Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/RwFV5MLOvFBS_UBlXKRBO6E3-zg.roa
File:                     RwFV5MLOvFBS_UBlXKRBO6E3-zg.roa (raw, json)
Hash identifier:          LlCtpFL94j77Fn+O0QGXduYzVIWoO2YL4yRFWcz0J3U=
Subject key identifier:   47:01:55:E4:C2:CE:BC:50:52:FD:40:65:5C:A4:41:3B:A1:37:FB:38
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       25
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/RwFV5MLOvFBS_UBlXKRBO6E3-zg.roa
Signing time:             Tue 25 May 2021 02:31:53 +0000
ROA not before:           Tue 25 May 2021 02:31:53 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     7671
IP address blocks:        122.100.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: May 25 02:31:53 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=470155E4C2CEBC5052FD40655CA4413BA137FB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:1a:91:e4:e1:06:d8:fc:dc:53:55:44:d5:
                    af:eb:41:8a:59:7d:68:9f:09:4e:e6:3a:62:35:df:
                    b0:d2:3e:12:d7:fd:e0:6d:49:8a:53:0a:dc:13:69:
                    6c:d1:5c:ce:d0:93:01:d0:ca:a4:5c:24:e5:ce:ad:
                    e5:cc:64:94:83:d5:4f:57:36:13:db:f5:9a:a2:00:
                    e8:c6:be:88:75:b2:48:90:84:8a:ee:16:f4:e3:d2:
                    f2:2a:a4:63:f6:56:e2:9c:7e:9f:c1:60:b3:ce:10:
                    63:6f:18:88:7d:ea:63:75:33:92:14:ae:c8:66:c1:
                    60:1c:86:96:7b:d8:97:4f:fa:59:bc:e6:4c:7c:14:
                    d9:cd:d3:28:ad:1f:dd:5d:0c:62:25:dd:a9:7a:10:
                    3b:5c:37:b9:3c:20:06:c7:84:03:e1:73:74:98:be:
                    3c:66:42:68:eb:2b:af:a2:aa:bf:1a:39:d8:ba:7e:
                    42:66:ee:c1:89:d9:09:a2:7e:0a:0f:5e:09:98:ee:
                    1b:1b:b9:bc:09:16:75:76:d6:3c:65:c6:54:9e:69:
                    42:40:28:f2:06:11:fd:a4:41:b1:97:54:fb:5f:e3:
                    b2:61:db:32:0d:c2:d8:fc:18:6b:d3:92:4c:11:6e:
                    bc:5c:6c:1a:38:08:b7:6f:17:c3:89:73:e2:f6:e9:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:55:E4:C2:CE:BC:50:52:FD:40:65:5C:A4:41:3B:A1:37:FB:38
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/RwFV5MLOvFBS_UBlXKRBO6E3-zg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:26:de:9b:c6:95:2f:f0:71:4c:63:1c:01:95:df:2e:42:40:
         b4:a4:80:bb:b6:ea:d1:fc:11:18:ff:f1:bc:98:a4:2b:94:44:
         01:3e:cc:d2:63:bb:b8:4a:1e:4a:02:f3:42:e7:c9:8f:60:79:
         d4:3a:ea:bb:23:57:2f:b0:ab:e5:3a:b3:6b:83:3b:9b:8c:37:
         6b:c6:cf:1e:b0:d5:23:4e:42:2c:0a:87:e2:7a:e9:6e:fa:d0:
         80:f6:e9:29:f1:cd:2c:4a:fd:ff:d9:34:02:68:cb:a7:56:7d:
         5c:20:fc:8c:1d:40:8e:3e:5e:ca:2d:99:3a:40:ea:79:98:0a:
         71:90:08:2b:df:26:f0:48:2f:6f:e6:8c:aa:46:c6:35:37:83:
         c1:bf:56:d8:a9:44:cc:e7:69:71:12:5a:bd:80:5c:bc:4e:53:
         77:ba:11:09:1d:85:f5:83:07:6b:85:d3:a7:00:39:eb:03:93:
         bf:19:8b:8c:3c:ab:12:9d:31:7a:bf:41:77:55:d7:cf:88:be:
         39:b2:ef:54:f5:22:7c:64:60:e4:eb:11:0c:3f:98:e7:61:f6:
         18:83:6c:99:40:e0:a0:12:eb:48:8e:f2:1e:3b:d8:98:7e:1a:
         ca:d7:66:c5:69:fb:63:8d:65:68:89:4e:7a:ff:b9:a4:45:03:
         91:1d:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org