Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/T5FbFTFaH1gSRrYneYmsrZ-VRvQ.roa
File:                     T5FbFTFaH1gSRrYneYmsrZ-VRvQ.roa (raw, json)
Hash identifier:          uheo2CsWkvIZ6kXaJOIou0o5LxWku0dIZ9hXpXok1jM=
Subject key identifier:   4F:91:5B:15:31:5A:1F:58:12:46:B6:27:79:89:AC:AD:9F:95:46:F4
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       A5
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/T5FbFTFaH1gSRrYneYmsrZ-VRvQ.roa
Signing time:             Tue 01 Feb 2022 01:31:53 +0000
ROA not before:           Tue 01 Feb 2022 01:31:53 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        61.211.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:53 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=4F915B15315A1F581246B6277989ACAD9F9546F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:dc:69:cd:5a:a9:a0:0c:64:35:97:80:0f:
                    ac:23:57:0c:e5:33:5b:00:63:3a:b7:9e:d1:94:a1:
                    3d:25:b6:9a:8b:0a:5e:28:b8:eb:ef:58:57:01:d0:
                    a1:2a:80:c8:ea:d5:1d:9e:1d:82:0e:0f:e1:2d:c0:
                    31:f9:08:52:67:44:97:32:0a:95:8a:43:c3:df:a4:
                    a7:d3:0e:07:7d:6f:a9:e8:a0:fa:49:9d:2f:a0:e2:
                    db:46:e5:46:e8:dc:4a:b9:ca:a3:fb:1f:ce:46:21:
                    dc:f5:81:9c:05:2f:b7:53:c3:e3:66:a5:1a:10:78:
                    86:bc:15:df:85:84:bc:32:62:87:2b:99:89:cc:8b:
                    b8:78:08:c1:b8:6f:b8:30:09:31:f9:ee:e7:fd:f6:
                    41:e9:cd:72:12:13:ee:7a:fa:03:1c:cc:73:b7:c1:
                    54:95:a8:6a:0d:f3:d0:a5:6b:39:e5:19:2c:3c:bb:
                    96:6e:8b:01:a4:aa:d9:bd:c2:af:20:83:5e:0a:e4:
                    d9:6c:eb:a1:9a:42:c8:93:fd:05:e0:f0:2b:0b:30:
                    6c:a3:92:70:34:cf:99:df:6d:64:e2:07:23:c9:84:
                    14:dc:fb:e4:9b:5a:eb:e9:fe:84:db:a5:e4:17:c7:
                    64:6d:ec:d0:64:cd:c1:a8:47:65:df:b9:2e:8b:65:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:5B:15:31:5A:1F:58:12:46:B6:27:79:89:AC:AD:9F:95:46:F4
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/T5FbFTFaH1gSRrYneYmsrZ-VRvQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:51:77:87:f9:c4:00:09:d5:fc:53:70:c6:d8:6a:55:2b:81:
         a8:98:cc:5c:f6:f3:f4:b2:e7:55:8a:be:2b:8a:76:d7:63:ca:
         93:84:cd:15:be:ff:58:64:bf:e1:56:e8:6e:aa:31:81:78:26:
         0e:30:8c:80:64:f2:22:71:2b:be:cd:f4:18:49:75:a9:53:cb:
         5e:d9:e1:14:99:c5:ce:0e:b5:cd:9f:57:df:a3:dc:d7:e7:aa:
         7e:5e:1d:98:ab:63:36:5c:55:a5:5d:4c:47:23:56:14:bd:04:
         73:47:cf:9e:d2:3c:48:04:3e:c7:41:e7:a7:eb:56:9a:ed:f1:
         7f:01:af:37:69:7e:a1:03:a4:e3:4e:41:e2:ce:51:3b:35:79:
         3e:f5:2b:07:90:d2:dc:4d:32:66:9a:4b:cd:b0:a5:c1:1c:04:
         c7:92:04:1d:03:92:79:c1:ba:e7:4e:a7:8f:d9:6b:e1:9a:04:
         d6:e8:25:d6:fa:96:ff:8d:f7:7a:ac:71:9e:6c:00:14:aa:51:
         c7:f9:49:2a:cb:9b:4f:d3:6e:08:db:7b:68:0f:41:ac:51:40:
         c1:68:d0:2f:05:e6:c5:3f:59:ff:36:f8:40:ec:c0:b0:f8:9b:
         be:af:7d:99:12:43:08:da:37:b0:62:c1:95:f7:9e:8b:f5:50:
         26:16:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org