Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/S6gwWBBlkQVreZIllZX_XYnwAMI.roa
File:                     S6gwWBBlkQVreZIllZX_XYnwAMI.roa (raw, json)
Hash identifier:          CndR2+VDvdSYPk0p0/LV+buxJLanm5vkygf68rHxh5Q=
Subject key identifier:   4B:A8:30:58:10:65:91:05:6B:79:92:25:95:95:FF:5D:89:F0:00:C2
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0116
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/S6gwWBBlkQVreZIllZX_XYnwAMI.roa
Signing time:             Fri 10 Jun 2022 03:42:39 +0000
ROA not before:           Fri 10 Jun 2022 03:42:39 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        153.128.0.0/10 maxlen: 10

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:42:39 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=4BA83058106591056B7992259595FF5D89F000C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:80:4d:92:30:cd:a9:cc:e5:aa:ed:f3:df:
                    d4:c4:8a:2e:f5:6c:da:da:98:06:f0:bd:b6:5a:5a:
                    6d:ed:df:be:4e:2a:0d:a0:ac:85:e9:b5:9f:24:1f:
                    27:41:6f:28:c8:7e:cf:5e:e1:22:f7:c1:05:b3:02:
                    7e:0f:0f:7d:65:e2:a6:c6:a0:0c:4f:ae:1a:92:ef:
                    58:50:4a:75:29:79:e0:27:ca:6a:11:9d:ab:c1:78:
                    7d:48:9e:b2:d3:d1:f6:da:ee:a2:4e:46:5c:5a:78:
                    df:c6:ec:c8:f6:c1:d0:d1:1e:8f:fa:e1:9d:75:da:
                    85:87:34:99:7d:8a:55:c3:1e:23:46:bc:a4:db:dc:
                    c7:28:39:94:8e:a4:2d:84:c7:b8:29:e2:c9:30:04:
                    0f:b5:eb:c2:99:0f:d6:3a:c4:40:a4:10:bb:4b:15:
                    04:e9:8e:a4:af:70:d0:1b:bf:86:d5:04:33:70:7b:
                    ae:da:52:9d:46:a5:97:c9:c9:37:48:1f:8e:41:29:
                    c8:56:42:16:8e:7f:77:97:a2:1b:92:fe:40:d6:79:
                    f3:90:79:00:e1:63:b0:69:65:b5:89:ec:c8:6c:9c:
                    c7:92:2a:2a:74:13:08:c8:26:bd:1d:90:cc:33:ee:
                    bf:3c:c7:de:a0:bf:d0:2f:1e:3b:27:1f:f1:28:3d:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A8:30:58:10:65:91:05:6B:79:92:25:95:95:FF:5D:89:F0:00:C2
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/S6gwWBBlkQVreZIllZX_XYnwAMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.128.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:57:9b:5b:04:7c:b2:a6:11:a9:f7:3a:88:41:51:ce:7c:
         6e:a8:e3:39:b5:12:05:f5:27:c5:03:34:e1:d2:6e:cc:5b:ee:
         c0:66:2b:d7:c0:10:71:4a:64:78:a7:4b:89:34:4b:4e:50:f2:
         b1:91:1a:69:76:f5:0c:35:c4:11:00:98:3d:c8:96:71:29:7e:
         4b:4c:e8:51:88:6d:dc:70:fe:70:67:00:80:ca:f4:35:f6:7d:
         08:0c:2e:0b:d1:42:e6:aa:cc:ed:8d:22:c8:f1:7e:78:55:c7:
         44:2f:78:51:08:9a:b9:83:0b:e5:a5:84:45:eb:63:e7:2e:f9:
         78:49:f5:6c:39:24:2d:bc:c6:07:4b:8b:29:c6:aa:4b:69:2b:
         a5:90:9e:89:87:86:f3:4e:15:56:67:56:88:c3:14:8d:65:34:
         99:73:d6:73:36:92:e9:11:fb:e7:88:f4:7c:cf:91:f0:74:64:
         79:67:fb:bc:74:84:d8:2a:b7:bf:36:b5:85:9a:97:c9:2f:8d:
         e1:84:2b:3d:ca:38:00:e6:08:51:2e:c8:5a:3e:0f:af:d2:1b:
         4f:e3:8a:1f:ce:bd:af:08:1c:32:eb:b7:5f:ec:d6:c4:58:c0:
         28:1e:35:05:e5:2e:19:a1:68:97:a9:bf:39:7e:5f:7c:be:cc:
         a8:8e:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org