Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/g-yb_3hV-O3CcSMEjiHgQxrVt5Y.roa
File:                     g-yb_3hV-O3CcSMEjiHgQxrVt5Y.roa (raw, json)
Hash identifier:          vkysSCBJVYgqWijtNXBVrlHphSVfXjd8dvvLtwjdcEI=
Subject key identifier:   83:EC:9B:FF:78:55:F8:ED:C2:71:23:04:8E:21:E0:43:1A:D5:B7:96
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       62
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/g-yb_3hV-O3CcSMEjiHgQxrVt5Y.roa
Signing time:             Mon 01 Nov 2021 01:28:33 +0000
ROA not before:           Mon 01 Nov 2021 01:28:33 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        101.128.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:33 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=83EC9BFF7855F8EDC27123048E21E0431AD5B796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:56:c7:89:f7:25:54:8b:7a:49:7a:d1:3a:
                    8e:5f:99:f8:ad:f7:c8:e8:4c:10:93:cb:6a:81:bb:
                    04:d7:4d:9c:4f:bd:f7:53:f5:fd:ce:04:a8:6d:47:
                    3c:ab:92:50:69:c2:73:37:ce:46:9e:70:32:3d:2f:
                    b2:2b:4b:92:9a:f7:9e:42:4e:34:c4:3c:bf:b7:b8:
                    a6:3e:9f:3e:8e:69:a1:7f:e8:f8:8d:dc:e1:ee:c7:
                    c5:2a:e9:88:77:8e:74:6f:80:40:82:4b:86:cd:18:
                    c8:19:d6:42:9c:57:93:3f:3a:65:4d:dd:a3:12:e0:
                    30:e9:49:ac:8e:ae:eb:a0:9e:d8:f4:14:9a:1f:e6:
                    65:b8:f9:9f:b8:dd:11:db:31:0d:c8:40:ba:90:2e:
                    7f:72:79:b6:6b:51:c2:1f:b9:1a:8b:93:27:e0:71:
                    5a:e7:c0:ff:9d:62:b1:d8:1e:9a:06:6a:21:49:ca:
                    45:2f:a5:16:e2:f2:bf:65:77:ce:eb:55:5b:77:1f:
                    e3:fd:8d:80:2c:68:c6:fa:02:24:05:be:8b:de:8f:
                    e2:ff:97:aa:78:e6:85:23:7c:67:5e:04:84:8f:59:
                    b7:6f:9b:b4:34:12:b8:13:45:2a:2c:d4:ec:a9:a6:
                    7d:9b:57:24:f3:5b:c7:6f:ba:c9:c9:a3:e0:6a:7e:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:9B:FF:78:55:F8:ED:C2:71:23:04:8E:21:E0:43:1A:D5:B7:96
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/g-yb_3hV-O3CcSMEjiHgQxrVt5Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:94:4c:02:f0:6e:37:b2:a4:bc:c9:b1:19:5d:13:ce:87:
         88:8e:11:4d:b8:4f:b1:03:8d:a5:29:04:69:42:72:2f:8b:b7:
         33:3d:b4:81:5e:7b:a1:06:24:a9:a4:54:30:d0:64:5a:b9:4e:
         04:2c:b6:b4:85:c4:4d:31:6d:15:95:e7:3b:1e:16:f4:78:42:
         dd:ec:b9:c1:1f:29:8d:5f:b3:30:29:80:69:24:27:c9:9e:46:
         85:a8:9b:a0:8d:2c:e7:69:22:5a:8a:6d:85:ed:e4:45:53:ec:
         46:8e:f8:e8:68:bf:c5:37:b6:9a:3a:90:36:80:24:cc:0a:31:
         98:98:39:2d:ea:11:4a:f2:d0:c6:af:ca:a0:1a:81:fe:5c:fd:
         5b:68:7c:ea:83:b5:20:c5:f7:38:d7:f6:30:05:05:45:fc:d5:
         5c:61:1f:f6:30:04:1a:6c:fa:16:d8:75:ae:0e:3b:15:69:2e:
         a4:66:df:90:b3:61:b3:1a:2c:a8:dd:3e:0e:3e:23:27:50:c4:
         8b:22:15:78:e4:ef:77:09:71:03:cb:35:a4:47:f6:4e:7f:7d:
         6d:17:66:d1:fd:14:48:8c:99:4b:45:f1:9e:0b:e1:1c:fe:e1:
         ed:c7:6b:57:83:cd:d0:77:0a:da:71:0e:0e:15:9c:30:4b:cc:
         52:61:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org