Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/tYMPglyqV3adrABltnDhxaOYSgI.roa
File:                     tYMPglyqV3adrABltnDhxaOYSgI.roa (raw, json)
Hash identifier:          txLPyq8OUfWtpPzmXlZ/aGyeQnNx7cuAdMVt66nRvUg=
Subject key identifier:   B5:83:0F:82:5C:AA:57:76:9D:AC:00:65:B6:70:E1:C5:A3:98:4A:02
Certificate issuer:       /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial:       25
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/tYMPglyqV3adrABltnDhxaOYSgI.roa
Signing time:             Thu 01 Dec 2022 01:28:51 +0000
ROA not before:           Thu 01 Dec 2022 01:28:51 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     3491
IP address blocks:        203.170.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
        Validity
            Not Before: Dec  1 01:28:51 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=B5830F825CAA57769DAC0065B670E1C5A3984A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:c4:0d:70:3e:12:db:1d:72:10:d4:d3:b9:
                    06:ef:62:6b:a9:17:4a:e7:69:a3:e4:46:83:8c:55:
                    88:8c:01:8f:34:86:7d:26:e1:7a:ac:07:01:c7:dd:
                    14:ff:8e:be:53:68:33:d5:29:70:a5:a1:8a:69:64:
                    62:43:cd:c3:92:9b:7c:dd:a1:10:dd:f6:e9:22:6c:
                    ed:b0:81:47:36:68:61:49:02:94:ed:36:0d:21:8c:
                    ed:17:6a:9b:2a:ec:d9:61:d6:92:42:6b:9b:18:8f:
                    e3:76:ab:2e:ae:84:b8:40:29:92:9a:e2:a8:2e:b7:
                    1c:0a:a7:39:d6:e5:1a:8f:63:2c:28:44:78:f3:8b:
                    94:99:a9:c1:74:4c:ac:51:f2:51:3a:82:be:cd:97:
                    70:23:b5:d5:61:2d:0f:e0:c9:9f:6c:89:4a:29:88:
                    a1:a3:dd:75:00:2c:6f:c2:76:9b:37:80:5d:38:d0:
                    b1:a6:cb:05:c4:3a:8c:f8:ad:e3:1c:87:90:1c:a5:
                    67:87:3c:5e:52:ad:19:b1:c0:49:9d:85:00:c1:64:
                    e5:24:ab:25:26:6a:58:26:8a:2e:03:a7:58:5d:e3:
                    82:6e:bb:e2:56:b8:2d:29:0c:82:87:75:ef:f4:d1:
                    80:84:fc:6a:ad:aa:ec:21:ff:34:91:68:1e:f5:04:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:0F:82:5C:AA:57:76:9D:AC:00:65:B6:70:E1:C5:A3:98:4A:02
            X509v3 Authority Key Identifier:
                keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/tYMPglyqV3adrABltnDhxaOYSgI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:06:9b:1e:44:66:df:4b:d7:4f:2c:c0:b3:7d:11:8f:d3:eb:
         82:c1:4b:ee:b7:a3:cc:24:6c:f5:75:37:37:c5:00:a4:f5:c9:
         bb:b2:81:99:ad:4a:85:e7:75:08:71:33:e0:7d:47:b8:22:3d:
         0f:19:3a:ee:c1:0f:68:74:cd:8c:f3:16:fe:5e:50:a0:ec:2b:
         1f:4d:48:1d:c7:a0:76:dd:4b:45:c2:bb:60:7d:91:85:01:e3:
         a1:2b:f8:d0:9d:7b:99:6b:c8:9e:88:a1:97:12:70:38:40:79:
         c7:31:e9:66:87:24:37:8d:8e:38:69:80:e9:53:bb:c6:e0:ad:
         3d:9a:7c:ac:e4:38:5f:6f:c5:5f:17:59:c7:90:34:6e:c5:93:
         cb:15:5b:fa:0e:84:b6:e4:4f:91:2c:ce:4d:5b:a3:02:e9:56:
         db:c4:07:02:62:35:35:0d:d1:81:71:f0:5e:f9:fb:8f:22:91:
         5e:02:f0:de:a6:5d:03:a6:41:3a:76:4c:2d:5a:d8:af:b0:41:
         96:9e:cd:f0:0a:34:8a:6a:f0:74:04:83:ac:48:76:8f:ba:7e:
         f7:99:07:d0:f3:29:18:28:03:88:42:4b:3a:07:99:40:8a:b9:
         78:43:63:26:3d:5f:3b:70:87:43:c8:60:be:23:6c:56:76:7e:
         5d:91:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org