Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/WObFi3CfEsqYKn0GgQAp75xTmG0.roa
File:                     WObFi3CfEsqYKn0GgQAp75xTmG0.roa (raw, json)
Hash identifier:          AtOvUqiRJZqqVB4xL0GxJ38bmfiInys0UYVIYtbjBWI=
Subject key identifier:   58:E6:C5:8B:70:9F:12:CA:98:2A:7D:06:81:00:29:EF:9C:53:98:6D
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       08
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/WObFi3CfEsqYKn0GgQAp75xTmG0.roa
Signing time:             Thu 28 Oct 2021 02:28:04 +0000
ROA not before:           Thu 28 Oct 2021 02:28:04 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     131921
IP address blocks:        180.131.136.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Oct 28 02:28:04 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=58E6C58B709F12CA982A7D06810029EF9C53986D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e4:44:84:04:a5:8f:c1:7f:2b:c1:e4:ae:c6:
                    d8:88:1b:8d:73:67:64:e9:68:d0:b1:90:99:6e:7b:
                    7c:7e:2e:ff:76:c9:32:1d:ab:16:e4:c6:f9:4a:ce:
                    f5:49:ac:47:18:86:30:9f:e3:78:20:7b:ba:52:6b:
                    b1:76:02:ad:c7:ad:f9:de:08:98:be:1e:0a:de:b9:
                    da:87:02:0d:2a:ed:66:aa:1f:fd:4c:13:4b:b1:b6:
                    d0:29:c4:b6:29:c6:74:1e:d4:7b:72:db:2b:01:9a:
                    44:d8:58:93:9d:97:7c:82:17:d9:58:ce:91:46:6d:
                    c8:7d:dd:1f:07:52:44:49:80:df:8e:06:70:93:b7:
                    c0:b8:ae:aa:bb:8f:0c:a2:c5:06:b0:ce:75:1a:38:
                    23:8e:56:07:61:57:a5:01:13:fa:08:66:c0:b4:39:
                    d6:1c:3d:30:46:fd:35:36:64:d9:16:50:65:e1:46:
                    a9:b7:94:96:8c:fa:a0:7d:90:e4:0a:eb:d8:9a:e0:
                    bf:fd:ab:f7:66:16:8e:3e:53:4a:10:5a:00:10:5a:
                    90:66:4f:5b:26:30:c0:3c:48:c4:a4:56:16:f7:a1:
                    5c:88:61:88:91:d7:47:79:22:96:6e:ec:4b:7d:56:
                    79:ba:38:41:be:b0:d8:13:70:ea:51:3d:2c:4e:7c:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:C5:8B:70:9F:12:CA:98:2A:7D:06:81:00:29:EF:9C:53:98:6D
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/WObFi3CfEsqYKn0GgQAp75xTmG0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:9c:5b:eb:65:a3:6b:83:f7:80:8b:c3:48:16:12:37:0e:88:
         0a:d8:b5:cd:cf:a2:f0:60:15:6a:7e:be:4f:e0:ba:64:f3:e3:
         04:af:8c:08:63:79:88:5a:e3:79:71:d3:a8:0c:90:44:c7:33:
         12:c3:ae:0d:fe:68:a6:31:38:5b:da:07:98:d4:d3:fc:bb:ec:
         dc:86:b5:f3:37:2f:9e:09:84:33:74:d6:19:9f:af:e6:33:eb:
         73:3e:d2:f5:e1:e6:58:1a:41:ea:93:5f:55:98:16:fc:bd:36:
         73:73:c6:4d:d2:f8:12:36:7d:59:ed:9d:6e:c0:d3:77:60:bf:
         a3:3b:a0:bd:22:f5:f5:55:92:89:24:d8:50:e8:67:6d:5a:7a:
         cd:c7:a0:27:ce:37:d1:f2:00:6e:8b:ac:11:62:01:6e:d0:be:
         c5:c4:fa:d5:dd:f1:0a:50:33:c1:61:6b:1c:11:64:68:3b:f8:
         49:b7:55:7b:14:6a:64:32:7f:89:36:27:0d:af:e1:73:cc:59:
         7e:cc:93:a4:e2:a6:c4:28:39:0d:d1:29:a3:65:0a:22:49:10:
         69:91:01:7f:a7:9e:33:a8:2b:93:fd:63:68:bf:e0:89:46:91:
         08:6b:a2:c6:cf:1b:d0:e1:e7:b6:9f:52:02:5d:95:c5:67:7d:
         db:d9:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org