Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/tbJlYomk2GRfNZSkuEcxWNZOW1A.roa
File:                     tbJlYomk2GRfNZSkuEcxWNZOW1A.roa (raw, json)
Hash identifier:          meybMHbNCUMSuPoGrFvv/6SxWsM5HMlGQ9Px9X3ubUg=
Subject key identifier:   B5:B2:65:62:89:A4:D8:64:5F:35:94:A4:B8:47:31:58:D6:4E:5B:50
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       74
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tbJlYomk2GRfNZSkuEcxWNZOW1A.roa
Signing time:             Mon 01 Nov 2021 01:28:39 +0000
ROA not before:           Mon 01 Nov 2021 01:28:39 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        211.14.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:39 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=B5B2656289A4D8645F3594A4B8473158D64E5B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b8:a4:8a:ca:60:08:00:0a:3e:b2:f1:52:d7:
                    8c:2e:17:08:42:3d:a8:09:8f:2c:48:8a:ba:9f:ce:
                    dd:1f:54:2d:5e:7c:bd:44:98:05:e5:22:82:61:f7:
                    d8:ee:16:aa:e0:ab:ce:81:a8:c8:13:18:3e:21:dd:
                    50:36:53:fd:36:9a:0f:0c:27:7c:67:b2:53:7d:12:
                    92:8c:ab:96:6f:52:fb:7f:aa:98:21:d0:bb:a4:90:
                    e2:29:13:5a:52:e8:24:69:f3:90:a9:88:d9:dc:38:
                    e9:aa:79:12:2a:d9:48:91:8f:71:c5:c5:67:10:32:
                    d6:aa:12:ef:4f:a6:e1:1d:d3:1f:53:70:05:d0:cf:
                    b4:ef:f9:9a:e1:c9:70:69:28:f3:82:8b:52:1d:38:
                    76:e8:0d:7f:fd:f3:e6:c0:a1:c7:e2:32:22:0c:35:
                    b7:5d:38:3e:bd:7a:e2:32:e0:ec:71:21:19:9d:97:
                    28:80:c3:df:ef:e4:90:0f:e7:51:ab:7d:19:31:37:
                    3b:b2:63:5d:4a:40:be:e2:ce:7b:cb:8e:8e:3b:b2:
                    f3:cd:d0:0e:62:12:24:80:3c:63:d3:c6:69:bb:19:
                    22:be:30:11:2a:71:bb:ec:73:08:2d:9d:61:b3:5e:
                    3d:86:5f:5c:cc:85:dd:73:1c:aa:75:45:35:9e:73:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:65:62:89:A4:D8:64:5F:35:94:A4:B8:47:31:58:D6:4E:5B:50
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tbJlYomk2GRfNZSkuEcxWNZOW1A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:18:6e:f5:cd:d1:eb:3c:2c:71:c2:41:85:96:a5:1e:67:3a:
         a7:d9:71:98:2a:e2:fb:33:49:c0:16:4a:f3:5e:90:f4:98:86:
         41:d9:78:be:02:49:aa:d5:74:8c:7c:18:d4:8b:63:98:c8:6f:
         a0:22:23:02:f7:b7:cc:7a:e2:85:de:ac:8e:95:fe:09:02:ad:
         d9:b5:f8:16:bb:ad:51:2c:01:f4:87:7a:1c:3b:e3:91:83:99:
         5d:0b:d8:cb:21:1e:75:e6:77:e0:6b:34:5a:d6:e2:39:45:d4:
         cc:41:55:0c:ff:a4:19:69:0b:90:1f:c5:5b:72:f6:86:8b:ce:
         27:a7:af:8d:cf:34:11:2c:b3:60:c2:57:3d:b5:74:87:3a:6a:
         b3:42:0d:c6:3c:7c:cf:fe:83:4d:22:ff:cb:ed:90:d3:1f:b6:
         89:a9:8e:2b:6e:17:5d:ff:b7:36:fb:6d:53:c2:af:a8:38:c2:
         60:7c:45:4f:6e:13:93:a3:f6:8d:06:5b:04:66:e9:3c:2a:e6:
         d4:2b:27:1f:05:33:d9:c2:b6:15:fe:49:8c:b5:49:4f:3f:5d:
         44:8e:0a:9d:f7:5a:c4:d2:70:1f:2f:99:57:c6:88:fc:74:d3:
         a1:16:87:e0:cf:4f:43:db:f9:68:cb:8e:46:0a:88:1c:ce:d7:
         79:fc:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org