Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/rC1Z0ALjkt60EPISDoPeY9LASoM.roa
File:                     rC1Z0ALjkt60EPISDoPeY9LASoM.roa (raw, json)
Hash identifier:          8aqQERg5ldFHWYXckL9uF1pt4l7HAdE5Ivp8guea+58=
Subject key identifier:   AC:2D:59:D0:02:E3:92:DE:B4:10:F2:12:0E:83:DE:63:D2:C0:4A:83
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       99
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rC1Z0ALjkt60EPISDoPeY9LASoM.roa
Signing time:             Tue 01 Feb 2022 01:31:24 +0000
ROA not before:           Tue 01 Feb 2022 01:31:24 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        116.67.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:24 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=AC2D59D002E392DEB410F2120E83DE63D2C04A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:f5:c9:ce:5e:33:62:f9:6c:65:7e:0e:eb:
                    db:ad:41:60:b8:19:ab:dd:b8:aa:eb:10:df:b5:8a:
                    2a:cb:2b:97:a3:6f:01:f6:d6:8c:3c:db:17:b2:9a:
                    85:91:64:ae:39:00:35:5f:d0:54:ad:00:4f:6a:37:
                    71:17:4d:85:c2:82:ea:d6:ff:c4:81:65:58:5f:76:
                    ba:a1:90:1f:00:f5:ee:ca:a7:00:e8:1e:78:0e:7e:
                    27:8d:06:cc:62:db:a2:db:4d:46:ce:73:1c:02:ee:
                    61:4c:ac:7d:6d:c1:d8:b0:bb:1a:99:f9:92:34:4a:
                    21:fc:ec:42:f9:a9:fc:45:47:0f:5d:4b:af:a3:df:
                    a0:e9:bc:b2:41:10:dd:67:92:74:e7:de:85:af:54:
                    46:55:5d:37:16:9d:c3:0c:00:67:35:a7:50:fd:8c:
                    37:9b:ed:d2:f9:4d:38:cc:6d:cb:83:94:24:da:7f:
                    ec:02:0b:38:3d:66:d2:f5:54:89:b3:20:96:ce:fe:
                    aa:bc:e7:92:49:d5:74:89:c4:0f:2a:4b:bc:f6:3f:
                    c0:55:2f:88:75:85:6c:4b:dd:4f:0e:0d:63:62:60:
                    d5:46:e8:8b:90:97:8a:b0:6a:7a:39:27:30:27:2c:
                    97:2e:f6:43:e1:4e:46:47:ce:d2:c9:09:38:d1:1d:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2D:59:D0:02:E3:92:DE:B4:10:F2:12:0E:83:DE:63:D2:C0:4A:83
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rC1Z0ALjkt60EPISDoPeY9LASoM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.67.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:34:27:65:c5:d9:ba:4f:53:ae:cf:ac:f1:e5:03:b4:1b:
         b2:22:f3:a0:a9:b0:d4:53:b6:65:8e:da:60:76:50:d1:73:6f:
         f3:a5:d5:57:31:eb:91:ec:fd:07:e7:24:44:92:a7:a4:b7:61:
         18:e9:69:d4:e1:d6:61:f8:68:80:d3:f4:34:19:bd:15:c9:0e:
         24:97:4b:7a:66:fb:b8:56:79:71:eb:71:0f:1d:0c:79:4f:a0:
         c6:9d:d2:6d:93:53:c7:64:39:8e:d5:4a:28:d5:a5:12:bb:97:
         f6:a3:0a:7b:5e:03:42:04:f1:36:73:64:87:18:4d:06:82:b6:
         7b:78:da:6c:3c:5b:96:e3:f8:38:27:c9:05:3a:9e:a1:e6:4c:
         f9:9e:a6:36:e4:13:39:3d:53:85:f0:ef:78:38:4d:d6:1c:b5:
         29:10:22:c9:a9:8b:a0:8e:02:ff:b8:eb:e6:17:bf:fc:f8:79:
         a7:03:dc:c6:40:1e:80:1c:83:27:53:ef:a5:f9:5d:0d:7b:bc:
         93:4a:a4:1c:2e:47:6a:e8:45:14:78:4d:12:2d:d2:9f:ba:de:
         7c:64:30:2a:23:c7:22:fd:8b:96:0f:f2:97:3c:06:23:3e:97:
         35:c9:4c:c5:8d:55:f3:23:c9:67:46:f0:ac:9e:78:25:f9:da:
         57:2d:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org