Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/6rKg8lq6x512DHdYEDweBENapNU.roa
File:                     6rKg8lq6x512DHdYEDweBENapNU.roa (raw, json)
Hash identifier:          cP9Z+4xhV0V0R65df/VWcfwnF69fyiL36k9ciV9W15A=
Subject key identifier:   EA:B2:A0:F2:5A:BA:C7:9D:76:0C:77:58:10:3C:1E:04:43:5A:A4:D5
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       6B
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/6rKg8lq6x512DHdYEDweBENapNU.roa
Signing time:             Mon 01 Aug 2022 01:29:10 +0000
ROA not before:           Mon 01 Aug 2022 01:29:10 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        211.135.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:10 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=EAB2A0F25ABAC79D760C7758103C1E04435AA4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:09:c1:2f:7e:8c:2d:fb:7e:d8:b6:08:b2:
                    f9:a4:d7:bf:34:77:49:36:3a:73:38:4d:2c:f2:04:
                    ab:e0:79:76:51:56:e6:32:7b:7d:b3:71:1b:70:45:
                    4b:f2:4c:0b:15:9d:c3:e6:17:83:d1:c3:b0:71:69:
                    72:f0:80:d8:5a:68:68:d8:48:2b:03:ea:96:a1:51:
                    33:f9:c8:50:24:ab:24:40:4a:46:08:4a:7b:53:97:
                    47:76:c9:80:27:d2:b0:e0:2f:ba:0c:b9:43:ee:5b:
                    13:b0:33:8d:50:16:60:cd:b1:ca:9d:39:61:02:77:
                    73:4f:5e:a9:f6:45:09:2a:33:dc:f1:12:99:0e:2a:
                    04:26:f7:94:37:43:b9:01:a5:b8:26:43:f1:9c:18:
                    78:b6:a5:72:11:ed:71:ae:7f:7c:76:08:21:81:e0:
                    ef:85:79:e3:06:5c:d6:9f:27:0f:44:23:25:bb:89:
                    a7:7a:dc:65:15:af:44:17:05:34:9e:90:2a:85:32:
                    46:36:55:b5:e5:c0:1d:b5:aa:5b:ee:cc:93:64:3c:
                    61:63:40:83:6f:fc:e1:97:c8:a9:35:c3:fa:a9:b2:
                    5d:b6:e5:70:9d:64:2d:3d:5b:a3:2e:2d:f7:17:1a:
                    dc:b7:12:63:4e:b7:4c:42:c0:c5:67:37:91:99:c3:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:A0:F2:5A:BA:C7:9D:76:0C:77:58:10:3C:1E:04:43:5A:A4:D5
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/6rKg8lq6x512DHdYEDweBENapNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.135.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:58:b1:a9:d1:35:43:be:64:e0:c3:f6:39:dd:8c:e0:8e:8b:
         55:78:56:bc:17:41:c8:7f:60:73:9b:03:a5:f8:34:8c:63:25:
         a0:d2:af:cd:17:cb:c9:d4:ae:c1:4d:aa:54:36:08:b7:03:1d:
         65:72:23:1a:c3:e7:dd:6a:5f:a8:c9:26:40:65:12:72:21:17:
         c5:b6:9a:bb:f3:b2:27:5a:71:60:44:a1:91:01:17:53:b4:da:
         25:1b:71:bd:db:42:75:ca:d1:4e:4d:83:86:1c:d0:f8:33:5c:
         8b:e3:12:b4:2f:c4:f8:e6:e3:4a:d2:54:b1:a2:76:1c:29:45:
         b6:0c:34:d0:79:eb:e6:b3:41:b6:3b:46:ad:3e:1a:43:31:50:
         21:ca:38:a6:51:66:1d:d9:f9:ef:45:cd:85:f3:37:d1:74:27:
         4d:49:65:eb:cd:ef:77:2c:3b:85:24:0b:2d:64:b6:de:ca:3d:
         9d:cb:c4:98:38:7f:38:b3:3e:c9:55:22:29:9a:82:45:7b:6b:
         da:25:5e:b4:68:73:96:22:a8:6d:1e:95:ef:62:99:d0:49:f0:
         56:58:24:bc:e8:57:f8:78:1b:4a:ec:10:07:7f:c0:3c:ee:ee:
         b7:8a:ba:97:78:c5:7b:e0:5d:99:69:22:01:a1:3b:c3:8d:1e:
         e5:73:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org