Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/eL9hzqblDisZKmgz8oYQSMGg2X4.roa
File:                     eL9hzqblDisZKmgz8oYQSMGg2X4.roa (raw, json)
Hash identifier:          IDSEeBw2vx5kWvKA18dezFw7jMjIhsOijtr+jfxH1go=
Subject key identifier:   78:BF:61:CE:A6:E5:0E:2B:19:2A:68:33:F2:86:10:48:C1:A0:D9:7E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       68
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/eL9hzqblDisZKmgz8oYQSMGg2X4.roa
Signing time:             Mon 01 Nov 2021 01:28:35 +0000
ROA not before:           Mon 01 Nov 2021 01:28:35 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        220.156.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:35 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=78BF61CEA6E50E2B192A6833F2861048C1A0D97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:ee:9e:71:95:c0:0d:45:05:08:34:61:a7:
                    ae:c5:51:6d:bb:75:98:6b:51:a6:09:c1:87:cc:46:
                    5a:47:88:0c:ee:bb:76:b1:82:14:eb:d6:db:7e:c4:
                    19:61:fd:6f:9a:ad:21:63:e3:aa:87:ee:fe:3a:83:
                    71:e1:6c:c9:b9:2c:2b:59:ec:83:b1:f8:fd:90:0b:
                    48:73:6f:7a:0e:9e:f8:ac:28:f6:b8:b1:b6:fe:ba:
                    8c:76:de:f6:cb:4f:5c:ff:f7:ac:14:15:01:e9:0f:
                    fb:6b:4b:04:86:63:e0:c3:28:60:7f:d6:b7:2c:5f:
                    56:a6:ae:36:66:48:61:bc:4e:42:ed:72:67:d8:b7:
                    e5:44:55:9d:7a:8a:6e:80:50:fe:2d:c7:90:50:03:
                    18:dd:38:8c:2e:93:d7:ef:6c:6b:6c:43:f8:df:a5:
                    d9:cf:c8:a3:13:4b:e4:c2:af:8f:0f:f3:61:35:f6:
                    37:14:37:45:ac:03:23:cf:e0:d4:3f:92:7f:e4:7e:
                    34:94:be:87:fc:ea:09:f4:06:bd:b7:f9:34:15:87:
                    b3:06:e4:25:76:d5:7a:54:f7:82:02:dc:ca:54:5d:
                    60:2a:34:02:9f:e7:ad:77:b9:a5:76:4c:6e:a2:8c:
                    6d:39:16:f3:92:89:5e:e0:77:87:4e:53:c2:ed:14:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:61:CE:A6:E5:0E:2B:19:2A:68:33:F2:86:10:48:C1:A0:D9:7E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/eL9hzqblDisZKmgz8oYQSMGg2X4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:61:a6:10:b9:11:1b:de:a1:70:54:6d:01:5b:83:ca:c1:
         88:ef:a6:c7:51:3b:ed:5b:95:eb:97:05:92:bc:c4:13:96:f1:
         ad:f6:c3:aa:b1:f0:3d:00:40:57:78:e4:48:86:f9:8f:c4:cc:
         da:ec:63:63:ed:c6:43:99:b9:ab:03:5b:57:3b:e4:53:71:ab:
         07:24:d5:84:fa:8a:1e:b4:9e:ae:09:d0:72:45:59:8b:98:cd:
         f4:e9:58:80:43:f5:e9:cf:3b:e7:70:c7:57:7f:34:ab:00:e6:
         90:2c:14:57:2d:7b:73:de:8b:e1:8e:ff:52:54:f0:e5:56:2b:
         b3:23:1e:f5:b5:a5:1a:03:b7:b7:a9:ed:62:61:ea:35:e2:78:
         14:06:cd:15:47:2a:93:4a:2f:6c:d5:e4:28:7a:b7:56:76:47:
         d4:3d:f5:60:e2:75:d8:22:07:f0:8a:d7:7b:cb:7e:e1:fb:63:
         28:91:01:f6:19:96:86:ca:8a:ed:a5:04:0d:85:46:f1:c6:26:
         3f:96:fe:36:83:51:39:26:d6:0f:cc:30:ee:15:96:10:bd:2f:
         1a:06:28:64:a9:91:c9:b0:89:2f:5e:0a:3c:db:da:e8:e6:82:
         2a:4e:07:6f:86:8b:cb:53:a2:c0:1d:8f:a3:a5:66:c1:dd:fa:
         de:a2:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org