Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wLxPZLLXCf4FB_ifuqTd_Jx4G_I.roa
File:                     wLxPZLLXCf4FB_ifuqTd_Jx4G_I.roa (raw, json)
Hash identifier:          cWsjfy/zJu83PCFJATU3qEX3X7Xf4wRA3JkFw2Ub4Mw=
Subject key identifier:   C0:BC:4F:64:B2:D7:09:FE:05:07:F8:9F:BA:A4:DD:FC:9C:78:1B:F2
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       32
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wLxPZLLXCf4FB_ifuqTd_Jx4G_I.roa
Signing time:             Fri 14 Jan 2022 05:21:37 +0000
ROA not before:           Fri 14 Jan 2022 05:21:37 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        66.11.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Jan 14 05:21:37 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=C0BC4F64B2D709FE0507F89FBAA4DDFC9C781BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:0b:45:2f:90:31:c7:fb:eb:2d:eb:b9:f2:
                    64:95:39:b9:fe:60:86:0d:fc:8a:2d:51:b7:e1:df:
                    d0:d3:72:e0:39:8e:c6:8e:c3:76:ea:d4:33:b1:8c:
                    1b:db:7b:17:b2:b6:57:6f:fc:a5:56:50:b2:c1:84:
                    b5:72:d5:89:c8:25:78:5f:a4:7f:e0:8f:f9:ac:5d:
                    76:a5:f6:a0:c6:2b:f6:6b:b7:66:78:4a:f3:e1:cb:
                    d1:ed:45:eb:26:44:3a:76:1e:9e:f3:f1:f4:9f:89:
                    9c:0c:47:39:a7:92:37:89:eb:2f:81:27:d4:dc:bc:
                    38:61:9d:3b:2f:ca:cd:5c:49:f6:67:83:a6:e5:f9:
                    43:51:90:8b:e0:32:96:6b:01:21:f7:02:45:14:f1:
                    62:e6:1d:e6:25:52:7f:66:a3:23:c6:a2:20:3e:da:
                    7a:83:e3:f9:bb:b5:c4:a4:6c:07:9f:74:13:09:b0:
                    5f:62:39:e3:85:3a:6c:52:cc:72:14:85:86:5f:98:
                    93:6f:35:84:13:55:3a:2d:c9:4b:cf:4e:5b:1f:ad:
                    68:03:65:dc:e3:7e:bb:aa:1c:9c:99:c5:bf:b7:fc:
                    c9:21:ee:ee:34:41:19:9e:f5:cb:1e:7d:70:be:33:
                    b7:f7:1e:3c:fa:fc:d1:41:f1:bb:98:47:6c:0a:78:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:4F:64:B2:D7:09:FE:05:07:F8:9F:BA:A4:DD:FC:9C:78:1B:F2
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wLxPZLLXCf4FB_ifuqTd_Jx4G_I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c9:8f:d1:4b:c4:f8:15:42:31:46:e6:9f:5e:d5:8c:00:da:3f:
         21:bb:e0:cb:6d:0d:ee:ae:7c:cc:29:91:21:4b:41:26:04:b4:
         00:a4:5b:60:ce:6c:ee:17:40:d3:c5:30:25:fb:7f:c8:32:a6:
         d7:ee:39:0e:44:23:43:40:21:80:27:5c:01:78:f1:75:94:c4:
         d6:ee:6f:5a:22:86:cd:de:53:a4:d1:00:a5:cb:01:06:aa:06:
         88:26:be:08:be:cb:f9:03:a8:86:b6:9c:8f:8e:e0:1f:37:46:
         ae:2d:a7:d4:2d:c1:ce:04:3d:6b:5b:13:6e:57:33:8f:25:62:
         7e:33:10:be:23:e4:20:3c:45:d6:55:df:97:8f:79:94:ed:31:
         45:02:d6:11:2d:be:91:e9:6b:2d:86:98:32:b1:b5:18:ee:b8:
         d3:fb:ef:45:79:0a:96:32:64:ee:f1:57:c9:45:cd:f4:8c:65:
         03:5d:c6:fc:2e:97:05:e6:74:13:ad:1b:9b:81:d1:1b:79:84:
         36:6d:0e:12:78:d5:df:1f:fa:c0:50:63:cd:af:d6:34:51:6a:
         84:ef:8b:89:86:25:7d:7f:ce:9b:dc:63:9b:4f:71:ff:6b:25:
         fe:d2:78:19:15:83:9d:4d:e0:52:48:08:0e:88:a1:61:9b:bd:
         c2:a2:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org