Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGeEFZ1r9arC9Bx6x7ONtPe7e4g.roa
File:                     xGeEFZ1r9arC9Bx6x7ONtPe7e4g.roa (raw, json)
Hash identifier:          7khtl76Vz7Bc4q/YYoHOslZLAd2qphS4IrkK8fR77ck=
Subject key identifier:   C4:67:84:15:9D:6B:F5:AA:C2:F4:1C:7A:C7:B3:8D:B4:F7:BB:7B:88
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       72
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGeEFZ1r9arC9Bx6x7ONtPe7e4g.roa
Signing time:             Mon 01 Nov 2021 01:28:38 +0000
ROA not before:           Mon 01 Nov 2021 01:28:38 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        219.105.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:38 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=C46784159D6BF5AAC2F41C7AC7B38DB4F7BB7B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:11:0c:77:20:9d:6a:1f:00:a4:fe:4d:a1:
                    6b:bd:75:b7:e4:56:6c:f3:7c:74:ff:5d:6e:f3:56:
                    d1:90:7f:a7:12:43:17:b5:52:7a:58:af:f2:83:e0:
                    21:74:8b:62:78:74:e6:db:c7:dd:0e:4a:a6:05:30:
                    3a:0d:77:1a:98:4e:aa:fe:c0:d2:57:9d:14:ca:ae:
                    38:bd:84:fe:04:7c:e0:38:64:96:c1:a3:8f:c0:e4:
                    59:5f:26:4b:ad:1f:c8:1e:87:3b:b4:17:da:6e:34:
                    61:4b:13:0f:ba:61:9d:45:47:8c:80:92:7a:f0:9a:
                    64:e9:de:83:96:78:05:c8:de:11:d6:d3:19:e0:a2:
                    a6:2e:40:df:34:19:8d:ee:1c:e9:a6:6c:7e:29:ff:
                    f7:39:47:c6:f2:5a:d8:57:26:5a:74:14:07:90:78:
                    71:a6:b5:75:9a:62:e6:65:57:50:7d:3b:06:14:2c:
                    c6:89:3f:59:a6:c7:43:da:2e:f4:bc:f9:91:12:be:
                    6d:01:33:2f:f2:5d:96:e5:47:a0:cf:20:f1:1b:2b:
                    34:79:20:74:72:f5:15:ca:b0:1c:08:15:48:d3:8d:
                    bc:cc:4a:44:d8:0f:fe:47:8b:94:1d:a5:dd:39:8a:
                    22:0a:70:fc:d6:ad:59:94:ec:13:bb:78:b8:f2:28:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:67:84:15:9D:6B:F5:AA:C2:F4:1C:7A:C7:B3:8D:B4:F7:BB:7B:88
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGeEFZ1r9arC9Bx6x7ONtPe7e4g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:fb:39:68:2e:2e:49:54:ca:d5:38:f3:01:23:e1:4b:85:
         cd:27:c9:30:44:b6:2a:86:21:3f:cb:c1:7d:b2:f2:30:22:0f:
         50:fe:c6:e4:63:e7:32:c8:9c:62:e3:e2:e2:e3:b9:80:6b:93:
         ec:6a:38:46:95:ed:86:83:d5:bc:b1:5c:0c:4d:58:79:5e:6d:
         e8:62:99:00:ea:2a:32:70:41:29:1b:2c:d3:e1:1b:1c:98:c8:
         46:1d:45:37:7e:c1:c8:78:26:a5:9d:89:dc:10:ab:fc:82:28:
         74:7b:4d:ef:d2:10:43:05:70:91:dc:79:c1:b0:27:b0:f0:93:
         da:83:50:c0:1f:79:76:4c:bb:21:e7:5c:0f:3c:43:53:4f:93:
         01:bd:5f:fd:bb:73:5a:15:63:bc:1e:e9:c3:50:80:d6:0e:2b:
         ed:66:c6:fd:4a:34:21:91:aa:38:f6:03:98:21:c3:89:f5:34:
         07:72:1c:28:6e:3d:8a:48:cb:9e:b3:c7:83:bf:74:91:a9:18:
         08:40:a2:e0:6f:a3:2a:45:0f:46:c6:07:62:1c:b0:b1:7d:ec:
         1c:77:ce:8e:f2:f4:57:00:37:1c:18:42:07:16:cd:d0:e0:70:
         de:61:37:da:93:b3:9e:89:f1:da:a3:30:62:7f:cf:be:e9:77:
         c1:46:c7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org