Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/awGIxKhzqCkOK5IdhK69LK9kPI0.roa
File:                     awGIxKhzqCkOK5IdhK69LK9kPI0.roa (raw, json)
Hash identifier:          bHO5OqKAXmN7iG3r6d29W7B7iSvVNkImG98Fw+JxnEA=
Subject key identifier:   6B:01:88:C4:A8:73:A8:29:0E:2B:92:1D:84:AE:BD:2C:AF:64:3C:8D
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       02
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/awGIxKhzqCkOK5IdhK69LK9kPI0.roa
Signing time:             Thu 12 May 2022 01:01:13 +0000
ROA not before:           Thu 12 May 2022 01:01:13 +0000
ROA not after:            Fri 12 May 2023 00:42:17 +0000
asID:                     131954
IP address blocks:        103.212.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: May 12 01:01:13 2022 GMT
            Not After : May 12 00:42:17 2023 GMT
        Subject: CN=6B0188C4A873A8290E2B921D84AEBD2CAF643C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:32:22:36:e7:f7:d6:ae:37:00:be:ae:43:
                    4f:5d:bd:32:16:7b:e4:fe:3c:95:a5:7b:dd:2a:bb:
                    bd:f2:e3:4e:44:98:9c:f6:7f:4d:08:38:04:e9:ef:
                    e7:25:82:e4:9f:1e:a1:60:5a:55:33:bf:17:63:dc:
                    c6:54:f9:76:ae:9a:9b:9a:09:d0:8c:57:a0:92:f8:
                    6f:b7:d3:20:0a:a6:8b:a8:e2:7b:c4:f2:18:db:23:
                    65:70:38:ca:7d:fe:52:ca:a1:c5:7e:fc:4b:17:15:
                    80:18:f8:a0:d1:1b:96:be:dc:c1:14:a2:55:56:c4:
                    3b:28:6d:28:ca:15:d2:f0:b8:bd:75:19:95:13:e7:
                    e1:ef:48:6e:4b:88:1b:74:7a:6d:b8:55:27:ea:c6:
                    2a:33:f8:5b:c2:88:71:6b:30:b2:3c:c8:73:33:36:
                    3d:fb:77:a9:0a:35:de:5a:49:47:73:27:7c:2a:61:
                    9e:4a:74:8d:8a:07:42:ab:df:07:5e:37:17:55:34:
                    76:4a:bc:1c:17:b3:aa:ee:7b:7b:f5:83:50:21:cb:
                    41:6e:de:d4:86:6e:ec:f3:46:ea:1a:88:32:3f:1f:
                    b2:5c:67:c1:43:af:76:ad:be:8d:cc:ce:3e:b0:f0:
                    a6:40:ba:50:da:18:8e:bd:ca:bd:8a:50:ae:3e:16:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:88:C4:A8:73:A8:29:0E:2B:92:1D:84:AE:BD:2C:AF:64:3C:8D
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/awGIxKhzqCkOK5IdhK69LK9kPI0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:ea:32:3e:cb:b1:70:29:c5:f2:28:12:ee:05:ef:7b:ab:
         1a:36:2d:56:2d:5c:95:13:82:1e:60:ff:63:30:61:35:e6:dc:
         5a:b5:8e:5a:df:d3:09:07:cb:28:eb:78:bb:59:4e:c4:93:43:
         e0:d5:92:d6:ef:fe:d6:18:b7:b0:c6:c8:dc:21:b7:aa:a3:f4:
         cf:80:a1:17:d5:5f:89:4f:39:b1:9c:9c:19:3b:bd:40:7b:3d:
         e0:67:28:4f:7e:64:ac:b4:b1:29:5e:b5:2c:41:59:61:58:cd:
         76:33:4b:f9:5f:e9:ea:ff:df:a6:17:9b:11:44:ea:1a:c3:2a:
         93:36:28:9f:01:4f:fc:dd:61:80:bd:12:0c:25:98:dd:f3:d0:
         e7:bf:77:a9:e0:17:07:81:c2:4e:b8:18:86:42:ec:22:b1:21:
         31:73:17:57:cd:af:e0:3a:99:45:e7:d3:2f:36:ae:39:ca:d6:
         28:38:d5:ce:a8:e0:a1:7d:37:2d:68:90:23:d8:f7:8c:23:32:
         f2:4d:95:ff:b5:88:2a:45:03:a0:d1:52:45:e6:87:f7:ec:c2:
         9d:88:92:64:69:a0:c4:ce:0c:82:0f:77:58:b9:02:9e:2a:c0:
         cc:78:d2:15:56:97:e2:bd:e6:e7:bd:ff:0f:e4:5d:77:d2:d7:
         ff:0c:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org