Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Dy1WGCfWE51VFG-NlcwsBk621T4.roa
File:                     Dy1WGCfWE51VFG-NlcwsBk621T4.roa (raw, json)
Hash identifier:          GdfXa8H0IBMQYZQ//4Hz4VaGy1OnLUzBn1+mNDO5thc=
Subject key identifier:   0F:2D:56:18:27:D6:13:9D:55:14:6F:8D:95:CC:2C:06:4E:B6:D5:3E
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       81
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Dy1WGCfWE51VFG-NlcwsBk621T4.roa
Signing time:             Tue 01 Feb 2022 01:31:14 +0000
ROA not before:           Tue 01 Feb 2022 01:31:14 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        210.250.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:14 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=0F2D561827D6139D55146F8D95CC2C064EB6D53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:a4:e0:f1:90:71:c7:98:1c:1c:8d:d0:86:
                    f0:96:91:77:7e:f2:8c:47:c3:36:83:29:18:2e:73:
                    3f:fd:57:c3:42:48:cd:c4:d0:01:71:32:a0:36:ab:
                    bd:c9:47:b4:c7:21:ff:c6:c6:65:58:b3:52:b5:5e:
                    96:71:3b:03:3d:f4:47:e8:e0:8c:90:03:f0:15:ad:
                    36:16:2f:48:76:d2:fe:41:3a:74:0c:a5:fb:0a:e4:
                    67:89:7b:9d:d2:dd:2d:cc:c4:d5:51:d8:31:f4:f9:
                    33:b3:4a:18:2a:86:6f:07:72:9e:ff:48:4b:8d:99:
                    50:08:8d:03:7f:ee:4d:43:e3:05:db:69:f5:d9:7e:
                    b4:bb:89:f0:9d:b4:7b:98:8a:ff:d1:a6:80:25:e8:
                    32:0f:fe:b7:85:c1:64:56:fd:fc:86:8e:d8:a7:5c:
                    30:c7:5a:05:ac:c7:3e:9d:66:4b:aa:90:68:d8:84:
                    82:37:43:1e:e2:1a:8c:ba:ea:ff:ac:73:e9:1a:de:
                    f5:6e:15:a0:93:b0:14:c8:7a:7d:45:fe:c9:37:85:
                    5a:aa:ce:98:a6:a5:55:b3:50:f1:91:24:2c:91:02:
                    b2:90:c2:5f:88:17:3e:7a:69:71:cb:fd:db:34:2e:
                    33:eb:fc:8d:7e:6b:f8:78:91:36:19:58:2b:2e:b0:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2D:56:18:27:D6:13:9D:55:14:6F:8D:95:CC:2C:06:4E:B6:D5:3E
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Dy1WGCfWE51VFG-NlcwsBk621T4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:92:46:2a:44:96:6f:71:bd:fa:70:fe:dd:3c:2e:5d:c6:
         d6:97:5b:72:54:6f:3e:a5:00:8b:93:49:8a:b4:8e:16:e8:bf:
         fa:2c:0e:5a:6d:29:ae:75:b2:c6:a3:ae:7f:0a:34:22:73:31:
         85:47:ed:20:8e:df:e0:36:45:9c:98:db:90:77:56:5e:db:f9:
         9d:e5:af:60:e0:91:a9:4a:62:72:da:b8:60:7f:b8:c6:61:2f:
         8e:45:b9:5d:35:11:e4:c0:c6:dc:24:ba:5f:3d:99:85:fb:74:
         da:1d:6b:5b:41:7f:74:76:32:8a:f1:75:39:c3:f5:62:fa:7e:
         1b:e0:3d:53:d8:a2:e8:44:d7:51:d0:e5:7d:47:3f:8a:7a:f6:
         d1:5d:3f:cf:99:9c:a4:42:fa:2b:61:b6:75:dd:43:32:78:01:
         ab:fd:1d:91:be:cd:99:0d:a0:ae:8e:25:3e:ba:0c:17:d1:ee:
         b0:71:d5:99:27:32:0c:a5:65:e0:b7:78:20:2c:ed:65:a6:e2:
         a3:77:01:b6:29:f6:3e:82:39:9e:a4:29:1e:f2:c6:af:18:04:
         e8:9b:20:66:11:c5:8f:49:c8:79:72:16:b5:5c:93:8c:a9:89:
         40:1d:fd:5a:dc:bb:0b:d5:86:e2:98:8f:0c:26:c8:a0:1b:07:
         21:2f:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org