Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/_ndczBBQjEEt_3kGucf6HPa7oCs.roa
File:                     _ndczBBQjEEt_3kGucf6HPa7oCs.roa (raw, json)
Hash identifier:          HoRYJAZ2L7Udafz2utZO0AM4umrsHbEZW73WrcajlbQ=
Subject key identifier:   FE:77:5C:CC:10:50:8C:41:2D:FF:79:06:B9:C7:FA:1C:F6:BB:A0:2B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       63
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/_ndczBBQjEEt_3kGucf6HPa7oCs.roa
Signing time:             Mon 01 Nov 2021 01:28:34 +0000
ROA not before:           Mon 01 Nov 2021 01:28:34 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        163.49.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:34 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=FE775CCC10508C412DFF7906B9C7FA1CF6BBA02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:15:33:2e:89:dd:d1:c1:cc:81:f6:48:ec:
                    5e:95:17:5d:ad:c8:fc:37:31:fe:d2:5d:a8:92:58:
                    69:6b:b4:fe:f8:a9:3b:f9:c8:ac:b4:ae:ac:cf:25:
                    32:1a:d4:52:92:55:8d:0d:a0:27:a8:8b:a4:a1:f8:
                    38:aa:f1:8d:bd:b9:dd:61:0c:24:91:3d:f9:76:39:
                    ca:ef:9c:88:11:97:d1:b6:47:ac:af:0e:79:d0:77:
                    30:f3:cb:b5:0d:70:47:e1:81:5c:2c:77:86:44:85:
                    d7:57:34:aa:fc:bd:f0:4a:84:0a:4b:ee:3c:79:9d:
                    9b:12:91:a1:03:4c:0a:79:75:8e:cb:37:48:bd:4d:
                    df:c9:04:03:be:23:ca:23:e2:fc:31:4f:0c:4d:c2:
                    21:2b:7c:a6:ea:53:ad:2d:b4:9b:6f:ca:3c:8e:81:
                    6e:af:1b:15:52:79:f0:4a:50:ab:40:91:8e:d4:bf:
                    d3:d8:11:65:ea:70:23:14:e7:a1:63:22:11:1c:52:
                    5c:ab:03:44:ec:a6:25:ed:ce:a9:3a:54:aa:bc:ca:
                    c7:b1:4d:04:61:87:bb:95:3e:10:00:54:4e:94:dd:
                    f9:b1:91:25:fb:30:cd:15:c1:f4:cc:71:12:01:33:
                    eb:38:91:46:f8:1d:28:e9:d7:a1:75:08:b3:45:c8:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:5C:CC:10:50:8C:41:2D:FF:79:06:B9:C7:FA:1C:F6:BB:A0:2B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/_ndczBBQjEEt_3kGucf6HPa7oCs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:46:6e:b9:d9:b8:9b:e2:f0:a9:ea:12:2e:71:64:78:32:
         71:a1:1c:54:eb:5f:bc:88:d4:bf:82:4a:82:8c:4a:f7:e9:f2:
         5b:85:75:64:b6:a1:44:55:4c:2d:ff:6f:3d:c3:a2:c6:50:28:
         9e:11:47:a8:15:f5:06:c8:5d:f0:f3:4c:30:87:10:5a:fa:a4:
         a0:0a:72:f9:db:f4:48:37:11:3e:9a:f6:80:08:52:4e:b7:2a:
         de:3c:94:e3:df:73:58:87:5a:e0:ca:16:de:74:bf:ce:a2:e3:
         ab:4d:48:e5:08:6b:d7:56:d4:28:61:f0:a1:a4:c4:f5:ff:ee:
         26:99:e4:a5:2e:98:93:38:06:3c:59:5d:64:2c:c4:cd:e4:4a:
         34:22:8a:c6:d5:bd:ba:fb:52:7b:03:1d:96:0d:c7:68:00:cd:
         da:6c:55:8a:d0:23:75:a8:d5:61:a3:69:e0:66:46:60:c9:fb:
         ad:9c:42:5f:dc:e1:51:23:fc:63:47:d4:eb:61:df:74:19:af:
         e1:4f:d8:8b:51:b4:fc:4b:e7:df:0e:29:98:06:63:e8:86:09:
         ed:d1:9c:75:83:64:36:eb:8e:a4:9c:b4:ab:dd:9d:75:6f:da:
         41:75:3d:1d:1d:f8:8d:3c:be:9f:9a:7b:cd:cb:9d:af:ab:6e:
         4b:98:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org