Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/26kP2JEUzgt90H5Ya8zT7VoAeMA.roa
File:                     26kP2JEUzgt90H5Ya8zT7VoAeMA.roa (raw, json)
Hash identifier:          8E6eVDbTibo3fn0XkqZzn8QK3cp/FLK82F8B9Ig2KPY=
Subject key identifier:   DB:A9:0F:D8:91:14:CE:0B:7D:D0:7E:58:6B:CC:D3:ED:5A:00:78:C0
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       2E
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/26kP2JEUzgt90H5Ya8zT7VoAeMA.roa
Signing time:             Wed 20 Apr 2022 09:22:24 +0000
ROA not before:           Wed 20 Apr 2022 09:22:24 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        210.142.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:22:24 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=DBA90FD89114CE0B7DD07E586BCCD3ED5A0078C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:3d:dc:22:59:e5:d7:6d:3c:4d:ae:54:ea:
                    79:52:5b:18:e0:73:18:76:ae:12:67:f8:19:47:53:
                    e5:85:77:05:e7:dd:1b:e5:f5:86:a8:5c:59:6e:07:
                    a9:4f:73:da:8b:50:e2:50:5f:4f:a4:76:44:a6:0a:
                    24:af:5d:da:cc:72:a7:a7:7f:45:41:b3:21:c6:af:
                    1d:8a:62:ca:dd:ef:a1:3c:5d:f6:06:7b:90:fa:a1:
                    0b:89:67:bc:6b:ba:83:d4:c6:21:16:ea:3d:ae:f2:
                    4a:a4:4c:9f:e7:18:b7:d7:08:e8:b5:ae:a7:17:76:
                    e9:7a:04:a3:7c:98:f8:33:e2:89:c8:3f:38:78:e9:
                    45:21:eb:62:80:72:03:79:88:66:2c:9d:3d:56:c5:
                    a8:2a:ed:3a:3c:e8:b7:85:ec:6b:33:74:14:5d:cd:
                    ba:9a:67:e8:7f:53:7d:ec:56:40:43:cf:f1:8d:04:
                    ac:8a:42:c3:73:b0:23:f9:6b:12:e7:1f:b6:84:1e:
                    ac:c1:8b:e9:c1:47:92:40:2c:f6:c0:e8:84:96:3d:
                    5a:09:49:ed:1b:67:9c:69:d7:eb:18:ca:01:61:76:
                    7b:d0:5b:79:42:60:6b:b7:23:eb:a0:fe:9f:00:49:
                    53:57:c3:eb:ff:21:71:5b:da:25:02:8b:98:87:77:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:0F:D8:91:14:CE:0B:7D:D0:7E:58:6B:CC:D3:ED:5A:00:78:C0
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/26kP2JEUzgt90H5Ya8zT7VoAeMA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.142.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:12:2e:4b:2a:29:b7:a1:7b:fe:02:03:72:4a:4d:4a:76:9b:
         8e:3f:41:9a:e6:64:bc:59:c2:6a:d7:f9:99:ce:b9:ef:b5:14:
         93:60:2a:71:1f:0c:aa:01:f2:a8:eb:20:8a:bc:20:fb:8f:f0:
         d2:55:65:96:a3:cf:09:48:6b:7b:a1:ae:da:75:be:1c:c5:ec:
         3e:a5:3c:7d:41:93:ee:b2:31:2a:f1:81:95:a5:2c:13:1e:ef:
         bf:de:70:f4:e4:6f:c3:a6:a4:27:16:2d:f2:c3:e5:d3:29:30:
         fc:cc:7a:48:41:f4:9a:23:36:7d:42:b6:f0:9d:08:4b:aa:7d:
         53:af:53:7c:9e:ee:97:ee:ab:9e:cf:8a:24:c7:cd:17:4a:57:
         50:30:3b:49:9f:5c:8e:44:68:52:b4:fc:dc:39:03:c0:81:7d:
         62:12:cf:34:4f:fd:9b:bf:bb:8f:23:c5:a9:bc:31:8d:11:e7:
         83:65:60:60:c9:f9:1c:fb:a4:4b:f8:ca:d1:41:07:7e:db:97:
         85:fe:df:a2:8d:17:83:f8:f5:b3:c5:6f:d1:e4:1b:63:59:c8:
         12:4f:86:35:44:60:bf:83:38:ad:5b:03:1d:e6:03:cb:5f:cf:
         39:0f:f2:7d:7f:1e:db:81:af:5b:9c:ce:c3:8b:51:98:21:d2:
         1a:bb:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org