Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/4qUc18dwLgnbb8Cew3VUauDi61g.roa
File:                     4qUc18dwLgnbb8Cew3VUauDi61g.roa (raw, json)
Hash identifier:          zwNLyweomq/MvrpzPbfT2+7MJtZ0XQSChHkxpZlBt4I=
Subject key identifier:   E2:A5:1C:D7:C7:70:2E:09:DB:6F:C0:9E:C3:75:54:6A:E0:E2:EB:58
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       60
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4qUc18dwLgnbb8Cew3VUauDi61g.roa
Signing time:             Sat 08 May 2021 04:05:36 +0000
ROA not before:           Sat 08 May 2021 04:05:36 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        211.122.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:36 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=E2A51CD7C7702E09DB6FC09EC375546AE0E2EB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:a9:bc:16:6b:c8:d1:77:60:74:e9:d8:57:
                    b7:33:7e:56:ee:aa:5a:c5:36:3f:b4:7f:62:67:07:
                    ca:2b:98:93:8a:7b:3c:32:db:7c:e4:40:48:7c:5f:
                    7b:f3:4a:ef:59:5b:b8:a6:ea:fd:eb:63:aa:eb:fb:
                    c9:6b:2b:d7:53:b3:d9:8e:44:43:54:c5:c9:1a:1d:
                    b8:a2:df:d3:0a:94:6a:53:fb:c9:ee:00:a0:cb:35:
                    07:e0:9f:44:dc:5f:aa:de:ea:94:a5:31:41:88:d6:
                    e1:9b:ef:c9:29:a0:59:46:38:19:19:cd:1f:6b:f4:
                    ae:72:ff:07:fd:fe:91:26:a8:f6:a2:eb:ac:de:2a:
                    85:6a:97:41:ca:4f:47:82:85:8c:0c:7a:ee:c6:bf:
                    56:b7:44:04:cc:fd:cb:9c:e3:65:e6:54:b2:af:81:
                    3c:35:8a:6d:9d:84:c3:1e:e0:db:19:fe:7b:8f:38:
                    1c:2e:af:e8:cb:bb:ef:ae:11:fd:ac:90:bc:a8:fa:
                    0e:2f:40:05:06:23:45:d7:33:de:a3:b2:a5:b5:ad:
                    40:87:4d:bd:a0:31:d3:6a:cd:e3:95:5b:3a:a4:35:
                    53:07:19:12:97:8c:ef:40:0d:96:9a:e7:b4:45:af:
                    23:2f:fe:95:0d:01:12:ea:db:c9:a2:e8:75:4e:09:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:1C:D7:C7:70:2E:09:DB:6F:C0:9E:C3:75:54:6A:E0:E2:EB:58
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4qUc18dwLgnbb8Cew3VUauDi61g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a9:5e:c3:4f:4b:70:b3:57:86:e7:c5:51:e9:de:e3:cd:0f:d9:
         68:89:9e:d7:78:1f:bf:c2:9e:77:c2:17:14:19:9e:67:21:9e:
         1b:52:75:7e:be:95:52:9e:18:42:43:29:3e:f6:c1:42:f8:b8:
         c0:04:be:bb:4f:a5:f0:d8:95:79:18:51:f9:62:6a:25:59:7a:
         82:48:c2:06:c5:6b:f3:49:54:18:39:aa:d4:af:8c:cb:24:ad:
         b6:5f:27:04:ff:fe:e6:c9:40:ea:cf:ca:12:36:58:1d:72:5d:
         04:17:b6:72:e4:9f:96:84:24:a1:08:46:75:82:ce:93:9b:6c:
         8a:e0:f6:09:2c:a4:03:64:20:3e:19:20:fd:b0:96:4e:04:fe:
         79:75:96:73:41:4b:b2:60:7b:d6:f7:9d:3c:14:36:0a:14:3a:
         62:25:f0:73:d6:be:fb:b0:93:6c:78:c4:ff:8b:ae:72:58:34:
         e9:6e:4b:35:2c:af:2f:a2:a5:23:95:23:bc:bb:af:20:29:ed:
         5f:a2:3e:3b:0b:1a:7f:cb:3a:a3:2c:49:03:56:91:19:be:f9:
         e6:e9:59:c8:77:c5:a0:b7:69:e7:e0:f8:a4:54:f8:bb:4f:a9:
         1e:3f:2d:8c:06:e4:2e:03:f2:fd:86:50:b3:d4:9d:62:52:d2:
         24:ad:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org