Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/vFu7wtrz2iLvnRxreI8-udky6wQ.roa
File:                     vFu7wtrz2iLvnRxreI8-udky6wQ.roa (raw, json)
Hash identifier:          oKpFUrGltNX1TDP4jKRoydPprPaytSbGL+GOqywd/hw=
Subject key identifier:   BC:5B:BB:C2:DA:F3:DA:22:EF:9D:1C:6B:78:8F:3E:B9:D9:32:EB:04
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       86
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vFu7wtrz2iLvnRxreI8-udky6wQ.roa
Signing time:             Sat 08 May 2021 04:05:45 +0000
ROA not before:           Sat 08 May 2021 04:05:45 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        211.11.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:45 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=BC5BBBC2DAF3DA22EF9D1C6B788F3EB9D932EB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:0d:7e:50:b9:ef:d3:67:2e:82:6e:23:62:
                    b6:a9:55:a8:8e:55:3b:46:06:69:69:27:fd:0f:72:
                    ba:c1:6e:4b:fd:8c:3f:9a:b6:a1:6b:ac:ec:1f:57:
                    d1:b2:5f:60:77:69:db:f9:b9:ac:95:d0:33:2f:64:
                    8b:d3:c5:47:ce:8d:93:25:37:f8:85:8a:58:20:3e:
                    f9:a2:5c:5e:ed:2e:e4:86:d7:17:c9:ef:7d:4f:05:
                    3b:3f:ff:21:85:98:e2:7e:bd:91:62:9c:ef:6d:46:
                    ad:e7:65:56:bb:3b:3c:5b:8f:87:bb:ea:d4:6f:b0:
                    99:1d:78:5c:75:4a:78:34:21:fc:63:ef:8a:d5:8f:
                    47:94:31:fd:91:c2:c2:f4:a1:22:23:5b:9c:cb:d1:
                    9c:79:39:ad:0a:17:5a:73:5c:25:5c:dd:3e:2c:d7:
                    e9:42:95:10:e1:1a:de:94:f0:20:6b:81:33:53:d9:
                    7e:1b:26:5b:b6:92:8b:11:fb:62:19:48:a5:51:32:
                    45:64:f5:63:8f:b5:5d:57:d4:d4:2a:62:23:f4:15:
                    e1:38:9d:34:dc:ae:ab:4d:1c:c1:10:8c:4b:e4:ec:
                    55:1f:fa:1e:f8:31:95:46:44:e8:72:b7:29:11:43:
                    53:cb:cf:e1:a8:bb:84:c5:08:4d:04:4c:99:b9:63:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:BB:C2:DA:F3:DA:22:EF:9D:1C:6B:78:8F:3E:B9:D9:32:EB:04
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vFu7wtrz2iLvnRxreI8-udky6wQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:87:e1:13:37:71:d6:cd:7a:38:67:bf:13:6c:55:b0:99:
         ed:67:48:02:ff:09:7b:c4:21:8b:b8:77:26:17:09:f9:de:a2:
         e6:96:03:09:70:1b:f2:32:75:5e:61:7c:ea:83:82:98:74:f8:
         7f:b6:52:50:8e:cd:48:d9:5b:08:23:32:ec:cf:ff:eb:86:c2:
         7c:ec:59:ef:eb:57:23:b3:08:e3:9d:10:7f:78:75:41:b0:a4:
         46:dc:25:5a:0d:18:db:1a:71:c2:b7:ad:7b:a4:98:bf:22:f7:
         e8:43:83:6e:f8:f3:ff:e5:d3:49:60:ed:c8:f7:6d:eb:71:e9:
         e5:16:ea:55:d6:c8:4d:81:73:86:8d:14:ef:53:c1:23:81:57:
         91:6e:66:3c:d9:49:52:06:5a:a2:75:67:2d:6d:53:47:1e:17:
         72:f0:77:7c:36:4d:37:54:f9:38:db:73:82:8e:e9:33:40:fb:
         e7:8d:85:5f:ef:74:13:52:27:3b:dd:6d:54:99:db:90:df:33:
         20:96:9b:99:9d:92:27:72:41:62:ce:4b:3d:26:1d:de:60:c6:
         04:fc:2f:74:81:2a:4d:cf:36:c6:34:14:c2:99:e4:73:1a:1f:
         df:71:66:3b:57:60:af:49:e8:66:fd:dc:5e:d2:78:cf:b3:a5:
         10:cf:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org