Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/JS_kpOI8zVgcVjHwhL1fAhwsEXg.roa
File:                     JS_kpOI8zVgcVjHwhL1fAhwsEXg.roa (raw, json)
Hash identifier:          /GQGb7sCc0l1/mwH07oICBVIxbeDEqllA4JW5v4vfns=
Subject key identifier:   25:2F:E4:A4:E2:3C:CD:58:1C:56:31:F0:84:BD:5F:02:1C:2C:11:78
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       9E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JS_kpOI8zVgcVjHwhL1fAhwsEXg.roa
Signing time:             Sat 05 Jun 2021 03:47:32 +0000
ROA not before:           Sat 05 Jun 2021 03:47:32 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        118.16.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:32 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=252FE4A4E23CCD581C5631F084BD5F021C2C1178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:b1:8e:1d:03:50:14:fd:b9:57:cb:aa:d5:
                    a3:2b:c4:d4:aa:5b:cc:1e:76:f8:41:dc:a7:6a:72:
                    77:35:46:07:6c:db:35:de:e3:46:8c:68:cf:82:9a:
                    9b:ae:bb:28:de:1c:b7:a8:aa:dc:e2:55:03:09:b2:
                    c5:32:be:fc:49:15:e6:f7:a8:3c:3a:58:7c:df:7b:
                    3d:bc:8d:fd:29:12:1f:f5:cf:57:38:65:b1:08:09:
                    53:fd:a0:4e:7a:36:3d:11:b5:5c:ee:3d:23:5c:0e:
                    47:d9:41:3b:20:cd:50:79:db:6d:28:23:66:d9:12:
                    99:0d:d7:8a:13:41:b5:3f:40:6f:b9:47:af:d0:98:
                    f1:36:db:13:06:82:cc:93:66:46:02:b0:51:4b:f4:
                    12:a5:75:be:fb:03:5a:a8:b7:80:44:f4:77:96:da:
                    0c:52:92:1f:49:e6:cf:07:e4:3a:ef:d2:9a:1d:70:
                    95:63:af:61:fe:1e:af:75:55:ad:40:d6:45:90:a0:
                    79:f1:09:ab:4c:17:86:b7:63:eb:05:db:6b:f9:0c:
                    58:2d:a3:b3:8d:e8:0f:d9:9c:7a:d5:4e:62:73:5d:
                    a6:6b:0d:e9:b0:a8:18:fe:f9:ab:17:1b:74:47:6f:
                    82:df:50:17:17:fc:c8:da:62:49:67:95:76:3d:bf:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:E4:A4:E2:3C:CD:58:1C:56:31:F0:84:BD:5F:02:1C:2C:11:78
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JS_kpOI8zVgcVjHwhL1fAhwsEXg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.16.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:43:48:9d:50:17:fc:46:e7:96:53:50:c2:c7:61:85:be:
         d3:9b:63:d1:6f:2b:24:4b:03:82:7a:27:37:c7:b0:be:84:42:
         57:57:5b:12:ba:28:61:07:82:c4:7e:ad:83:2f:13:22:32:cf:
         59:88:f3:b3:a1:90:4b:13:18:c0:6c:4b:ac:ea:43:1c:99:a5:
         18:ef:dd:11:a3:d2:6e:d0:83:99:31:3c:18:bd:b2:50:30:af:
         72:d1:3a:40:80:47:6f:21:bd:72:e0:6a:98:64:f9:89:58:91:
         6f:3b:6d:e0:ba:f9:ff:c2:c2:17:a1:89:44:20:3e:05:c9:f7:
         08:f2:30:d3:a6:ac:aa:bf:5a:38:ae:b7:5a:f8:da:b2:a4:66:
         c6:95:83:92:76:a5:8e:21:59:55:7b:a9:f4:9d:e5:67:af:be:
         ed:09:46:7c:26:aa:4e:94:7e:01:8a:5e:b7:17:d7:bc:71:82:
         40:04:74:2f:08:bf:27:62:6c:8c:a5:85:63:1f:48:a0:08:18:
         20:c9:33:11:51:ad:08:ae:66:de:5f:5e:3b:86:82:2b:b5:6e:
         ae:f9:e6:69:23:01:0e:28:2e:21:2f:7c:a8:bf:e5:4b:b8:25:
         49:39:bd:c4:bb:33:3d:9c:25:53:84:e9:d8:0e:08:2e:cd:39:
         75:f1:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org