Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/L99iKUOWHKnX5F9r1_rpFNWTqGg.roa
File:                     L99iKUOWHKnX5F9r1_rpFNWTqGg.roa (raw, json)
Hash identifier:          GNU2zW1ofrzGKGoXSQUWRWRTCXHXguSUAeaRyuDK1QA=
Subject key identifier:   2F:DF:62:29:43:96:1C:A9:D7:E4:5F:6B:D7:FA:E9:14:D5:93:A8:68
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       6C
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/L99iKUOWHKnX5F9r1_rpFNWTqGg.roa
Signing time:             Wed 01 Sep 2021 01:30:24 +0000
ROA not before:           Wed 01 Sep 2021 01:30:24 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        153.121.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:24 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=2FDF622943961CA9D7E45F6BD7FAE914D593A868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:30:38:22:27:25:0f:5e:92:3b:be:2c:65:
                    35:6a:64:b5:05:0a:b8:70:50:59:df:e0:be:72:f4:
                    01:01:40:d1:2d:67:ea:cd:ae:8c:b4:7e:73:55:1d:
                    82:4a:15:d7:8d:2a:ec:01:dc:bb:6b:41:f2:60:51:
                    2e:26:f2:d2:ee:9c:05:bb:db:30:25:26:97:19:2e:
                    83:81:48:f7:c1:65:d1:e0:4a:0f:dc:0e:d8:aa:bb:
                    44:0b:d1:71:a5:36:89:af:38:fd:9c:f2:fa:e5:3e:
                    ad:e6:2e:1c:52:dd:e8:36:7a:a2:fe:4a:7b:ca:0e:
                    87:e0:b4:45:ca:43:b9:89:61:b0:29:00:bf:86:02:
                    50:5f:22:9e:56:c3:31:b4:fa:92:c4:0d:a5:7c:ba:
                    bb:d3:17:93:49:0a:f0:1d:b6:f2:91:50:94:06:ba:
                    99:d4:2d:94:d1:73:a5:45:8c:f1:7a:44:f4:e4:27:
                    19:86:78:4e:dd:23:3e:1b:25:ac:f3:0f:e7:36:d6:
                    3a:97:cc:ba:f4:4f:b2:e1:8c:3e:ba:a6:cd:be:fa:
                    22:8b:2c:af:b3:07:d0:6c:57:49:ca:f8:57:d5:0c:
                    80:6d:f9:5c:0e:85:60:a5:15:b5:71:39:1d:c9:ed:
                    fd:8b:bf:d7:a8:c9:93:8d:bd:f9:f7:5d:c3:9a:db:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:62:29:43:96:1C:A9:D7:E4:5F:6B:D7:FA:E9:14:D5:93:A8:68
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/L99iKUOWHKnX5F9r1_rpFNWTqGg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:e1:33:68:fe:27:3f:1d:b4:4b:35:62:af:3d:01:71:05:
         0d:3f:60:a8:77:b6:8c:7e:2c:02:60:cc:e2:62:54:1e:f0:98:
         38:ef:80:03:10:71:63:ac:11:6a:dc:f0:ee:eb:f6:06:79:8c:
         31:73:e4:70:9c:67:7a:63:46:57:a4:24:32:8b:e5:54:62:89:
         5b:ec:dd:d1:ea:dd:87:c8:49:a9:cf:61:a7:77:60:43:29:69:
         5c:68:51:f4:68:4e:ce:55:9e:0f:12:8c:41:ed:bd:d1:46:5b:
         be:98:ec:be:b9:a7:2a:36:8f:9b:4f:ce:c5:0c:8b:6e:b5:2d:
         1f:86:ec:d9:9b:e2:b4:28:f9:4e:fd:8e:0d:04:b5:06:02:44:
         34:45:65:ea:5e:1e:df:f9:f6:95:d6:e7:02:19:30:b8:cf:98:
         87:22:6f:a5:2c:0f:b6:fb:83:6d:fe:3d:8d:36:c9:d0:7e:99:
         0e:48:00:f1:a6:4a:cb:da:09:47:28:ae:c4:8c:9c:d4:5f:a2:
         f0:55:53:0e:d3:8e:ef:25:7c:b7:36:0f:5b:f0:c8:91:2f:7f:
         45:2b:db:89:85:55:76:14:95:ed:ca:ef:38:ae:8b:f2:5a:e5:
         5a:c0:35:69:9c:75:b0:84:bd:3c:c2:6d:34:59:0e:07:77:9d:
         fd:9e:d7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org