Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/f282CA3HDmJ3kHj5pScOoE7G2yw.roa
File:                     f282CA3HDmJ3kHj5pScOoE7G2yw.roa (raw, json)
Hash identifier:          HvmMQ3BPdZhNk00v8AC10kwNx/ftGSvGx/ptPLx2TUs=
Subject key identifier:   7F:6F:36:08:0D:C7:0E:62:77:90:78:F9:A5:27:0E:A0:4E:C6:DB:2C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       61
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/f282CA3HDmJ3kHj5pScOoE7G2yw.roa
Signing time:             Mon 01 Nov 2021 01:28:33 +0000
ROA not before:           Mon 01 Nov 2021 01:28:33 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        118.151.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:33 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=7F6F36080DC70E62779078F9A5270EA04EC6DB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:e3:b3:04:a5:4b:55:a9:bd:90:c3:1c:6c:
                    d1:f5:e6:ad:33:a3:05:e2:3e:a6:18:bb:22:9e:97:
                    f0:a9:bc:71:5c:32:df:86:ed:f5:31:56:99:67:a2:
                    1c:92:99:28:53:6e:1a:09:b1:05:42:60:9a:73:27:
                    d7:c9:4b:3b:ed:0a:d5:98:50:1a:df:96:81:a1:75:
                    bb:4e:97:67:52:4e:ef:3c:6e:1f:dd:2d:92:37:31:
                    95:10:61:65:8f:c6:36:78:51:77:a7:ec:fa:8b:b0:
                    e3:14:e8:5a:af:58:37:08:d0:87:99:fd:59:fd:78:
                    57:d7:65:0b:5a:87:45:28:47:b8:34:75:5c:b9:cf:
                    b4:34:40:d5:4d:1b:87:22:f8:3e:fb:f1:64:5c:1d:
                    56:59:b9:6f:08:80:b2:af:64:92:0e:7e:6a:23:cc:
                    53:de:47:77:99:03:80:93:10:af:c9:0b:b7:4e:f4:
                    73:19:88:cb:72:3c:a9:8d:ae:1e:f1:51:62:a7:68:
                    dd:f5:10:55:02:b1:1f:1e:1b:d2:be:84:b8:3b:60:
                    83:a8:f8:f2:4b:49:16:1a:25:3b:54:ca:e9:53:9b:
                    74:fc:ab:a3:f4:fb:1a:be:d1:2d:3a:05:5f:44:d5:
                    7c:49:6f:41:3e:ef:21:ed:ee:a2:fb:3d:95:22:9d:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:36:08:0D:C7:0E:62:77:90:78:F9:A5:27:0E:A0:4E:C6:DB:2C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/f282CA3HDmJ3kHj5pScOoE7G2yw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:3b:22:72:6a:74:ae:cd:c3:ac:a0:7b:9e:f6:9d:2e:c2:
         1d:bf:4b:c8:c9:13:71:23:59:24:82:4f:a7:b2:f7:32:7e:ab:
         83:78:b5:ac:28:07:9a:0a:e6:e2:6c:be:f1:22:32:8c:6c:63:
         da:2a:ed:1b:65:62:d5:b6:aa:07:46:78:cf:10:80:08:4e:05:
         fa:5a:b3:f6:b2:3b:5d:43:0c:15:a1:56:17:05:b2:3d:77:3e:
         f8:f9:ec:e5:f9:87:01:37:64:3d:d2:47:0e:fc:82:e9:e4:be:
         d5:0d:fb:10:4c:53:98:d7:4e:a5:c4:d3:49:bc:e3:36:5f:69:
         a6:8c:00:96:11:c2:c5:9a:54:40:33:2a:59:03:ff:c9:70:13:
         5e:b3:70:6e:51:dd:7f:ad:d7:89:e3:10:68:80:e7:5d:94:a1:
         cd:1d:47:de:4a:e1:fc:a5:17:f3:d8:41:2e:8c:fb:f8:2a:4d:
         00:19:8e:b5:b7:ba:ec:50:0c:9f:7c:93:21:18:9a:30:3d:ab:
         4c:06:54:32:aa:2d:70:8e:f7:46:d4:35:d4:aa:82:1a:27:1a:
         8c:2b:ab:fb:98:cd:4b:0a:25:7c:32:79:2a:43:1d:49:86:4b:
         f1:c5:99:34:0a:4c:62:90:5f:11:d6:f1:e6:64:1c:5e:af:41:
         8a:ff:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org