Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/z4Tilz5fnqmyImOmDsliUp-ELx4.roa
File:                     z4Tilz5fnqmyImOmDsliUp-ELx4.roa (raw, json)
Hash identifier:          55+ev+32fvM/lPIYbqAyUVBDDQq0Yjc7TdDNYelTUfc=
Subject key identifier:   CF:84:E2:97:3E:5F:9E:A9:B2:22:63:A6:0E:C9:62:52:9F:84:2F:1E
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       26
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/z4Tilz5fnqmyImOmDsliUp-ELx4.roa
Signing time:             Fri 01 Oct 2021 01:28:25 +0000
ROA not before:           Fri 01 Oct 2021 01:28:25 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     55900
IP address blocks:        180.131.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Oct  1 01:28:25 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=CF84E2973E5F9EA9B22263A60EC962529F842F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:7a:6e:de:9a:60:8a:79:a7:1e:cf:76:44:
                    3f:a0:6a:6f:26:de:1e:27:d9:63:68:ae:15:7d:7f:
                    c0:64:87:b6:23:cf:7b:b4:0b:23:d3:30:99:19:b4:
                    19:eb:7f:63:a1:2d:f2:5a:6d:da:0e:7f:a7:d5:cc:
                    58:7c:be:df:33:3e:e4:5c:d6:24:ff:11:4b:e6:71:
                    12:03:5e:6a:32:78:15:31:e8:c1:5e:a3:14:cb:97:
                    f6:b1:7e:90:33:11:fd:84:ea:3d:0a:89:0f:6d:0a:
                    2c:5c:2f:33:a9:de:1f:11:37:5c:3d:5a:d9:f3:dd:
                    48:84:15:a4:c9:cd:17:6d:32:dc:17:0a:06:49:42:
                    2e:79:1c:08:68:75:f6:9c:25:20:43:ca:c3:58:86:
                    f2:04:38:7b:a9:c2:2a:cf:50:df:e0:e9:bf:6c:95:
                    81:fb:6a:d1:31:c1:c4:bb:10:ce:f1:f1:ad:a6:8e:
                    48:7a:33:e7:7d:1a:b5:d0:43:c8:f3:60:c6:2e:97:
                    c3:ae:02:8a:cb:24:69:56:24:1c:36:8a:e1:8c:70:
                    73:d1:18:1f:03:10:c9:c8:69:e3:5e:af:37:01:1f:
                    14:b7:44:20:6a:84:7c:9a:41:c9:eb:dc:c0:6c:26:
                    80:d5:3a:a9:a8:55:f8:65:17:b2:79:6e:7f:6e:28:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:E2:97:3E:5F:9E:A9:B2:22:63:A6:0E:C9:62:52:9F:84:2F:1E
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/z4Tilz5fnqmyImOmDsliUp-ELx4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:c9:bb:e9:94:bf:fb:0e:b1:be:39:54:26:b6:21:69:ac:3d:
         41:56:26:64:35:61:9c:bc:90:e8:0f:3c:21:43:62:3c:e7:94:
         68:26:b7:83:92:5c:ad:3d:06:99:e7:75:04:01:4b:a6:6f:6e:
         4a:34:13:38:54:05:b3:bb:82:99:ed:17:5e:84:07:8c:31:33:
         d5:9e:c9:78:ef:40:af:dd:80:2f:a9:e9:7a:94:ad:de:1e:fd:
         3e:93:3c:00:d8:8c:99:4a:83:4b:f6:45:e6:9d:34:43:e2:08:
         0b:13:d3:18:0b:fd:88:0a:df:3b:9e:f0:f9:75:a5:f5:36:d0:
         b3:e5:71:ea:ea:e6:b7:cc:15:db:98:9c:60:a0:c0:89:ce:7b:
         6a:b6:6a:18:a4:0f:05:bb:34:5e:66:d9:34:e2:10:e9:dc:af:
         77:a2:44:36:7c:95:c7:7a:56:9d:a3:66:2b:e6:aa:2b:ff:aa:
         e1:82:6c:cf:ee:36:cd:97:03:36:9d:c2:77:ce:3c:68:57:4d:
         79:4a:87:59:2e:ed:0f:8a:94:eb:fb:bc:83:3a:45:71:57:00:
         8e:81:8d:3e:d4:68:08:e9:15:f2:6a:88:36:26:48:1b:6c:e6:
         b0:1a:4b:af:a3:79:f1:de:ff:3d:d2:04:ca:33:3b:fa:c0:76:
         59:86:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org