Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/j2EBpY0Cb76B8x_QzsjHqYQevqE.roa
File:                     j2EBpY0Cb76B8x_QzsjHqYQevqE.roa (raw, json)
Hash identifier:          DNOmSevheJCN69HcYZT9cFCl3cI44BRzTpd201FyYIU=
Subject key identifier:   8F:61:01:A5:8D:02:6F:BE:81:F3:1F:D0:CE:C8:C7:A9:84:1E:BE:A1
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       75
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/j2EBpY0Cb76B8x_QzsjHqYQevqE.roa
Signing time:             Mon 01 Nov 2021 01:28:39 +0000
ROA not before:           Mon 01 Nov 2021 01:28:39 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        202.221.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:39 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=8F6101A58D026FBE81F31FD0CEC8C7A9841EBEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:ec:af:7a:07:23:b5:e0:79:36:ee:c8:68:
                    29:0c:6e:67:0e:d1:0d:21:99:89:56:ec:e1:ca:05:
                    3d:6e:c7:0b:7a:f5:85:de:b1:72:b5:39:b7:5b:6b:
                    30:a3:a7:10:f6:fe:8b:ba:f6:e5:49:f1:21:e0:99:
                    9e:e4:5e:06:38:d2:a9:cf:43:c2:4b:e9:e6:f2:5a:
                    41:a0:f0:74:c6:20:47:7b:d5:a7:b0:58:18:eb:09:
                    a3:ee:be:b3:01:6b:a0:e2:d8:0e:bc:79:3d:f2:22:
                    aa:64:70:b5:ef:92:59:d0:9f:23:53:34:3f:03:e4:
                    8d:5d:cb:eb:d6:c7:03:bc:08:4e:1d:3a:96:a8:5d:
                    c0:fd:52:c5:17:34:c3:19:47:30:00:af:33:02:1f:
                    e0:2c:9e:68:c2:a2:c2:48:94:ce:34:11:d4:6a:2e:
                    a4:74:0e:30:ed:53:fb:5e:c7:66:9b:ca:ce:4b:4c:
                    20:c0:7e:3f:72:cc:c6:45:52:f4:62:34:16:bf:8c:
                    f1:6a:31:6e:fa:5a:d1:a7:79:c7:03:dc:49:b5:34:
                    d8:aa:2a:e8:8d:67:aa:62:72:c0:fc:4f:89:43:a1:
                    6c:21:88:4d:ce:88:46:8b:61:42:dd:01:75:b7:0f:
                    95:e9:14:b4:1b:6d:35:fa:4a:66:51:2d:5d:50:65:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:61:01:A5:8D:02:6F:BE:81:F3:1F:D0:CE:C8:C7:A9:84:1E:BE:A1
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/j2EBpY0Cb76B8x_QzsjHqYQevqE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:e6:99:3d:d7:f1:da:07:c2:db:9d:42:40:d7:18:5f:3f:86:
         5b:72:b9:8b:89:61:a1:92:74:ba:df:4c:1a:72:02:24:be:47:
         be:eb:6f:00:00:d4:b2:92:e7:b5:fa:37:6a:37:46:0d:a3:95:
         e3:f5:d0:dd:29:88:8a:f1:d2:20:9d:24:d6:c4:9a:19:f6:47:
         72:57:7b:a1:e8:ac:d0:99:df:9e:d3:2d:a6:20:ad:79:75:f2:
         04:8b:23:be:d2:e3:ee:a3:a5:27:9a:b8:21:82:f5:e9:53:ad:
         fd:c9:ad:21:a0:5a:99:b4:4b:f6:c2:ab:ef:15:6e:80:4a:e4:
         50:b9:c9:e9:8e:64:5f:c9:1a:04:72:89:5b:17:c2:e7:77:75:
         ad:45:09:0e:4a:10:43:17:2f:ea:dd:37:60:da:95:75:71:cc:
         09:d7:dc:b0:cd:c9:5e:ec:0d:f3:f6:55:61:a1:a5:c2:27:22:
         d2:37:ca:a5:46:59:ec:0c:c5:58:b4:83:03:b0:79:76:51:64:
         9a:ea:2a:44:6d:7a:e4:c9:dd:d9:eb:97:b8:3e:b0:e9:08:d2:
         0c:78:bf:58:f9:49:85:f1:ed:86:59:d6:b3:fa:80:a9:d9:c3:
         9b:ac:7f:ad:8e:e0:8d:b3:7a:63:3c:c0:f9:66:18:44:84:6e:
         e2:71:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org