Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/SR-FBctgSGrNNMn8cEKGaqvOAeE.roa
File:                     SR-FBctgSGrNNMn8cEKGaqvOAeE.roa (raw, json)
Hash identifier:          rAVS7mwg+/1Rb9zx6PaSEKxpBIHCZ39ISb8xk7cNx+s=
Subject key identifier:   49:1F:85:05:CB:60:48:6A:CD:34:C9:FC:70:42:86:6A:AB:CE:01:E1
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       6F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/SR-FBctgSGrNNMn8cEKGaqvOAeE.roa
Signing time:             Mon 01 Nov 2021 01:28:38 +0000
ROA not before:           Mon 01 Nov 2021 01:28:38 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        61.211.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:38 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=491F8505CB60486ACD34C9FC7042866AABCE01E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:a0:f2:4b:84:35:37:1f:bf:3f:80:f9:04:
                    ba:4d:bd:3b:f0:eb:04:87:c3:10:7e:dd:1d:6d:32:
                    7d:ae:4d:c3:8f:fa:5b:d9:f3:77:78:b4:ba:1e:9d:
                    16:0a:f0:2f:7e:b5:bc:e5:30:28:88:a7:bf:2b:ec:
                    c2:52:21:03:0c:c6:d7:40:ba:f4:36:cb:0c:df:f5:
                    1e:52:d4:f4:41:3d:4b:39:e0:50:0f:da:3d:97:e3:
                    e8:f8:46:9c:9f:08:64:8e:1b:df:c9:6b:5a:ab:dc:
                    f1:b1:01:08:d5:43:c8:65:be:8d:ef:f4:62:7a:47:
                    71:83:f8:62:85:28:26:83:1d:cf:e7:84:3e:b0:bb:
                    9c:cf:1f:3e:75:77:b5:a3:c6:e3:5e:e6:46:9d:bf:
                    cb:40:f3:21:12:2e:8d:c2:e3:b9:ed:bc:47:e7:54:
                    ae:91:b6:f2:49:06:d5:b1:20:6d:25:60:92:99:8a:
                    ae:f0:68:a4:38:f2:4f:2a:a0:09:d2:ee:6a:17:a3:
                    54:5e:24:86:d0:dd:d8:62:b9:b1:8c:b3:5f:59:c5:
                    87:56:13:1c:c8:0c:8b:e0:39:71:40:4a:79:f1:f6:
                    06:c5:41:37:24:c6:55:62:a7:c9:0f:a0:54:f7:a4:
                    5f:55:82:0c:79:20:15:c2:f9:e4:ac:65:04:5a:83:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1F:85:05:CB:60:48:6A:CD:34:C9:FC:70:42:86:6A:AB:CE:01:E1
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/SR-FBctgSGrNNMn8cEKGaqvOAeE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:9f:e6:ec:59:26:68:05:6e:14:9c:d7:0b:2a:36:21:eb:
         a2:22:7a:51:41:6e:97:38:6f:09:f6:2b:39:f2:e5:cc:1e:f8:
         ab:37:09:86:57:51:9c:84:be:c3:fb:2a:5d:59:7d:cb:9f:61:
         50:f3:78:61:c0:e4:24:85:74:9d:78:86:5d:84:03:71:19:60:
         42:61:66:5c:60:09:ac:00:f8:ea:0a:44:94:2f:5a:d0:e9:2a:
         10:31:df:79:45:97:8d:39:a0:bb:a7:ad:6e:c4:86:5c:e1:a7:
         94:46:8f:3d:46:dc:37:12:26:2d:14:b1:ef:42:39:bb:92:70:
         2b:8d:85:05:17:34:91:28:e4:10:66:f2:b9:41:57:ad:40:9b:
         3e:f9:92:e1:af:1b:29:66:12:12:6a:25:dd:df:08:ba:48:8b:
         7b:e1:07:0c:fb:a1:27:c4:96:ce:73:48:dd:f0:42:90:9b:f6:
         c7:6c:47:fc:b3:dc:86:4b:ec:86:0d:c2:4d:0b:71:aa:46:8f:
         bb:1a:2e:fb:22:56:75:9b:3b:77:6c:34:ff:24:71:58:6e:48:
         59:4e:ae:83:4f:9f:12:45:68:74:d8:e1:cf:db:45:29:48:c9:
         62:0b:8e:0b:31:ad:73:d9:3f:bb:39:8d:76:e7:2e:26:24:ef:
         df:c4:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org