Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/b03-Sk6G27lf4qnDKKkjZ3CQWRc.roa
File:                     b03-Sk6G27lf4qnDKKkjZ3CQWRc.roa (raw, json)
Hash identifier:          QK0mUhIZHjVkNGY4zRTDXsLhQKfecoYrh9O8/7YjDpY=
Subject key identifier:   6F:4D:FE:4A:4E:86:DB:B9:5F:E2:A9:C3:28:A9:23:67:70:90:59:17
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       18
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/b03-Sk6G27lf4qnDKKkjZ3CQWRc.roa
Signing time:             Thu 04 Nov 2021 03:12:20 +0000
ROA not before:           Thu 04 Nov 2021 03:12:20 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     17707
IP address blocks:        219.109.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Nov  4 03:12:20 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=6F4DFE4A4E86DBB95FE2A9C328A9236770905917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:51:e9:2b:38:66:45:97:0d:89:d0:c6:01:
                    e2:ba:42:a2:59:67:2c:06:66:4b:16:66:d0:50:cf:
                    2a:03:39:6c:13:13:4f:fb:75:0c:2d:91:8a:b0:ee:
                    b5:8a:6a:9a:1b:cc:d9:d2:b5:ea:c6:a8:b7:03:22:
                    85:a0:bc:fe:d1:8d:44:ad:e0:6e:8d:5f:71:13:5a:
                    08:0d:c6:50:7e:f3:b6:2a:fe:3b:f0:13:65:ec:72:
                    7e:fa:32:e5:7a:df:42:0d:ef:02:d3:cb:ea:2f:0a:
                    8f:df:9e:1c:a9:82:e7:9a:5a:42:cd:22:b2:8b:26:
                    a8:20:ac:7a:92:68:20:10:7c:c4:5d:2d:f8:91:39:
                    1a:7e:24:e2:dc:c9:da:0d:47:83:25:e6:a3:f2:a0:
                    af:ac:73:81:6c:e1:68:b7:d7:ca:9c:fd:90:67:35:
                    87:d6:21:c1:1a:1d:ea:da:e8:a3:03:b3:c8:b2:92:
                    58:ef:ec:6f:93:63:bf:57:00:a9:7d:bc:af:b7:de:
                    13:65:ce:e6:cb:38:d2:dc:41:a4:11:17:e2:94:16:
                    89:12:b5:c7:eb:4a:43:53:ee:66:e0:15:c0:58:b7:
                    30:07:6a:56:8d:40:9f:b6:da:d4:cb:2f:54:0e:b9:
                    34:b6:4d:ea:e2:f5:7b:f2:1f:3e:41:a5:6e:b3:28:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4D:FE:4A:4E:86:DB:B9:5F:E2:A9:C3:28:A9:23:67:70:90:59:17
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/b03-Sk6G27lf4qnDKKkjZ3CQWRc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:86:9b:2e:6c:e1:e8:84:b3:3a:87:bb:29:45:4f:7d:04:
         33:c8:af:e3:4e:44:90:05:42:26:59:e1:33:4b:6d:c6:b7:9b:
         35:81:e1:62:62:57:c2:35:23:98:9b:7d:93:51:8d:0d:d2:ba:
         f7:5f:ea:73:57:8b:0e:fd:14:a6:10:5e:ef:d3:b2:48:85:9b:
         22:8c:b5:4f:c1:86:f4:70:c1:54:3a:ae:d7:8f:65:b5:46:b2:
         c6:10:d1:1c:dd:71:a4:48:6c:fc:88:2b:8d:46:12:65:e7:0d:
         c6:34:87:6a:d6:c6:0b:61:b1:06:04:aa:07:c6:7d:dc:a5:0b:
         4d:00:c9:41:6a:ba:da:e5:d7:c6:ed:12:68:0f:80:ea:24:4d:
         19:f7:1a:0c:b7:c4:43:f9:ee:33:5c:8f:76:5c:46:51:cf:11:
         0f:c7:3d:5c:e5:a9:2e:3b:ba:ef:a3:0c:51:77:b6:2d:bf:18:
         e3:9e:62:a9:ed:d4:7c:be:22:47:62:d1:c3:1a:3a:8d:64:c1:
         48:53:13:40:46:5f:50:f3:61:14:98:f9:50:84:f6:91:3e:9a:
         cc:0d:f0:87:d6:6c:db:05:50:e1:1c:b9:c1:bd:a3:13:6e:9d:
         5d:2a:6e:6f:d1:e6:be:5f:b3:cf:39:c9:11:e0:21:b8:c7:ca:
         20:a5:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org