Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/tpgnoXNGHQHh33bqopcvjH1n6gQ.roa
File:                     tpgnoXNGHQHh33bqopcvjH1n6gQ.roa (raw, json)
Hash identifier:          oPgWYBR4C4W+0LjzpVY2ehr9DLsTMQhVniZO9fkWY6U=
Subject key identifier:   B6:98:27:A1:73:46:1D:01:E1:DF:76:EA:A2:97:2F:8C:7D:67:EA:04
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       6D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tpgnoXNGHQHh33bqopcvjH1n6gQ.roa
Signing time:             Wed 17 Mar 2021 06:53:14 +0000
ROA not before:           Wed 17 Mar 2021 06:53:14 +0000
ROA not after:            Tue 15 Mar 2022 01:30:01 +0000
asID:                     2527
IP address blocks:        219.104.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 17 06:53:14 2021 GMT
            Not After : Mar 15 01:30:01 2022 GMT
        Subject: CN=B69827A173461D01E1DF76EAA2972F8C7D67EA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:73:c7:50:2c:08:96:57:bb:79:40:50:07:
                    22:76:67:68:21:14:15:bd:1e:88:66:8e:8a:71:09:
                    84:88:3b:bb:a7:93:84:10:5a:9b:a2:73:ad:41:22:
                    1c:40:8c:80:51:63:3e:76:f6:53:38:8c:46:e3:67:
                    b4:25:3e:88:30:b1:b4:05:91:c1:f8:99:f2:ba:02:
                    3f:79:a3:bd:e5:d0:57:3d:36:15:83:0d:b9:a2:c2:
                    1f:50:a2:b3:86:a4:7b:1a:f3:7f:c8:22:f5:2e:9b:
                    81:38:71:a6:39:ac:63:1e:c6:9d:b0:63:b4:ac:a6:
                    63:1e:69:09:31:bb:6c:9f:4b:7d:5f:96:cd:4a:6c:
                    27:5a:48:db:6e:c4:50:e2:12:90:73:f7:c4:ca:cb:
                    45:43:c5:97:53:c6:10:0b:c7:b4:86:be:fb:11:e9:
                    f0:47:bc:90:69:e1:1a:27:b0:c1:e3:9f:8e:5f:8f:
                    01:20:32:bf:5d:83:30:36:84:60:1e:a2:04:b6:db:
                    0c:dc:19:fa:72:fc:3b:53:db:ac:90:21:61:48:e8:
                    2f:2d:f3:07:08:91:31:99:3b:a1:3f:db:67:82:ef:
                    ec:8f:64:b2:fe:89:3c:ed:66:16:00:bf:0b:2e:09:
                    c2:f4:94:13:c6:be:e4:9a:83:d6:b7:b9:58:a9:fc:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:27:A1:73:46:1D:01:E1:DF:76:EA:A2:97:2F:8C:7D:67:EA:04
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tpgnoXNGHQHh33bqopcvjH1n6gQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.104.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:a6:ab:fc:61:42:ed:06:e2:c3:b2:9e:27:1e:ac:af:e4:
         3d:82:04:f4:eb:17:51:af:93:7d:b6:9e:32:16:0a:dd:1e:f9:
         77:2c:7a:17:56:78:41:ca:da:2f:25:a8:5f:9e:b8:8c:66:07:
         95:61:32:ee:85:49:ea:58:ee:55:4f:59:b3:3b:df:5b:ca:2a:
         8b:fc:85:ae:28:d4:60:51:8d:2e:14:68:ec:6e:f7:f8:a7:03:
         55:f1:b8:6f:a7:05:00:de:df:d0:0c:05:ef:38:64:3b:ed:02:
         b2:2e:1c:62:1c:f1:e4:6e:14:99:69:1c:51:9f:f0:26:87:2f:
         22:e8:e3:f4:01:dd:9c:83:ec:ca:0c:a2:57:14:1e:ce:65:38:
         6a:1a:19:5e:85:00:83:b4:f9:63:c2:fd:11:b4:0c:69:2d:6b:
         36:d7:28:7b:68:1b:ae:e9:19:af:c2:d4:c4:2b:bf:f2:45:5c:
         c2:5b:d0:ca:b8:d1:e2:e3:ee:49:e9:50:c3:3b:9f:b7:97:1d:
         2c:55:20:d4:13:10:90:57:32:34:12:77:3b:87:d0:cc:d2:67:
         26:51:3b:28:50:d0:86:30:49:9d:56:06:16:7f:c2:e3:7e:75:
         5b:0b:a3:a9:a1:a6:4d:e4:ab:42:3b:41:40:30:92:92:be:47:
         d5:a5:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org