Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/dSLfRkSrhb3Q9GN9HjU-qv5D-nk.roa
File:                     dSLfRkSrhb3Q9GN9HjU-qv5D-nk.roa (raw, json)
Hash identifier:          fKQSM0+8BG9Ml3eGtnf46W+RLlTvhfwAxTR2uvM+WO4=
Subject key identifier:   75:22:DF:46:44:AB:85:BD:D0:F4:63:7D:1E:35:3E:AA:FE:43:FA:79
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       4F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dSLfRkSrhb3Q9GN9HjU-qv5D-nk.roa
Signing time:             Tue 23 Feb 2021 08:57:37 +0000
ROA not before:           Tue 23 Feb 2021 08:57:37 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        120.74.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:37 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=7522DF4644AB85BDD0F4637D1E353EAAFE43FA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:7d:c9:83:7d:ee:bd:f0:08:47:6e:1b:06:
                    87:7d:40:d0:8d:99:4a:8b:ed:68:e5:60:41:23:e4:
                    d1:40:18:21:ac:35:61:e8:d7:40:10:bf:94:39:ea:
                    d5:2f:85:c1:10:bd:a7:16:c8:91:c8:89:ed:79:47:
                    93:d8:cb:e4:73:01:62:7b:7d:16:12:c6:24:5e:d6:
                    e4:12:d6:32:59:f6:45:13:40:d2:97:d6:20:34:41:
                    f2:9a:db:e7:2b:b3:85:0e:c9:f6:ba:40:d7:1f:4e:
                    5f:4a:5e:cf:06:cc:88:73:16:5d:15:49:05:99:b6:
                    ed:43:38:df:bf:6e:60:20:bf:39:00:33:52:94:7a:
                    88:ef:7a:af:86:5b:57:10:19:e0:c3:d8:a4:56:1b:
                    4f:f2:c1:75:26:83:a2:6e:ba:90:05:74:bb:03:dc:
                    ca:3b:68:8d:1a:97:39:06:1c:5a:90:cd:4a:56:3e:
                    5d:7d:bb:3e:fc:3c:9b:85:36:89:a5:d5:a5:1b:fc:
                    fb:99:0a:b6:4d:c7:a3:67:22:4c:15:ad:e9:12:32:
                    75:91:b2:de:44:73:a3:bd:c5:2c:45:67:02:cc:e0:
                    7d:cb:d9:9a:f2:3b:79:5f:74:15:4f:26:e5:41:e9:
                    57:6d:d5:4e:13:85:2e:23:15:49:6b:57:7f:46:f3:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:DF:46:44:AB:85:BD:D0:F4:63:7D:1E:35:3E:AA:FE:43:FA:79
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dSLfRkSrhb3Q9GN9HjU-qv5D-nk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:de:c1:53:d0:3e:0f:dd:54:99:0d:ab:00:bb:5e:fa:d9:
         b5:43:73:1c:f3:90:9e:ea:78:d2:0e:4a:22:b0:2b:b9:6a:9e:
         fc:a8:96:46:c7:16:39:ff:20:9e:1c:fa:d1:9c:03:98:14:56:
         f6:4e:2a:82:b1:05:48:9f:a8:05:ce:72:9f:01:77:c2:72:31:
         5d:19:7c:1d:e6:1f:cb:44:9c:43:0f:ff:ed:08:bc:4f:06:85:
         b9:10:9b:de:6b:81:34:c2:f2:42:01:de:fc:49:01:69:18:30:
         c6:2e:09:24:a5:15:36:e6:ef:1d:70:8e:74:b9:f3:7b:d4:71:
         bf:d0:bb:b4:bb:e4:ca:5c:f8:8b:15:90:93:9c:12:b0:57:43:
         27:11:25:62:b9:79:dd:5f:07:5a:de:1f:13:30:a3:6f:6c:c7:
         54:3a:60:bb:d8:85:72:58:5d:76:e3:36:ce:c7:78:02:81:47:
         4d:8d:c4:18:84:5d:1e:66:62:6b:14:0d:56:52:30:72:4a:6a:
         cf:3f:30:b3:c1:0c:7f:c4:d2:26:c3:25:69:2d:f3:6a:23:06:
         f4:e2:76:10:6b:3b:6d:38:a9:d8:d2:5e:30:f1:f7:e2:6e:60:
         65:19:17:d6:f6:89:79:96:d3:08:5c:b0:b7:46:d5:cc:50:bc:
         ba:2b:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org