Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/UA03W27CbzA7TvTfDAYGeWCmvEI.roa
File:                     UA03W27CbzA7TvTfDAYGeWCmvEI.roa (raw, json)
Hash identifier:          qTzIENXjmew7J3DM0wNOjBB2f4I3fdMQkTcFMP4vwbk=
Subject key identifier:   50:0D:37:5B:6E:C2:6F:30:3B:4E:F4:DF:0C:06:06:79:60:A6:BC:42
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       13
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/UA03W27CbzA7TvTfDAYGeWCmvEI.roa
Signing time:             Mon 01 Nov 2021 01:28:57 +0000
ROA not before:           Mon 01 Nov 2021 01:28:57 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        2001:300::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Nov  1 01:28:57 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=500D375B6EC26F303B4EF4DF0C06067960A6BC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:50:a1:0e:0a:07:fa:46:24:41:82:79:45:
                    bc:73:75:5c:d3:8a:15:2b:15:7d:5c:a1:dd:01:44:
                    94:d2:3e:d3:1c:24:15:9d:19:76:61:32:30:60:4b:
                    78:35:e9:5c:c4:11:c8:d4:56:ca:c8:ac:d8:77:42:
                    f2:74:db:f9:1d:f2:55:68:d6:39:10:cc:72:6e:54:
                    a6:ee:c2:98:4c:65:d6:45:bf:73:35:2a:88:0e:31:
                    0e:47:f5:8a:7d:fc:a7:2f:c9:c0:4b:2c:c6:88:c8:
                    e5:57:c8:16:e9:50:c5:42:c9:6e:88:88:4a:7d:87:
                    66:05:cc:e0:cf:28:e0:1b:77:99:a4:7b:c0:e6:ca:
                    eb:a6:4e:96:dd:c2:06:f8:37:9d:48:b6:85:05:b0:
                    8b:95:96:94:b0:d0:cf:5e:7f:76:3f:fb:ac:75:a0:
                    1c:9e:fc:3a:c2:b2:3d:98:4d:12:ce:35:ac:40:f8:
                    65:74:1a:35:b5:b8:ee:b3:3d:41:34:f9:5d:bb:1c:
                    4f:81:d2:42:76:21:d9:c9:3c:4f:fd:58:4a:d8:9a:
                    28:cb:50:4c:ae:eb:71:5a:55:7d:2e:9c:f6:91:aa:
                    41:56:2f:ea:cd:d1:30:c8:71:01:40:92:49:00:fb:
                    40:44:1d:a0:f5:73:49:64:0f:d3:62:1f:27:c1:db:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0D:37:5B:6E:C2:6F:30:3B:4E:F4:DF:0C:06:06:79:60:A6:BC:42
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/UA03W27CbzA7TvTfDAYGeWCmvEI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:9b:4e:1d:55:c5:f9:2d:01:22:1e:7f:5b:f0:33:a3:4e:57:
         9b:13:5f:23:ac:61:41:9f:e9:5e:4b:8f:a6:4f:59:cb:f9:ac:
         83:ff:39:46:c6:46:92:f1:b1:5f:a7:a3:f8:ae:70:d6:c8:f4:
         2b:d7:0f:e8:63:05:ba:4b:e9:7e:da:b7:83:31:52:dd:bd:5a:
         aa:c6:b2:cb:50:b6:fd:c6:80:77:d0:a2:60:e8:a6:a3:9d:0a:
         57:45:2e:a8:8c:f4:00:ef:1f:1a:31:12:55:88:2c:b1:8b:89:
         ff:7a:ea:43:ad:ba:cc:eb:25:44:33:4a:1d:06:10:b3:74:64:
         51:5f:01:53:55:ef:53:7e:4e:66:73:99:f7:61:c6:28:60:02:
         10:43:77:6b:4f:bf:d1:28:b0:c4:55:ef:d4:05:f3:ba:5f:a3:
         f9:c1:da:2d:14:c9:a8:8b:da:85:27:56:1a:25:5b:b4:2d:0e:
         86:c3:af:94:1d:27:f8:49:8f:64:f4:41:d4:61:d5:51:a8:57:
         47:41:ab:5c:ce:df:de:b3:2a:60:d7:a0:bd:41:19:3a:de:c4:
         bb:b0:b9:f9:e3:8e:19:0d:c0:50:22:4a:21:2d:59:6b:bd:7d:
         b2:57:90:20:09:e5:b8:2e:b2:8a:ad:d2:85:a6:34:00:81:8e:
         64:b9:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org