Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/gS-YYGAuXmyHtrhZQAoXhoqLsXY.roa
File:                     gS-YYGAuXmyHtrhZQAoXhoqLsXY.roa (raw, json)
Hash identifier:          CSYUJyVp3jtNlHwg9EFcGscaGj6gOrLyvzCEzXtZvPA=
Subject key identifier:   81:2F:98:60:60:2E:5E:6C:87:B6:B8:59:40:0A:17:86:8A:8B:B1:76
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       23
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/gS-YYGAuXmyHtrhZQAoXhoqLsXY.roa
Signing time:             Thu 01 Sep 2022 01:28:25 +0000
ROA not before:           Thu 01 Sep 2022 01:28:25 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     2515
IP address blocks:        211.120.240.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Sep  1 01:28:25 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=812F9860602E5E6C87B6B859400A17868A8BB176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:70:23:d9:f7:37:f3:f2:47:a1:f9:2f:00:
                    ed:ff:89:92:37:d8:6e:ea:6f:eb:fb:da:07:52:99:
                    04:1d:d7:77:a6:9e:1a:b0:15:fb:59:f8:fb:e7:56:
                    6f:2a:14:51:27:2d:02:15:d4:74:2c:3c:d6:b2:91:
                    f2:95:d4:6a:62:e2:2a:3c:04:03:86:23:30:0c:e7:
                    fd:65:41:70:ee:8d:36:da:83:1c:b9:c2:bc:29:80:
                    5d:9b:18:ce:ed:ff:85:ba:05:0b:2f:ef:1e:e0:c9:
                    95:c6:dd:88:e8:90:3b:98:03:2f:c6:14:32:9f:56:
                    8c:ca:50:92:42:44:0d:a5:cf:f7:90:35:97:3f:66:
                    7e:88:1f:16:e5:06:2c:66:d4:03:49:94:ce:3f:de:
                    db:fe:3b:c7:d8:89:69:9c:2f:33:5f:7d:27:a8:7b:
                    34:d2:18:67:47:42:1c:05:92:f7:7e:b3:19:06:7e:
                    e1:ff:94:c7:bd:f1:f9:18:14:0b:bc:5d:f8:c2:e2:
                    a9:14:a0:d2:1a:fe:d1:5d:80:68:7e:bd:8b:0d:32:
                    92:9e:91:71:0e:2c:27:05:cf:f0:8b:05:4a:9d:82:
                    ad:e1:ba:98:6d:3f:d4:a8:ba:c7:c1:00:87:11:be:
                    88:d6:f4:5c:a8:9c:13:5f:5a:3e:12:a9:06:d9:02:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2F:98:60:60:2E:5E:6C:87:B6:B8:59:40:0A:17:86:8A:8B:B1:76
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/gS-YYGAuXmyHtrhZQAoXhoqLsXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:72:f7:87:97:d9:1e:10:1f:cf:65:61:67:79:21:83:94:a6:
         62:ec:e8:88:9d:8b:50:e6:10:de:77:09:c3:53:2f:11:25:76:
         27:0a:63:93:0e:dd:57:4c:73:e3:fc:e1:0c:08:3a:4a:f9:ac:
         60:3b:a0:f7:c7:9b:f5:11:f2:ec:40:4e:28:52:a8:ae:b1:31:
         aa:2f:62:2a:24:bf:ec:39:37:0b:33:d0:ed:0c:a4:4d:fe:93:
         b8:9f:f5:01:b5:bb:94:ca:f6:e1:2a:0a:b6:6e:a7:62:78:f8:
         c2:2f:cf:82:21:4c:8a:52:b5:3a:ca:f4:52:1a:0f:df:73:8a:
         c4:36:65:02:b7:dd:93:5a:41:6c:8a:63:c2:2c:bd:72:f6:58:
         77:0f:3c:16:61:9c:62:51:d3:cd:fa:ba:1d:aa:e3:37:d9:38:
         94:be:2f:bc:7f:90:f9:dc:f1:06:c6:8d:86:07:f5:cb:ce:40:
         bb:62:05:73:ee:92:86:9a:68:a4:df:c2:af:3a:3b:44:1b:f7:
         fd:45:6b:64:5b:81:69:ca:1f:30:68:80:1f:f7:b4:b0:b9:93:
         52:41:40:62:ee:c3:9d:a3:0f:65:fd:ec:d9:58:34:03:35:3f:
         a1:ac:a9:1a:4a:75:88:2e:bb:0b:15:35:99:f9:8d:68:4c:0b:
         18:37:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org