Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/1LMaHYRcYd0o37DwvNSwjC8GVds.roa
File:                     1LMaHYRcYd0o37DwvNSwjC8GVds.roa (raw, json)
Hash identifier:          Nvj0vgy4l7pPcdlTrPD3eyXKaHOS6SUfhPM/yLrwQ3Y=
Subject key identifier:   D4:B3:1A:1D:84:5C:61:DD:28:DF:B0:F0:BC:D4:B0:8C:2F:06:55:DB
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       70
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/1LMaHYRcYd0o37DwvNSwjC8GVds.roa
Signing time:             Mon 01 Nov 2021 01:28:38 +0000
ROA not before:           Mon 01 Nov 2021 01:28:38 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        218.42.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:38 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=D4B31A1D845C61DD28DFB0F0BCD4B08C2F0655DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:6b:f6:36:a9:9d:23:5b:30:c5:4f:63:98:
                    ad:ef:84:c6:06:bb:5e:a8:46:47:10:88:37:0f:8a:
                    07:cc:48:39:5a:9a:fc:c1:6d:c0:6e:38:91:1e:c6:
                    69:9a:de:c9:2a:81:1c:6b:84:cd:76:a7:34:b1:3c:
                    ec:4b:b1:fb:0a:76:9c:d9:ef:d4:cb:98:e0:ea:b8:
                    e3:c4:bc:d8:1b:cc:fe:24:60:40:43:23:33:54:33:
                    cf:a1:aa:b5:56:ac:ee:4f:40:ed:aa:5e:7d:c1:00:
                    2e:3d:c1:6f:54:50:3b:2a:95:55:f9:fb:d5:d3:6c:
                    cf:75:69:36:e3:b2:c8:17:89:b8:b9:a4:05:a0:00:
                    00:d0:9e:d9:59:ce:b5:59:70:e9:8c:12:c3:07:9b:
                    f9:47:4b:32:47:56:3d:6b:b2:92:46:9b:1a:c5:93:
                    e4:39:af:88:bf:1d:57:39:dd:76:4d:4c:96:30:31:
                    45:07:b1:64:08:a9:f6:69:3f:4c:82:5f:1f:60:e7:
                    26:47:e9:d3:4f:5e:83:26:a1:0f:2b:10:1c:2b:1f:
                    70:38:2d:f7:28:f3:8a:75:da:91:96:61:27:99:b4:
                    1b:11:e4:5e:49:64:08:66:fd:f0:53:e6:67:99:72:
                    93:46:99:2d:6e:a3:7d:b1:bc:32:f8:4c:06:37:26:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:1A:1D:84:5C:61:DD:28:DF:B0:F0:BC:D4:B0:8C:2F:06:55:DB
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/1LMaHYRcYd0o37DwvNSwjC8GVds.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.42.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:40:dc:c3:11:94:65:ac:aa:de:37:77:cc:fe:88:c9:68:
         fc:e6:71:bb:31:2b:3b:6d:da:de:21:86:54:b8:a8:46:05:cb:
         50:dc:4a:cb:7e:24:47:81:e8:19:d0:91:82:76:c3:24:02:fa:
         46:ef:73:f2:53:b5:2d:54:b8:95:ed:78:1e:d3:ab:fc:ee:6d:
         e0:26:2e:13:d5:d5:7a:dd:d0:1c:f9:9a:ad:0a:86:83:03:ce:
         da:20:cb:60:ac:ee:2d:82:8f:7d:2c:9b:57:4f:21:ee:66:06:
         94:e2:f6:2e:ba:6b:ff:08:1f:ce:bd:fb:ea:55:46:85:e1:85:
         04:5d:af:3a:cf:52:72:80:2c:bc:88:22:ef:23:66:6f:75:5f:
         18:43:01:bd:06:c8:e3:99:9d:85:25:b6:cb:c6:5d:ac:fa:ca:
         a6:da:a2:fc:39:2d:4f:67:8a:a6:e9:4d:db:26:95:c9:3e:05:
         01:7e:45:84:b1:1d:5f:5f:31:53:a3:75:40:0c:c6:74:d2:2f:
         24:26:d3:11:ec:55:e8:f4:3b:44:71:40:fb:b7:61:37:a2:c6:
         96:4c:41:3d:f8:cc:f9:07:9e:2d:da:fe:e3:ab:6f:46:a3:88:
         ac:1d:e3:a4:34:df:ec:a5:8b:60:6e:a1:70:ab:88:d2:3a:1a:
         80:09:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org