Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/vIic5OBVyK8_LJKjlczMWGOZkSk.roa
File:                     vIic5OBVyK8_LJKjlczMWGOZkSk.roa (raw, json)
Hash identifier:          XAv7CKd8n/SKhfnLFUPpvb8AaBYluw0vTfwdKAnOvso=
Subject key identifier:   BC:88:9C:E4:E0:55:C8:AF:3F:2C:92:A3:95:CC:CC:58:63:99:91:29
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       81
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/vIic5OBVyK8_LJKjlczMWGOZkSk.roa
Signing time:             Mon 01 Nov 2021 01:29:07 +0000
ROA not before:           Mon 01 Nov 2021 01:29:07 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        210.138.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:29:07 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=BC889CE4E055C8AF3F2C92A395CCCC5863999129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:2f:68:09:ef:74:43:64:99:ab:5f:86:5c:
                    de:0e:34:9f:9c:2f:93:24:f0:ca:d2:65:3d:1a:7e:
                    f2:de:0a:3a:30:6d:5e:0e:b2:4b:77:a0:ac:8f:23:
                    c5:8e:ec:91:ac:22:5c:ba:df:65:5d:f4:11:d8:8f:
                    43:2b:26:97:f6:4a:e9:f9:a9:c5:e0:e4:eb:28:15:
                    93:c3:f6:1b:94:9c:72:f3:04:ad:91:0b:dc:58:8a:
                    5d:13:61:4c:92:fc:72:79:e1:6d:d8:28:a6:c5:1a:
                    a1:c2:7a:7c:da:74:56:46:49:4e:34:fd:8a:68:dd:
                    69:5b:83:52:5f:cb:20:72:ef:ba:4a:db:db:2b:d6:
                    74:c9:1e:82:68:46:18:2b:2f:48:82:0b:4b:39:bc:
                    3d:b7:2e:33:4b:1e:04:58:4b:2e:0c:ee:23:7a:91:
                    fc:da:be:fa:02:ff:3f:09:7e:bf:12:60:4b:0b:fd:
                    ef:d6:a5:d0:83:78:c9:03:d8:c0:fa:c8:15:4b:c3:
                    0c:83:23:0a:09:11:f4:1b:3b:46:50:1a:fa:26:61:
                    ca:8a:dd:ca:88:38:37:e1:a1:f6:00:dc:ea:46:65:
                    d5:06:29:16:c4:38:cd:d9:65:e1:1d:4b:45:86:e2:
                    e0:15:25:6c:2a:54:0c:aa:88:ee:02:0b:ee:3e:4d:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:9C:E4:E0:55:C8:AF:3F:2C:92:A3:95:CC:CC:58:63:99:91:29
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/vIic5OBVyK8_LJKjlczMWGOZkSk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:52:f6:1d:26:6a:66:60:57:37:82:e8:76:1b:f5:7e:51:f6:
         09:3d:e8:e9:8c:77:13:d3:86:f1:3c:2d:6f:e5:40:bb:2d:10:
         95:74:f8:63:7c:9c:53:4c:35:7e:11:1f:c2:3e:cf:9b:13:b8:
         de:76:ff:5e:ee:6b:8f:46:87:de:35:b7:9b:96:38:ca:3b:84:
         c8:e5:21:55:20:ea:19:79:1c:88:ca:72:b1:36:aa:d4:a4:b9:
         bf:31:bd:d3:a4:95:27:ec:f1:6f:bd:04:59:b1:c3:7f:89:01:
         0d:fc:ec:97:74:2c:44:cd:92:a8:27:cf:6c:f9:d6:24:d3:92:
         46:42:f5:52:13:b4:29:01:b0:f4:f8:2e:81:37:6e:af:be:e7:
         58:2d:2b:01:ef:c1:8f:e4:9a:95:38:a5:67:07:12:e4:a1:ec:
         9f:72:27:c3:af:39:60:48:3b:2d:4a:3c:eb:e5:e5:da:73:4a:
         f6:10:6d:a7:b4:27:db:78:65:9f:31:7d:ee:ee:9a:e8:7f:0a:
         53:35:c5:3d:d6:48:7a:54:57:4d:74:2e:de:7d:51:f7:57:d9:
         89:27:aa:25:e3:d0:29:54:5b:7d:ea:06:e3:91:6c:00:27:45:
         33:98:6b:93:30:e9:46:75:38:51:3d:c6:a6:80:3b:df:17:3a:
         a3:cb:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org