Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/rLn5GF42GwMemSBkcghmzBBFfzc.roa
File:                     rLn5GF42GwMemSBkcghmzBBFfzc.roa (raw, json)
Hash identifier:          OMgN5vPdCBk8vVmsHa62YcAu7lvZ6Wr0opHaKr0n7YY=
Subject key identifier:   AC:B9:F9:18:5E:36:1B:03:1E:99:20:64:72:08:66:CC:10:45:7F:37
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       95
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rLn5GF42GwMemSBkcghmzBBFfzc.roa
Signing time:             Tue 01 Feb 2022 01:31:23 +0000
ROA not before:           Tue 01 Feb 2022 01:31:23 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        211.128.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:23 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=ACB9F9185E361B031E992064720866CC10457F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:bc:c3:eb:ec:d7:91:12:5a:29:a3:d6:ba:
                    46:c5:42:74:7e:4a:6d:ca:a7:93:a4:fd:1b:02:f9:
                    97:76:29:cf:df:9d:48:ac:9f:88:ef:8f:2c:6c:77:
                    13:b8:cb:25:4a:af:42:83:ac:51:8b:2b:cd:4a:2f:
                    9d:02:15:ac:87:7f:e6:15:22:8f:1b:cf:a6:c9:fd:
                    01:da:bf:64:bf:9d:c0:64:1f:fe:79:0b:38:58:b9:
                    43:00:2a:b3:bc:49:f0:d9:04:04:59:2d:fa:9b:4d:
                    3f:cd:96:bf:b2:46:6b:20:54:0d:4d:3c:bc:87:d1:
                    e9:44:c9:b3:6a:17:0a:69:cc:b4:93:8a:60:61:80:
                    1a:e9:a0:76:b2:80:8f:53:2e:fb:47:d9:6a:f0:38:
                    c8:44:ef:c0:d2:d2:7b:88:d8:20:30:bc:53:f6:e6:
                    24:aa:da:fe:cc:ba:0f:71:19:b2:a7:6d:9b:31:5b:
                    16:41:6d:e8:0c:6c:d0:66:e3:32:7f:3b:af:ad:8f:
                    72:66:f3:1c:64:44:c1:85:6f:f1:15:e6:b7:c1:63:
                    52:dd:17:85:6f:5a:d6:41:1e:2e:3b:99:17:9d:e3:
                    aa:31:13:59:b8:b8:5b:2e:7e:f9:fe:27:2e:89:eb:
                    cc:26:2e:6e:b7:6f:4c:a5:63:a3:dc:31:50:4c:bf:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B9:F9:18:5E:36:1B:03:1E:99:20:64:72:08:66:CC:10:45:7F:37
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rLn5GF42GwMemSBkcghmzBBFfzc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.128.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:87:ea:10:f5:f4:ab:89:38:79:53:2b:8c:77:fa:48:54:
         a1:8c:36:bc:44:7e:03:2d:43:9d:62:ec:f6:58:11:4b:ab:62:
         ac:4e:8f:ec:23:b7:29:60:e5:3c:27:29:ef:96:2e:13:40:ea:
         ae:1a:a6:b0:21:c3:c8:8b:f6:18:bf:4b:60:0d:73:63:0e:ce:
         33:bd:b4:0d:62:ab:93:ef:a0:b1:5d:41:11:3c:df:f2:25:4a:
         2d:72:73:19:1e:e8:09:f6:9f:34:f9:19:ba:6b:65:0c:47:39:
         f2:65:df:33:50:b3:61:b6:e7:62:ac:79:51:ea:ef:b1:5e:73:
         e3:67:c5:4f:07:64:ff:95:a3:a7:4b:d8:3b:07:31:fa:51:d4:
         0e:fa:d2:40:57:fd:0d:01:51:59:83:20:2b:5f:bf:93:51:e7:
         63:cd:0f:b0:be:c3:19:f8:52:02:d9:80:6d:80:c3:b3:09:e9:
         57:1d:0e:ea:68:46:ef:8c:4a:f6:5b:c6:e4:58:bf:53:21:37:
         11:ed:5c:56:62:36:79:7f:f8:a5:74:cf:42:e3:c9:7c:b2:c4:
         12:d1:a7:b6:26:a1:2c:1d:a2:9a:80:3d:63:a7:a6:87:2c:e9:
         c2:8d:24:35:a2:73:62:63:9c:e1:5e:22:36:eb:40:0f:46:98:
         9d:42:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org