Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/_4VfocFK-Nx11y9yJF_UIPHNOGw.roa
File:                     _4VfocFK-Nx11y9yJF_UIPHNOGw.roa (raw, json)
Hash identifier:          bUrFRUYZ2CQsy/vvWd0mVqvu1BO/cFEElHJdwf80CX8=
Subject key identifier:   FF:85:5F:A1:C1:4A:F8:DC:75:D7:2F:72:24:5F:D4:20:F1:CD:38:6C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       5F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/_4VfocFK-Nx11y9yJF_UIPHNOGw.roa
Signing time:             Mon 01 Nov 2021 01:28:33 +0000
ROA not before:           Mon 01 Nov 2021 01:28:33 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        113.197.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:33 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=FF855FA1C14AF8DC75D72F72245FD420F1CD386C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:1c:a0:6f:2c:e2:fc:ce:fa:1d:2f:21:db:
                    7a:a3:1c:99:b0:95:7b:35:5d:54:19:d0:6e:09:86:
                    21:2e:b1:7c:e6:30:47:dd:b5:cd:5e:32:7f:c0:f3:
                    c8:12:49:b5:ef:75:bd:46:5e:7e:43:17:ad:fb:27:
                    07:61:81:e0:c1:66:7c:60:de:66:7c:fd:39:af:3e:
                    1a:38:2e:97:a2:2f:7e:dd:92:fc:bc:e5:b9:60:93:
                    59:68:09:6b:f2:0a:2f:69:6d:33:99:c2:c7:36:15:
                    b1:54:92:3f:3f:17:5a:cd:be:1b:75:f3:3b:73:60:
                    bd:4d:6c:35:f2:ff:b0:c6:ee:d8:a0:1e:ed:c0:a9:
                    29:3f:51:0b:e7:ca:29:81:54:ea:a9:2b:70:00:4d:
                    be:d8:35:66:0d:ff:b7:0d:05:43:e8:b4:c2:2b:c6:
                    f0:2f:54:d7:94:44:45:b5:8d:d8:f1:a7:b0:e8:2d:
                    56:84:27:ee:df:15:06:c2:b9:12:4d:a6:43:71:9b:
                    e6:8e:43:eb:85:e5:14:91:3f:b6:10:0c:f5:a3:9d:
                    5b:b9:81:d0:d3:c8:d4:a2:1c:ad:71:8a:14:c9:d7:
                    3a:34:69:71:45:c7:ff:92:b1:b3:cb:1f:0a:01:c2:
                    40:df:f9:1d:50:36:61:b5:30:49:bf:87:d6:89:8d:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:5F:A1:C1:4A:F8:DC:75:D7:2F:72:24:5F:D4:20:F1:CD:38:6C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/_4VfocFK-Nx11y9yJF_UIPHNOGw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:e7:ea:d2:a7:7a:24:f0:d2:a5:03:53:a6:6e:0d:e4:8c:
         ee:db:b2:81:b5:d0:61:a2:0c:76:29:89:8b:eb:33:b2:66:63:
         1e:ec:f6:09:11:0b:a4:cf:48:72:e2:76:12:b4:f5:3e:e2:60:
         08:0e:18:87:92:31:26:5c:87:a5:90:23:48:06:36:4f:24:30:
         01:07:74:2b:c3:53:6a:bb:54:34:76:07:6b:d1:53:1f:79:c2:
         3c:81:57:44:9a:ca:7a:95:a8:09:0e:27:c2:14:6c:f8:dd:b5:
         35:d7:b6:2c:6a:7a:5b:f6:d7:80:ee:1c:ea:7c:1e:49:68:2e:
         9a:74:d1:dd:0a:ff:bd:6c:28:60:57:0c:56:d5:1f:de:ee:71:
         70:90:23:25:0e:6b:6b:c9:69:ca:a1:ab:c0:6c:80:0d:db:72:
         90:30:97:6b:c5:ba:3d:c2:9a:bb:2b:4f:48:7d:3f:8c:08:ec:
         32:cf:6c:f1:d2:95:cc:2b:7c:7c:8d:60:10:ce:51:5e:c7:3e:
         29:d2:bf:52:5b:ac:05:48:3f:d2:75:bb:40:c8:61:7f:a7:48:
         fb:f3:be:ff:c9:d9:7f:e5:cb:ac:31:b1:f3:6f:f5:b3:ad:11:
         b0:cc:2e:b5:38:08:5f:20:9a:ae:c6:ff:b9:8a:f7:0b:bd:70:
         e0:f6:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org