:c3:c0:69:c8:23:d0:
         2b:eb:f8:92:cc:f2:d7:e3:1b:ad:e3:8e:31:1e:af:51:3b:cf:
         eb:a4:93:a7:96:4a:54:09:f5:f1:49:18:ae:07:d8:a3:9b:9b:
         cf:8e:7c:ad:d5:58:a8:9b:41:04:ff:c0:a0:2e:12:3e:c3:3e:
         8c:20:0f:8f:e7:64:82:ec:86:ae:19:19:91:fd:94:41:12:c4:
         b5:50:ad:d1:b1:80:4a:e6:39:3b:a4:4a:69:7d:f0:d0:0d:28:
         c2:6c:ca:53:95:c3:ba:5a:43:f0:f3:5e:4e:dc:90:74:d4:2f:
         99:5b:14:cb:43:21:10:5c:a3:23:5c:b6:4c:ae:3c:70:5c:76:
         8a:0c:e8:74:11:a4:b5:0c:d1:65:d7:4b:b6:b9:42:77:a8:54:
         4a:37:73:f4:d2:5c:19:ae:fa:c8:c4:57:73:a7:00:a8:62:42:
         ee:74:da:d5:81:a3:1b:ab:e3:67:ae:9a:ab:1d:4b:1d:4e:f3:
         fe:73:98:bc:30:64:5c:fb:f7:90:86:19:5c:ca:a4:36:88:3f:
         07:b1:aa:98:0c:28:14:40:32:8a:26:9d:9b:41:80:25:b6:b4:
         dc:3e:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org