Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/LopggAXV58pwuMBKynA8zyAwRl8.roa
File:                     LopggAXV58pwuMBKynA8zyAwRl8.roa (raw, json)
Hash identifier:          CgSGxqG0Le4jV0xQk6zmLcibXv8m+CZJCcMImrWs4ZU=
Subject key identifier:   2E:8A:60:80:05:D5:E7:CA:70:B8:C0:4A:CA:70:3C:CF:20:30:46:5F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       8D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LopggAXV58pwuMBKynA8zyAwRl8.roa
Signing time:             Sat 08 May 2021 04:05:47 +0000
ROA not before:           Sat 08 May 2021 04:05:47 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        210.232.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:47 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=2E8A608005D5E7CA70B8C04ACA703CCF2030465F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:6b:c6:0f:58:33:cb:71:55:9e:2c:f2:a1:
                    5c:9a:f1:e6:46:e4:a7:7f:ae:fd:c0:92:b2:19:8a:
                    bd:6c:53:a4:0c:df:7f:c5:ae:ee:3b:85:81:b2:42:
                    74:9c:ab:aa:81:c7:7a:f6:c1:34:4e:25:33:90:89:
                    bb:c3:4d:6a:18:8a:13:63:bb:ef:6a:b6:5d:2f:de:
                    f1:96:54:c5:7c:0e:70:33:ec:05:46:d4:ab:ed:67:
                    2d:24:cd:a4:da:14:77:b2:5e:84:e3:cb:84:48:7d:
                    fc:fb:44:59:83:90:6f:d1:89:57:50:c5:25:e7:52:
                    fc:67:a3:80:29:bb:dd:c2:83:22:bc:37:91:fe:92:
                    9d:98:a0:94:7a:f0:9d:39:b5:95:4c:2a:2a:0b:9a:
                    88:e6:56:f0:3b:32:02:21:11:27:df:50:71:08:54:
                    2a:83:0d:5f:a4:58:9e:e6:93:46:f5:94:08:77:09:
                    80:f9:34:db:96:c1:88:66:5c:73:9b:8d:6b:0d:b7:
                    23:c5:13:2c:03:8c:94:d3:2f:1a:2a:ab:d5:36:29:
                    55:11:98:20:8e:42:a4:e2:c7:73:54:f6:2d:0e:fe:
                    a9:9b:16:ad:17:16:a9:d9:99:1f:bd:ca:5a:58:89:
                    f3:7f:25:66:4a:4a:d7:09:a3:c5:37:32:31:30:9c:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:60:80:05:D5:E7:CA:70:B8:C0:4A:CA:70:3C:CF:20:30:46:5F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LopggAXV58pwuMBKynA8zyAwRl8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:0f:9c:48:65:dd:3d:27:91:5c:31:10:1e:5f:30:4a:0d:16:
         7e:4d:e4:7e:a9:1d:1e:60:e9:df:06:76:e7:a5:5d:bf:7c:78:
         e2:c6:88:29:6a:f8:5b:7b:8a:5d:94:3a:3c:b1:ff:59:f7:a1:
         11:51:4c:e6:6f:10:09:60:ae:19:b9:db:64:9f:bd:df:44:f6:
         ab:57:8c:f4:a2:66:19:75:37:fd:1e:df:45:fc:d9:cf:16:fd:
         10:39:8c:95:90:24:0d:c1:fe:ae:0e:3b:77:50:f5:73:82:5c:
         f9:b9:b9:a7:33:9d:3c:76:b0:57:4f:1b:37:88:74:e6:26:61:
         aa:14:51:8d:db:f9:04:1c:51:73:ea:8c:6f:8f:c4:3c:16:fe:
         3c:4f:8c:8b:99:ad:39:95:09:f2:1a:28:66:78:6c:ea:45:d1:
         33:f9:e4:95:ab:b0:2c:75:56:4a:1d:d0:d4:a3:43:4d:aa:5c:
         21:b1:34:dd:0d:21:b8:84:74:11:04:da:82:62:75:b2:40:a2:
         13:49:0d:a1:3b:e4:5f:a2:7e:15:29:c0:8c:e4:4a:72:9e:3d:
         fc:0e:4b:12:04:b7:73:b1:de:d0:41:e0:0a:f3:53:d5:33:af:
         3a:74:a7:a2:77:02:43:d2:d6:09:e0:43:25:30:40:01:b4:51:
         4b:cd:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org