Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/uRq0gT3Q3VudvxT1GrUsQGRtlcc.roa
File:                     uRq0gT3Q3VudvxT1GrUsQGRtlcc.roa (raw, json)
Hash identifier:          MZlD9/3wFjfaTQgyhAMPeJ1xC/UZP71FEXe0NUP7tdU=
Subject key identifier:   B9:1A:B4:81:3D:D0:DD:5B:9D:BF:14:F5:1A:B5:2C:40:64:6D:95:C7
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/uRq0gT3Q3VudvxT1GrUsQGRtlcc.roa
Signing time:             Sat 01 Oct 2022 01:29:20 +0000
ROA not before:           Sat 01 Oct 2022 01:29:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        121.102.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=B91AB4813DD0DD5B9DBF14F51AB52C40646D95C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:00:fb:f5:70:26:53:34:d3:2e:ea:dc:00:
                    d1:9a:14:a0:06:aa:93:83:e1:1b:0d:3a:3c:9a:87:
                    02:9a:18:e7:cc:de:a8:6c:d4:30:c2:7a:ff:df:64:
                    8f:42:63:9b:6a:51:9d:2b:a8:07:f7:b7:c2:62:37:
                    c4:51:29:cc:9c:d8:a2:6e:21:df:2f:1b:f7:a0:21:
                    ba:12:30:ff:8d:1b:88:c1:9c:06:96:49:d4:73:be:
                    a3:ac:68:a8:e3:f2:57:2f:9c:57:a5:7e:df:de:d0:
                    5e:56:cd:11:15:a7:26:79:58:d9:f4:31:a0:97:41:
                    7e:15:4a:e9:06:82:3e:81:52:ec:8b:a7:12:0d:ca:
                    90:21:0b:ab:a5:0c:b1:94:df:71:4a:61:6d:f0:af:
                    8c:71:aa:55:d5:de:96:b9:e0:a4:82:fd:04:74:42:
                    92:5f:3a:37:e7:9c:58:9f:51:72:df:16:22:c2:dd:
                    6c:7b:7d:f0:13:ce:a0:54:e6:22:4d:77:5f:30:4f:
                    0e:25:bd:b2:ad:7c:81:43:f4:74:83:ac:c1:83:0f:
                    1f:7c:ad:47:69:a2:e2:99:f1:14:5e:9b:d1:f4:b1:
                    ce:42:86:91:00:9d:d9:76:43:0a:49:80:2d:43:66:
                    38:14:40:2a:a6:73:d8:93:0d:3b:ab:a0:9a:c5:11:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:B4:81:3D:D0:DD:5B:9D:BF:14:F5:1A:B5:2C:40:64:6D:95:C7
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/uRq0gT3Q3VudvxT1GrUsQGRtlcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:3c:8c:24:46:39:fd:f9:9c:f1:f6:c2:1d:57:77:e2:91:e5:
         0f:2e:4e:29:66:35:99:7a:dd:c5:f8:e8:db:f6:e5:69:85:5e:
         ea:c7:7e:cc:a3:8b:60:cc:3a:e6:26:0c:cc:05:d1:02:85:c8:
         ba:ff:d6:ed:6e:39:f6:2c:0f:27:06:17:04:38:c0:87:2d:ce:
         1f:46:d3:3e:77:48:4a:fc:a6:fd:17:7e:19:34:97:f4:1c:fd:
         47:e1:f7:14:5d:7b:21:9a:c4:c4:d1:23:26:cc:be:ba:0d:01:
         a7:70:a1:29:58:9f:e3:1f:5e:94:c8:65:fd:6b:59:8a:43:f6:
         c1:67:56:ec:d0:64:a1:45:07:db:1c:19:98:c2:19:4d:d0:b1:
         6a:41:f8:a5:c1:a5:a2:a1:3a:22:cf:4c:a1:e5:c1:b1:5f:1d:
         1b:71:c7:d8:37:1d:6b:04:93:86:db:bf:0b:c1:ae:90:02:44:
         8c:30:66:0d:45:6f:11:11:17:59:e9:78:38:5c:2c:be:25:cc:
         88:c0:21:ab:ae:90:9b:28:a1:13:2d:44:08:3b:db:20:57:a2:
         64:e2:25:6b:45:5f:0c:e7:14:81:59:de:a5:8d:5f:87:2f:50:
         7e:d8:02:4e:71:56:6d:78:bb:e1:3b:9c:4b:d6:00:81:ed:d5:
         d3:71:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org