Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/k9auUff5OLHAReP-zBd5ohurrJ4.roa
File:                     k9auUff5OLHAReP-zBd5ohurrJ4.roa (raw, json)
Hash identifier:          mdP46zevGujJwHBforvvvSVp9Uf87PQsuzVpwQdb1Fo=
Subject key identifier:   93:D6:AE:51:F7:F9:38:B1:C0:45:E3:FE:CC:17:79:A2:1B:AB:AC:9E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       78
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/k9auUff5OLHAReP-zBd5ohurrJ4.roa
Signing time:             Mon 01 Nov 2021 01:28:40 +0000
ROA not before:           Mon 01 Nov 2021 01:28:40 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        210.148.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:40 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=93D6AE51F7F938B1C045E3FECC1779A21BABAC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:be:1a:d5:58:f7:63:21:d5:33:3b:80:3e:
                    46:38:f5:3a:ea:30:04:c4:51:e8:d3:68:76:15:62:
                    13:c4:41:5a:78:ef:d0:2f:ae:74:ad:38:d8:aa:ce:
                    15:39:69:87:31:fb:7d:1a:07:bf:d3:9d:69:8e:0c:
                    c3:bb:55:35:5a:33:4f:bd:8d:13:33:a9:00:72:a7:
                    08:3a:b3:f8:e7:4b:7b:13:15:13:64:d3:f0:ee:2f:
                    6f:9a:d5:96:6a:7f:42:f7:66:83:08:65:8d:1b:ae:
                    52:57:00:c3:bb:67:46:c7:f1:c3:72:f1:73:13:50:
                    97:d5:6c:d2:98:e6:cd:c5:00:d2:8a:b8:48:9c:f4:
                    12:91:a2:93:3e:3d:21:1f:97:94:99:7f:25:1c:3b:
                    63:e6:78:82:58:8a:8b:12:24:be:b5:f9:31:b9:35:
                    e7:3c:8f:4c:a1:a0:8b:27:7b:fb:4c:c2:e8:12:f4:
                    be:d8:a5:7c:15:32:86:b2:3e:19:f9:c0:21:9a:68:
                    79:50:04:18:5a:f0:cd:08:36:ae:f2:55:12:c4:1f:
                    d4:b5:a3:ec:8f:dc:73:fa:40:d7:f1:7a:55:fe:05:
                    14:65:d6:f8:cd:74:cd:89:f3:f5:d5:b3:f4:76:c6:
                    e3:fa:8c:56:86:e5:74:14:c0:4b:f2:b1:39:73:46:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D6:AE:51:F7:F9:38:B1:C0:45:E3:FE:CC:17:79:A2:1B:AB:AC:9E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/k9auUff5OLHAReP-zBd5ohurrJ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:91:cd:e0:91:4a:37:61:af:6c:d4:fd:88:dd:05:7a:0f:39:
         72:17:13:bd:11:0a:d1:a7:48:d7:bb:71:1f:0b:04:07:4d:8f:
         50:32:cf:5e:df:77:1e:3f:c8:1b:45:0b:a7:ad:a7:7c:09:0d:
         be:9c:45:66:ec:7b:26:09:0a:7c:1d:b2:47:aa:31:55:c4:1f:
         8e:67:ee:e0:d9:ac:fe:51:71:db:cb:16:d1:a2:9f:f0:35:e6:
         93:03:f3:74:74:b7:15:97:98:0b:0e:bc:35:ce:b7:06:08:a7:
         27:7d:15:07:07:c4:b5:eb:c7:49:ed:3d:93:a6:52:ca:b7:14:
         b2:d1:31:84:8b:4c:31:4c:c3:3e:3b:71:4e:93:57:1e:ff:fe:
         fd:6b:04:e3:37:80:d3:ea:9f:d1:11:12:3f:3e:14:79:18:13:
         03:c9:57:49:66:88:d3:bd:36:d8:d7:87:fc:9e:5f:4e:19:2d:
         bb:04:22:d6:e9:09:09:67:5d:94:dd:10:5d:d3:e4:a1:1d:d0:
         26:89:7b:ac:b1:78:c8:82:69:50:46:5c:c4:4e:53:7d:0c:35:
         7c:3a:f6:3e:6f:89:c3:96:d7:1c:25:59:af:f7:b3:ff:be:22:
         3d:ef:90:48:93:8f:19:54:f1:04:c9:34:06:e3:c2:76:1d:75:
         9d:9f:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org