Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/arH2wX0pRPijtGaW5zuA_Kc6dXQ.roa
File:                     arH2wX0pRPijtGaW5zuA_Kc6dXQ.roa (raw, json)
Hash identifier:          5DFFzApfbKnW24qEVqmuaau5CNBsFUiTHddX7k3cx0g=
Subject key identifier:   6A:B1:F6:C1:7D:29:44:F8:A3:B4:66:96:E7:3B:80:FC:A7:3A:75:74
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       6D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/arH2wX0pRPijtGaW5zuA_Kc6dXQ.roa
Signing time:             Mon 01 Nov 2021 01:28:37 +0000
ROA not before:           Mon 01 Nov 2021 01:28:37 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        121.102.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:37 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=6AB1F6C17D2944F8A3B46696E73B80FCA73A7574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:45:b5:58:2e:cc:e7:d5:ef:45:2b:19:2c:
                    02:28:0c:b8:dd:70:47:32:53:c2:2d:90:c1:50:c8:
                    05:e7:79:65:b9:2d:d6:22:ea:55:93:51:52:7a:08:
                    53:68:c1:bc:b1:d9:28:dc:99:c5:80:56:41:67:8b:
                    2a:02:f6:35:9f:ac:56:51:38:3a:91:4a:57:b9:d8:
                    45:f7:c6:86:36:76:ad:f9:50:48:c1:47:ab:fa:6d:
                    2f:70:23:78:4f:d2:a8:ff:50:a2:3d:b3:ee:ef:21:
                    75:20:4f:53:b3:47:28:b9:ba:0f:b9:d3:ca:2a:ea:
                    72:e1:4d:ea:3e:54:65:e5:48:02:f0:5f:c0:af:7f:
                    47:40:98:84:d5:a2:d8:90:73:dc:30:59:31:ed:7f:
                    54:80:1c:91:72:24:c1:4b:76:f6:6a:c0:4f:de:91:
                    2d:bf:f6:5c:7a:1a:c4:ac:a7:60:e1:46:a4:e1:84:
                    24:a0:67:e1:4a:c0:bb:3e:50:b1:bf:7b:0b:ba:ef:
                    c1:34:e5:79:f5:f6:35:32:34:3c:95:a3:21:d5:eb:
                    4d:94:a7:3e:d4:b1:23:c7:60:86:e3:e4:ea:5b:70:
                    f3:6e:12:c6:91:9c:05:4e:c3:a6:5f:f4:b4:e9:49:
                    e9:18:90:b1:d7:45:fb:68:24:76:c4:a2:45:cd:49:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B1:F6:C1:7D:29:44:F8:A3:B4:66:96:E7:3B:80:FC:A7:3A:75:74
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/arH2wX0pRPijtGaW5zuA_Kc6dXQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:92:99:30:ba:81:eb:3c:4f:d0:d3:16:69:f7:03:05:1e:a8:
         94:d9:d9:02:8d:23:53:62:e1:15:1e:19:86:0d:8f:3b:94:95:
         63:b9:56:bf:09:7c:eb:c5:e5:76:f7:4e:18:ac:ed:d3:70:a3:
         01:f8:10:a7:df:80:f3:1f:df:d4:ca:49:85:c8:25:26:4a:d5:
         87:d9:24:12:ef:7e:96:07:af:67:2d:8e:eb:f8:ff:ac:1e:a6:
         ba:5a:0a:6d:d2:1c:4e:48:34:f0:de:a4:29:76:4a:87:82:f9:
         48:a4:dc:cc:43:d0:7c:c0:86:53:bf:4a:f3:a9:f6:ba:6d:29:
         df:89:1a:11:d1:ff:69:ad:26:78:d6:03:b7:b3:57:c9:02:c3:
         bd:03:6c:88:8e:39:79:6c:58:28:84:24:7c:80:e6:94:e9:fe:
         37:74:9f:6a:9f:1b:b1:eb:59:a9:3d:88:1c:4e:e1:ed:45:25:
         cb:b2:d5:fa:fc:d3:96:9d:4e:76:17:00:b4:e2:75:39:07:18:
         d8:77:95:c3:f9:02:2e:fc:ab:c1:2e:37:d9:f5:a3:87:46:d0:
         f8:6f:55:fa:d7:d9:71:d9:ed:f3:2e:b8:3e:9c:01:72:98:01:
         ac:fe:e1:4b:b5:46:35:93:59:72:37:92:76:86:b3:a2:ee:8e:
         79:d5:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org