Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/lPyUPyO0w9vK9e7dB2dzfR_fGUk.roa
File:                     lPyUPyO0w9vK9e7dB2dzfR_fGUk.roa (raw, json)
Hash identifier:          pt1W8hKQMFJocer3x8t76SZ9vuHD3XUkcFZr9Rut99M=
Subject key identifier:   94:FC:94:3F:23:B4:C3:DB:CA:F5:EE:DD:07:67:73:7D:1F:DF:19:49
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       1B
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/lPyUPyO0w9vK9e7dB2dzfR_fGUk.roa
Signing time:             Sat 02 Oct 2021 08:41:57 +0000
ROA not before:           Sat 02 Oct 2021 08:41:57 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     23816
IP address blocks:        203.95.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Oct  2 08:41:57 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=94FC943F23B4C3DBCAF5EEDD0767737D1FDF1949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:b8:79:8f:6a:3f:13:79:11:b1:00:36:19:
                    81:df:59:f6:47:ac:1b:aa:b5:2a:4f:fe:f8:5e:ab:
                    63:12:79:ec:e2:62:73:88:b2:42:db:ae:04:1d:c0:
                    c5:7e:35:07:18:9d:3d:6c:28:11:18:bb:03:f1:9e:
                    fb:9b:35:a4:e7:5e:bf:7c:83:6f:1e:4e:11:03:0d:
                    94:06:e6:ac:5f:db:2f:6c:ff:1b:88:e6:c9:24:ad:
                    9f:0a:ee:05:91:4a:2b:59:e9:5a:d3:5f:ff:bf:a6:
                    4f:e2:6d:4e:a5:93:33:b0:79:21:46:93:78:a7:cc:
                    3a:fb:07:83:7e:83:d9:51:5a:d6:08:6c:19:8a:81:
                    b5:96:9d:b3:24:11:aa:bf:47:4d:6e:c8:21:38:64:
                    23:58:9c:65:8e:49:04:54:f3:19:71:cd:74:7a:ec:
                    aa:2e:df:5b:fa:2d:2e:83:7c:98:89:3c:04:00:81:
                    7b:dd:9f:fc:67:a3:d9:39:16:0f:50:f4:6d:3c:e8:
                    67:7c:c4:29:0b:8b:5f:06:45:de:6f:d1:7f:bf:03:
                    70:81:1c:48:d3:6c:c7:7e:be:79:4e:88:f2:a5:37:
                    59:0a:bd:57:a0:59:b1:dd:b4:d7:4a:8b:cd:77:e6:
                    73:bd:39:41:19:43:30:b0:77:97:f3:64:8b:23:60:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FC:94:3F:23:B4:C3:DB:CA:F5:EE:DD:07:67:73:7D:1F:DF:19:49
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/lPyUPyO0w9vK9e7dB2dzfR_fGUk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:18:2f:cc:a8:a6:11:fa:ca:a0:b4:90:d9:f9:fe:0e:2a:2a:
         c7:f1:00:96:e1:50:e3:91:9d:13:cd:56:d4:86:31:3a:39:dd:
         c1:e6:d9:6c:cf:4e:75:39:83:c3:58:3d:f5:e2:ce:88:aa:6f:
         29:11:ce:ef:1c:c8:19:f4:d7:5c:c1:70:3a:a8:82:50:ae:aa:
         f9:ae:b9:ed:c0:27:f0:4c:c1:e8:34:77:90:41:7a:79:3d:45:
         03:94:3f:ae:d4:b5:2c:5a:92:4d:c7:68:ab:f6:81:55:73:20:
         79:59:c8:c7:f4:4b:d5:66:19:0b:0d:3e:91:a6:ac:48:c1:5d:
         06:67:a9:fb:da:ac:c9:2e:ae:7a:b2:3f:80:da:7a:11:5e:75:
         9b:e9:63:e1:6b:14:dd:83:fd:b0:34:93:20:c3:2c:d1:f8:1b:
         7d:8e:c0:b2:a4:a0:70:53:6e:a9:27:29:16:33:5b:e2:5d:31:
         1d:d2:a0:d1:ad:14:2b:64:cf:f5:bd:18:d6:e0:c5:f4:47:4e:
         46:a7:33:58:fb:1d:34:96:68:e8:0c:1e:c2:e9:43:18:b0:74:
         2c:d9:74:c3:24:0e:0b:21:2a:ec:22:60:83:ab:a6:53:a9:99:
         86:e1:39:64:ca:0e:f2:1a:c8:17:ca:b8:a2:77:c0:da:07:41:
         dd:d1:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org