Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20061/gjU651DpwLzivNKoiv00d7GSEb0.roa
File:                     gjU651DpwLzivNKoiv00d7GSEb0.roa (raw, json)
Hash identifier:          CAfuFJ+0BjB7bfjZrZ/leJuZyRnO0DPU89MAz2G7tgk=
Subject key identifier:   82:35:3A:E7:50:E9:C0:BC:E2:BC:D2:A8:8A:FD:34:77:B1:92:11:BD
Certificate issuer:       /CN=72811A6F4B1F7935818F8C8794F150A772BDD7CB
Certificate serial:       05
Authority key identifier: 72:81:1A:6F:4B:1F:79:35:81:8F:8C:87:94:F1:50:A7:72:BD:D7:CB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/gjU651DpwLzivNKoiv00d7GSEb0.roa
Signing time:             Tue 05 Oct 2021 04:34:48 +0000
ROA not before:           Tue 05 Oct 2021 04:34:48 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     131161
IP address blocks:        43.222.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72811A6F4B1F7935818F8C8794F150A772BDD7CB
        Validity
            Not Before: Oct  5 04:34:48 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=82353AE750E9C0BCE2BCD2A88AFD3477B19211BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:af:f6:6c:b1:c7:e6:e1:23:6b:dc:f3:b0:
                    1a:99:7b:62:f8:5a:af:0b:45:7c:33:f7:af:1d:9f:
                    72:81:27:ab:7a:bf:66:86:d7:04:c4:4c:3b:43:1c:
                    c0:47:66:de:a8:81:55:12:b1:ea:7a:30:25:92:5e:
                    41:5e:5c:14:cf:c8:c5:7c:85:48:9f:53:9f:e7:9f:
                    b6:8d:ff:7e:99:d6:c0:0c:28:fb:64:b0:6b:fd:85:
                    98:2d:2e:0e:ac:fe:b2:1c:4b:b7:21:4c:f3:16:cc:
                    26:d3:3f:cb:72:38:71:53:70:85:bb:f3:ac:10:27:
                    21:ce:1e:76:0a:51:4f:b3:9a:82:d6:35:75:09:5e:
                    db:fb:3e:5d:46:42:57:0e:0d:55:aa:4f:1d:83:d3:
                    10:b2:22:f4:22:9a:74:ea:6b:2f:e8:07:9f:c5:09:
                    bf:90:2e:75:8d:b4:df:fb:e6:ff:f6:05:ec:21:27:
                    35:d3:5d:3c:0e:a5:00:65:82:15:5b:04:b6:05:bf:
                    d8:ea:85:e9:c0:d4:92:8e:68:2a:04:73:40:cb:59:
                    33:41:b6:9f:e4:c7:d1:72:51:2f:c3:25:52:56:cc:
                    2b:3d:e6:d4:96:1b:5d:7d:e3:3a:30:81:45:ba:74:
                    10:ae:31:ee:de:55:2b:9b:3d:b8:d4:9f:09:a2:1c:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:35:3A:E7:50:E9:C0:BC:E2:BC:D2:A8:8A:FD:34:77:B1:92:11:BD
            X509v3 Authority Key Identifier:
                keyid:72:81:1A:6F:4B:1F:79:35:81:8F:8C:87:94:F1:50:A7:72:BD:D7:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/gjU651DpwLzivNKoiv00d7GSEb0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.222.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:82:2f:7a:d1:95:a4:16:45:14:10:6e:20:96:db:4a:e6:
         e0:53:74:00:04:6e:e7:d3:34:36:57:e9:ac:b7:da:f7:3c:33:
         3e:37:8a:85:c0:25:27:e7:7e:f3:d2:c9:79:39:71:79:b1:1e:
         2b:6b:f4:56:c0:d5:e4:96:f2:a6:fc:14:e6:ed:e1:0a:9a:1e:
         b1:0c:3f:df:74:6b:f8:f1:92:e8:2a:f6:a7:39:d5:64:66:58:
         67:e3:e7:cb:59:47:93:a4:14:b8:9b:fb:6c:6d:8f:89:f5:e2:
         4f:72:1f:ee:e1:2c:30:31:8b:e0:d0:6e:71:ea:56:bd:6e:49:
         e7:62:14:18:5d:8e:f7:f9:71:e0:df:44:15:10:61:b6:7d:ee:
         f2:b4:bb:17:9a:2a:b1:f7:77:fc:93:93:8c:13:c9:06:df:14:
         13:e8:7f:df:b1:0a:8f:42:38:52:13:4c:f6:08:b6:bd:6b:27:
         19:7f:b7:40:4b:55:fc:0a:17:95:d8:be:4a:dc:b5:9e:3f:d4:
         c1:73:fe:3e:29:23:67:9d:36:bb:02:ff:7c:68:5c:0f:a9:4b:
         1e:61:b6:63:04:d4:4d:fe:9c:54:2d:86:7f:bf:ff:7a:6d:14:
         8a:6e:79:99:2c:a2:bf:ba:60:07:6d:42:8e:33:56:a2:6e:bb:
         e4:11:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org