Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/B4dRBF8v8miKdgtHRO30itS1iH8.roa
File:                     B4dRBF8v8miKdgtHRO30itS1iH8.roa (raw, json)
Hash identifier:          rqqAD8GHXm8ywEu4njwhK2RyI25H1ghYM9UDTER2tvU=
Subject key identifier:   07:87:51:04:5F:2F:F2:68:8A:76:0B:47:44:ED:F4:8A:D4:B5:88:7F
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       46
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/B4dRBF8v8miKdgtHRO30itS1iH8.roa
Signing time:             Tue 23 Feb 2021 08:57:33 +0000
ROA not before:           Tue 23 Feb 2021 08:57:33 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        118.236.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:33 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=078751045F2FF2688A760B4744EDF48AD4B5887F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:95:c3:6b:a0:39:d2:95:fb:2e:bb:27:9a:
                    21:81:11:33:d6:ed:27:b0:a3:9c:c6:4c:a1:9b:6b:
                    14:00:ba:40:cd:83:fb:01:08:59:b3:82:00:a2:f9:
                    24:7f:8b:f9:74:9b:70:4b:41:58:6d:97:7b:d9:4a:
                    56:5c:82:cc:6a:75:62:30:fe:10:8a:db:85:45:8f:
                    25:a1:d7:d5:d5:3f:bd:51:22:d6:c7:fe:b0:52:bb:
                    f7:4f:65:07:65:4e:08:47:cd:11:93:78:ca:e7:4c:
                    a9:ab:d3:6d:70:4c:23:07:63:b2:59:67:b7:4c:e4:
                    d9:d9:6f:23:f0:a5:6f:a7:5b:40:64:33:be:13:66:
                    0e:2b:04:f5:be:5f:64:41:4d:84:3d:1a:01:b0:dd:
                    57:d4:a8:20:dd:5d:68:93:b2:ca:a1:f4:16:72:43:
                    af:3b:cc:3f:89:a9:2f:3c:f1:d6:4b:b3:43:96:62:
                    0c:e7:b6:04:5e:55:69:e0:2a:e3:cc:21:e5:97:44:
                    a2:d2:70:0c:9a:bf:90:cf:a7:b6:58:f4:7f:5b:ca:
                    bc:ac:a9:94:12:72:2f:5b:2d:08:b0:30:00:51:b3:
                    f1:c3:50:49:c4:b8:ef:c3:eb:9f:62:d5:38:fa:94:
                    0f:1d:51:a3:28:ea:84:ff:dc:66:7d:d2:29:76:63:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:51:04:5F:2F:F2:68:8A:76:0B:47:44:ED:F4:8A:D4:B5:88:7F
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/B4dRBF8v8miKdgtHRO30itS1iH8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:43:87:e1:fc:b5:b5:23:83:da:15:0e:eb:2e:c3:50:b6:
         dd:8b:18:d6:85:66:76:9e:89:49:c0:5e:09:5c:5d:de:21:9a:
         4c:73:6a:57:44:73:3a:99:b6:56:d3:25:3c:77:a4:1b:ff:75:
         e6:9d:a0:87:88:04:df:a5:02:cf:15:da:a5:1c:a0:19:80:db:
         12:7c:ef:06:a3:55:dc:80:21:55:24:6a:ab:5c:fa:a9:62:5d:
         2c:8d:8c:d9:d5:fa:a2:49:21:be:03:d2:e5:94:cc:25:7b:31:
         1f:d1:a7:91:c2:d6:f0:76:ca:6c:bf:c8:78:bf:23:33:9c:d8:
         e5:17:e8:c8:06:6e:ae:24:d2:d2:1e:36:a8:41:b6:50:4e:5c:
         33:cd:12:dd:78:aa:f8:19:cf:d2:c1:5b:9f:ba:66:d9:2c:f3:
         66:91:e3:15:74:6d:d7:7d:1b:c7:f5:fa:54:b6:98:9b:2e:e7:
         e9:d2:87:88:5d:89:d0:47:94:44:96:1b:33:ee:3f:15:bf:aa:
         cc:da:78:c3:d0:0c:2f:6b:78:9f:61:07:c5:fc:4d:b3:3e:62:
         8d:4c:08:e4:51:23:93:fc:6c:a1:0a:a5:30:3a:a8:7c:66:d8:
         d9:5d:45:1e:78:a9:9a:84:22:a1:ad:06:09:02:71:97:42:48:
         a4:d7:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org