Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/iNPU93jXnjFGEk7iXIEki5__D2c.roa
File:                     iNPU93jXnjFGEk7iXIEki5__D2c.roa (raw, json)
Hash identifier:          zLWJblRV/Fn8PH4emkeLicpqGQhEDc1S79lQuMCeP9M=
Subject key identifier:   88:D3:D4:F7:78:D7:9E:31:46:12:4E:E2:5C:81:24:8B:9F:FF:0F:67
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       68
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/iNPU93jXnjFGEk7iXIEki5__D2c.roa
Signing time:             Sat 18 Sep 2021 06:37:56 +0000
ROA not before:           Sat 18 Sep 2021 06:37:56 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7530
IP address blocks:        210.231.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 18 06:37:56 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=88D3D4F778D79E3146124EE25C81248B9FFF0F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:ba:19:de:d9:c8:d2:8e:7c:91:94:e2:98:
                    17:74:c2:94:f2:86:b8:47:32:bf:7d:a1:03:3b:b7:
                    25:5a:c1:97:b2:43:19:36:59:66:80:9d:d3:95:d5:
                    f1:ca:ea:6f:ce:b9:c4:99:54:25:f2:c3:07:d4:72:
                    a1:6f:c2:e0:ef:26:fa:4f:e8:96:08:b7:88:21:5e:
                    68:d0:0d:ed:bd:96:4c:ab:5d:03:8b:d6:f7:7e:92:
                    86:a9:74:88:4d:a1:55:a4:76:db:37:4d:96:3d:d2:
                    48:2e:bf:d9:99:b7:cd:ee:4c:85:7f:18:49:ea:f1:
                    5a:7e:74:54:72:a7:a8:90:30:22:ad:03:5a:17:a9:
                    e9:40:fb:e8:67:3b:86:59:8b:90:1c:4d:4d:79:76:
                    3c:ab:c0:d8:db:b4:90:6e:75:a0:fa:69:d5:3a:9f:
                    a4:e7:84:90:13:c5:12:a7:36:a3:6e:b7:b2:61:93:
                    44:66:58:38:e3:3b:60:0c:29:9c:7d:43:2a:66:8c:
                    d4:65:60:cc:a9:2e:6a:5c:bf:00:32:7c:93:2b:73:
                    f8:30:e7:90:c3:df:3f:90:3c:8c:8d:73:b9:85:39:
                    b8:ad:0e:70:53:6c:b8:b5:0d:92:60:a0:f5:ef:d4:
                    0e:9a:cf:3b:95:92:45:da:9f:da:0e:11:11:f2:4d:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:D4:F7:78:D7:9E:31:46:12:4E:E2:5C:81:24:8B:9F:FF:0F:67
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/iNPU93jXnjFGEk7iXIEki5__D2c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:e7:ae:de:b3:08:31:f7:1d:ed:39:9f:ad:e6:cc:5c:1e:
         be:f1:93:a9:7e:f7:cc:6a:be:85:ea:d9:3d:5f:9e:3c:90:6d:
         21:c8:67:50:9d:59:68:5c:9a:a8:f2:67:2b:4d:2d:c8:c4:f5:
         12:20:98:6f:f3:c9:93:8e:98:fc:6e:d8:f9:ba:0a:6b:8e:38:
         aa:13:55:6e:e5:ed:85:ba:3e:16:88:12:69:c0:52:95:ad:e6:
         67:99:ac:98:e4:bf:a4:05:f7:85:67:9d:1b:68:f1:e0:96:50:
         4d:86:77:28:81:5a:10:c4:51:7c:c3:1f:8d:86:d5:2e:e4:34:
         0d:fb:6b:ba:89:23:72:0c:c9:13:95:5c:26:31:2c:2d:db:b3:
         dd:c2:51:bf:f2:61:19:19:96:6e:19:1d:f9:f4:70:62:a3:10:
         31:4f:d3:d8:62:9f:da:6f:c7:be:75:d3:70:1b:d8:ac:bb:a2:
         36:5c:dd:cd:ce:a7:91:64:3b:f3:b8:ce:05:25:1e:4e:0a:8c:
         35:9a:d1:24:6b:b9:87:bd:50:ae:b8:6e:ed:47:3a:7b:85:a2:
         de:56:f3:36:5a:2c:98:04:14:27:20:8b:b4:9c:da:e6:af:4a:
         7e:97:60:4b:03:58:72:17:1b:f1:75:d5:bb:d2:c9:58:a5:da:
         91:26:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org