Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/orcSknU5CKl3IvzxnBPNO-uhyVg.roa
File:                     orcSknU5CKl3IvzxnBPNO-uhyVg.roa (raw, json)
Hash identifier:          lKFP4XQVbbBXpYloXT9dxUrpMNLMhD9AmJBJenEzWaU=
Subject key identifier:   A2:B7:12:92:75:39:08:A9:77:22:FC:F1:9C:13:CD:3B:EB:A1:C9:58
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       60
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/orcSknU5CKl3IvzxnBPNO-uhyVg.roa
Signing time:             Mon 01 Nov 2021 01:28:33 +0000
ROA not before:           Mon 01 Nov 2021 01:28:33 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        118.151.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:33 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=A2B71292753908A97722FCF19C13CD3BEBA1C958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:51:2b:24:33:8d:f8:fc:9c:7c:f2:e1:6b:
                    f1:fc:9e:5f:ad:db:c8:3d:a5:80:bf:85:b4:59:08:
                    dc:a8:50:61:7e:92:e2:4e:28:72:df:0f:9a:a4:06:
                    d6:da:83:95:03:2f:42:b4:79:d8:65:51:46:52:7b:
                    88:7a:6b:bf:8a:7d:f9:0b:3b:dd:09:5b:19:38:a2:
                    d1:cb:33:01:e0:40:ca:e3:24:04:9a:8d:b5:83:9a:
                    c4:33:a1:cf:ae:39:ee:99:6a:42:00:e0:22:16:97:
                    84:16:29:e5:b0:71:82:42:73:11:de:a9:54:c1:69:
                    25:26:54:2e:8c:96:16:33:a1:f4:7b:3a:4f:59:ae:
                    c6:ed:2c:b6:94:cd:db:a2:6d:39:4e:3c:85:75:ed:
                    77:02:b5:c6:28:26:d3:d4:fb:77:a7:62:26:9e:4c:
                    d4:94:6d:0b:a5:73:a2:56:95:87:8d:45:57:c4:71:
                    77:56:9a:4b:5f:47:de:2d:e6:bc:51:dd:56:9c:1f:
                    c0:84:3c:c2:3b:46:b7:7c:6c:5e:e4:10:af:43:2c:
                    b7:e5:5b:b0:2e:33:b2:22:e5:2b:47:32:5e:38:ff:
                    c7:13:da:a7:ef:8e:f4:a1:ca:8a:bd:51:14:eb:4a:
                    ca:b0:1f:25:82:e7:cb:20:f3:6f:fc:69:68:3e:f1:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:12:92:75:39:08:A9:77:22:FC:F1:9C:13:CD:3B:EB:A1:C9:58
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/orcSknU5CKl3IvzxnBPNO-uhyVg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:b9:14:c5:48:ff:00:55:88:b0:01:22:f9:b5:62:f1:52:
         3b:77:f7:91:d8:de:11:fc:eb:0b:55:94:0b:a9:b4:83:d9:0d:
         29:88:5e:56:bf:dd:73:71:1b:06:97:46:f0:e1:50:ab:49:87:
         a5:fe:67:23:ff:d3:eb:71:de:e9:d9:ce:ab:e6:15:1d:3b:bc:
         cd:7d:ab:50:64:0c:2c:9e:1b:d5:6b:7b:3d:90:fa:bc:35:8f:
         6c:f8:e1:fa:fa:99:4e:41:1e:07:55:01:5d:7f:94:47:4b:8a:
         ca:8c:b6:bf:43:4e:6e:88:4c:96:66:37:97:c2:2a:c4:97:77:
         66:61:2b:96:ef:ae:b0:62:b9:c6:03:c3:00:48:ca:a9:bb:23:
         15:fb:6e:a3:da:da:7d:09:f8:98:26:78:66:16:eb:7a:bb:c9:
         f5:f8:67:7c:32:a4:01:c3:55:94:06:9f:bb:e8:49:c4:da:b0:
         51:d6:d6:f1:f0:65:ce:74:e2:36:8b:b1:75:f9:d3:b8:bb:4b:
         f0:1c:ae:1c:8a:98:87:5b:45:1c:e2:cf:c9:6f:17:cf:e5:88:
         f8:4d:d0:26:41:4b:d6:5f:db:a7:38:e8:64:1e:1d:cb:8d:79:
         75:47:f9:10:79:7d:6f:9e:5f:2d:06:e9:38:d2:81:fa:50:d3:
         45:3f:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org