Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4yQPNvmg_zhled-5KhDWAoQQN7Y.roa
File:                     4yQPNvmg_zhled-5KhDWAoQQN7Y.roa (raw, json)
Hash identifier:          L79DgfHeb9XeHlXuxPboyyrtCKLyQSt9oOha9ibZ5kg=
Subject key identifier:   E3:24:0F:36:F9:A0:FF:38:65:79:DF:B9:2A:10:D6:02:84:10:37:B6
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       4C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4yQPNvmg_zhled-5KhDWAoQQN7Y.roa
Signing time:             Tue 23 Feb 2021 08:57:36 +0000
ROA not before:           Tue 23 Feb 2021 08:57:36 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        58.87.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:36 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=E3240F36F9A0FF386579DFB92A10D602841037B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:74:ef:a5:c6:1a:79:a5:c9:4f:cc:64:0f:
                    6e:61:ba:ce:dd:85:f3:d4:0b:e8:44:04:20:38:8c:
                    45:21:5a:96:c1:01:4c:28:a1:7f:38:75:49:fd:fb:
                    b0:b8:91:39:8a:ec:19:50:eb:3e:d0:7f:43:f2:b2:
                    d7:a5:d2:31:90:d6:13:16:2e:0b:3c:e3:a4:5d:64:
                    b8:3d:40:9a:8d:a1:c2:f2:13:62:06:3b:56:1d:44:
                    ac:d7:9c:ad:05:60:f4:ec:00:58:e1:86:06:9c:fc:
                    9a:8e:9c:ef:a6:3c:0b:17:2d:68:00:d0:e9:b8:c8:
                    28:16:97:99:7c:ee:a9:18:bc:85:0a:20:f3:35:90:
                    3a:00:e5:18:ff:f4:37:ee:a1:85:1f:29:35:2a:c8:
                    cf:cf:3a:79:0d:83:a5:00:3b:68:59:e4:79:84:56:
                    f4:78:88:c0:ae:ee:77:52:30:4e:d8:d5:69:be:98:
                    e5:55:9d:ae:7e:53:02:95:ae:30:b1:32:0c:d3:fe:
                    38:45:69:58:78:91:1d:41:83:86:1e:46:a3:57:80:
                    5a:c8:f1:7a:0b:1a:c3:39:d7:94:44:f3:2d:b4:7d:
                    55:6a:81:7b:c9:45:39:58:a9:eb:74:5c:df:ab:15:
                    b7:7e:86:57:35:06:c6:7b:cc:b2:bb:51:73:17:29:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:0F:36:F9:A0:FF:38:65:79:DF:B9:2A:10:D6:02:84:10:37:B6
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4yQPNvmg_zhled-5KhDWAoQQN7Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.87.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         73:04:31:a8:20:08:c2:ae:b6:5f:9f:74:25:75:ad:28:64:c9:
         24:2b:4b:c9:7c:1f:5c:f4:85:ca:3b:a1:a6:63:27:fc:d7:b5:
         b3:3f:87:7f:7d:85:5f:4d:4f:30:9c:96:ad:3a:0a:15:ad:60:
         d9:21:77:d1:9b:ae:c2:1d:de:09:fc:2f:36:90:33:17:99:78:
         9e:f6:81:e4:b6:34:fb:f6:9a:41:70:64:0c:66:f5:a6:ea:69:
         e2:47:ba:2c:f4:8a:3e:32:0c:8a:c8:91:9a:ea:eb:aa:2b:04:
         41:8e:a8:d0:94:3d:8e:2e:1c:d4:ac:80:34:1f:2a:ce:79:17:
         75:97:2a:c6:7c:c6:2b:98:47:1f:c8:27:87:e7:34:57:79:7a:
         a6:1e:de:e3:85:dd:e8:da:8f:75:4b:85:7a:8f:01:4a:58:5a:
         a4:1e:f7:52:58:fd:eb:ce:71:24:d7:6e:ac:41:c2:96:ed:aa:
         29:ca:3e:89:7c:50:5a:8f:3e:f8:b4:18:3e:ae:2c:5e:0b:4b:
         3f:07:8f:a1:c8:f2:d2:4d:3c:71:25:61:ab:f8:dd:0b:da:cc:
         44:29:27:98:3b:8d:a4:ea:9e:6f:f5:f0:f6:d3:62:bd:b2:9c:
         17:67:1a:8d:fb:9d:74:bb:e8:95:fb:72:6b:45:d8:4f:f3:d5:
         42:54:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org