Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/uFqY9T08wVHdoJg9_j2aO9xXbjs.roa
File:                     uFqY9T08wVHdoJg9_j2aO9xXbjs.roa (raw, json)
Hash identifier:          LErZWOgUjxIh74ovHIDXlb18xGsEBOXqZiCJB90NUIw=
Subject key identifier:   B8:5A:98:F5:3D:3C:C1:51:DD:A0:98:3D:FE:3D:9A:3B:DC:57:6E:3B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       72
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uFqY9T08wVHdoJg9_j2aO9xXbjs.roa
Signing time:             Sat 08 May 2021 04:05:40 +0000
ROA not before:           Sat 08 May 2021 04:05:40 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        118.0.0.0/12 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:40 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=B85A98F53D3CC151DDA0983DFE3D9A3BDC576E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:14:20:3c:d0:f8:88:01:21:7e:d8:38:ea:
                    99:0a:73:c8:59:6a:06:91:86:0e:59:63:b5:a3:d3:
                    53:5e:17:4e:ec:6a:1b:87:76:ac:5f:7e:3e:b0:80:
                    d9:85:ed:4e:86:d1:f1:e8:f6:c9:f2:29:90:07:49:
                    42:cc:31:6b:2f:91:99:71:8b:11:17:81:34:a9:f6:
                    e0:e4:30:38:2a:84:cf:1d:e1:20:ba:cf:a3:cc:a7:
                    14:d9:65:60:2a:c5:64:b7:89:b0:26:00:2d:cf:65:
                    58:dc:10:13:2c:e6:49:ec:45:20:34:d9:88:b3:71:
                    e7:15:46:5e:94:ad:24:e4:98:40:0c:eb:a5:17:aa:
                    a0:3d:15:91:5a:e4:8a:42:29:a2:0e:bd:05:bc:18:
                    3e:44:6f:dd:e6:bb:73:a2:c7:6a:76:4f:68:06:9d:
                    be:9e:b5:f2:2c:27:93:52:b6:2e:b0:ad:7f:44:79:
                    fc:9a:9a:68:c8:88:d9:5d:d7:11:f6:05:7d:b3:f6:
                    1b:e1:c0:7e:0f:0a:75:d3:34:e0:01:01:bf:b1:af:
                    5f:3a:86:ff:03:62:74:7b:8b:64:5e:85:92:6f:f1:
                    b1:ca:c6:33:dc:9f:af:e3:ad:b1:76:66:68:dd:7a:
                    37:c0:4d:1b:57:75:1e:93:61:1c:3c:80:a9:45:9c:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5A:98:F5:3D:3C:C1:51:DD:A0:98:3D:FE:3D:9A:3B:DC:57:6E:3B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uFqY9T08wVHdoJg9_j2aO9xXbjs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.0.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:04:0e:b3:6c:ac:d1:64:b8:2c:8d:52:c3:8a:64:9b:ed:
         e6:ed:c0:af:92:6a:ea:c2:c3:91:c5:ba:6f:4a:e9:00:19:67:
         13:ee:7b:2a:3b:8e:ba:3a:ed:3c:e8:37:30:f6:fc:e2:7e:7d:
         95:73:00:be:6b:7b:36:a1:1b:b7:21:64:92:aa:d1:70:1b:7c:
         94:22:be:04:8b:02:48:e4:83:c1:36:32:8f:9e:19:48:02:0a:
         83:f3:c9:49:6b:a6:29:ea:d0:9d:35:27:04:41:26:3a:dd:fc:
         4a:af:06:c7:e8:d2:60:96:90:bb:67:34:3e:36:b7:54:91:f2:
         f1:25:2a:1c:d3:73:96:d8:40:60:6b:31:0f:fc:41:5b:c8:9f:
         08:61:6e:48:0b:e0:ff:d7:6b:b3:88:da:85:d9:64:46:90:12:
         93:c7:f7:0d:28:6b:70:00:1f:62:0e:dd:90:93:8a:fc:3d:a7:
         a4:c4:40:c2:2e:87:19:a4:aa:06:91:e8:00:04:aa:c0:25:27:
         bf:75:63:6b:40:5b:93:5a:95:84:32:e5:20:a2:5b:b6:58:dc:
         28:ee:41:ae:48:1b:9f:69:bf:a0:e9:8c:cf:f8:14:fd:53:0d:
         a2:83:f8:34:5a:7d:cc:c0:06:8d:d7:24:f4:81:9c:a1:70:00:
         c4:2c:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org