Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/U2PtGtodyxRbcVBdBJ2KdNO6_gE.roa
File:                     U2PtGtodyxRbcVBdBJ2KdNO6_gE.roa (raw, json)
Hash identifier:          5c1aoMFvoQiG+eH7ehn8klowzEBWKXYjxIebpb6nN0I=
Subject key identifier:   53:63:ED:1A:DA:1D:CB:14:5B:71:50:5D:04:9D:8A:74:D3:BA:FE:01
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       76
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/U2PtGtodyxRbcVBdBJ2KdNO6_gE.roa
Signing time:             Mon 01 Nov 2021 01:28:40 +0000
ROA not before:           Mon 01 Nov 2021 01:28:40 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        202.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:40 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=5363ED1ADA1DCB145B71505D049D8A74D3BAFE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:85:12:50:d4:b3:8c:52:dc:13:cd:2f:ce:
                    17:cf:99:6f:9d:8f:4d:da:d0:aa:9b:4a:54:44:5e:
                    b6:09:51:f8:09:7c:65:b5:65:e1:ad:1e:d3:3f:8f:
                    3c:2b:e8:63:a2:4e:bd:83:88:4f:e7:2f:7f:96:62:
                    b5:bf:f8:a5:3f:27:a5:81:f2:00:0f:65:3a:b5:d2:
                    1a:22:c5:e4:b0:04:6e:2e:2e:ce:bd:57:28:ad:ed:
                    df:09:2f:79:84:cc:68:40:07:57:1b:7e:f9:15:64:
                    de:ac:f5:1f:0c:f0:6d:6d:86:6e:ae:9d:b1:0d:fa:
                    09:85:8c:98:65:19:2e:99:fd:79:2d:42:f9:0c:e4:
                    28:59:3c:41:f7:ea:2e:b0:5f:15:56:7b:e9:51:12:
                    1e:da:d1:f5:3f:9f:6b:dd:c1:be:81:1f:a5:bd:20:
                    f5:2d:79:12:c3:6d:8d:29:de:81:1c:9b:01:16:08:
                    7d:9e:77:ab:d6:94:2f:42:97:7c:29:ba:58:d4:f4:
                    ac:20:4a:d3:f2:31:ee:eb:7f:ca:37:6b:99:7b:c0:
                    28:07:b3:64:e2:a5:7f:af:ea:e1:87:bd:a1:5a:0f:
                    8f:aa:42:53:fa:bf:86:bf:a2:f8:fb:26:45:62:d5:
                    34:6d:75:16:75:e2:5c:f0:82:1e:62:0b:c5:2c:42:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:63:ED:1A:DA:1D:CB:14:5B:71:50:5D:04:9D:8A:74:D3:BA:FE:01
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/U2PtGtodyxRbcVBdBJ2KdNO6_gE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:97:fd:07:e8:51:ef:11:82:cd:8c:73:3c:73:ed:93:5e:
         0d:24:da:9c:f4:cf:33:35:b6:d5:45:16:9d:8f:62:16:87:d1:
         c6:b8:9a:c9:e2:2b:28:1b:93:0b:74:d3:93:e7:90:0f:f5:72:
         f3:4b:9c:8e:86:bf:a2:fa:a6:c5:3f:93:d0:2d:bc:79:76:61:
         93:7d:ec:c0:8e:e1:7e:b9:38:dd:cd:09:1c:b7:a4:97:e3:5b:
         86:48:11:e6:7c:c3:a6:2e:30:12:79:63:56:96:52:3c:a4:bb:
         98:2d:8d:88:a5:bb:06:e7:02:c4:d3:1b:86:0b:43:7b:03:90:
         01:2c:56:74:90:84:62:15:a6:59:80:70:90:ba:9a:c1:89:b5:
         98:a3:cc:cd:ec:4f:c1:93:59:b7:d9:3f:95:74:a0:9c:5d:6f:
         5d:55:29:65:cd:e1:fe:1e:b1:81:e6:76:2f:9c:ba:e7:eb:ed:
         f1:29:14:a6:a1:a1:a7:dd:e6:01:d4:ee:e3:11:08:fd:45:dd:
         09:da:72:2e:19:c2:3c:b6:02:77:09:3b:5a:c0:67:24:6a:23:
         4b:d5:cd:e5:02:62:81:ff:32:93:69:da:3d:1d:79:62:97:db:
         46:e7:45:95:ce:39:1b:85:17:95:b4:85:13:13:8c:6e:b6:8d:
         d3:fc:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org