Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZFZTctQEgw98oX3VAH5OAKliK6I.roa
File:                     ZFZTctQEgw98oX3VAH5OAKliK6I.roa (raw, json)
Hash identifier:          qdHbSu7qpdY62HQftJCIKV/O/0qIggd3l+/RnnAmmpU=
Subject key identifier:   64:56:53:72:D4:04:83:0F:7C:A1:7D:D5:00:7E:4E:00:A9:62:2B:A2
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       BD
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZFZTctQEgw98oX3VAH5OAKliK6I.roa
Signing time:             Sat 01 Oct 2022 01:29:22 +0000
ROA not before:           Sat 01 Oct 2022 01:29:22 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        219.121.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:22 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=64565372D404830F7CA17DD5007E4E00A9622BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:0f:f3:68:ee:d6:57:7e:1d:e4:af:6d:c7:
                    72:34:6b:a9:1a:f9:ac:98:ea:97:56:8b:97:f5:47:
                    e3:d5:6a:1a:82:fa:89:b5:b2:c4:79:db:e3:a2:5d:
                    e8:fc:86:f1:d6:25:22:0e:53:d8:1a:d9:68:7a:38:
                    98:19:ed:e9:1a:39:8a:e7:7a:c0:bc:37:5d:6b:80:
                    27:34:bb:a6:2a:40:5c:77:ba:6f:24:c3:2f:4b:6f:
                    56:7e:9e:7e:2b:1f:e0:aa:b2:ae:49:95:d3:46:17:
                    17:d9:c1:ef:1e:37:76:c5:1b:d5:ce:3c:4b:39:10:
                    17:e2:a9:d0:12:0f:7d:f0:a7:2b:93:2d:aa:6a:a2:
                    cc:5d:56:d0:cc:37:6f:0a:86:10:04:19:e1:d9:e8:
                    d0:c0:bc:05:2f:6f:f3:53:19:e3:f3:ff:cc:59:b4:
                    77:64:f9:06:e5:c5:a4:51:96:ad:4d:29:37:7b:a4:
                    26:95:8e:a9:32:f6:57:b7:74:ea:aa:63:c2:99:88:
                    49:d7:cc:5b:10:39:9b:f9:fb:a1:23:30:60:b8:a6:
                    c1:51:ca:42:d5:31:4f:fe:4a:84:73:d8:92:d6:6e:
                    43:0e:31:9a:93:c6:8d:68:26:e5:d2:21:b8:27:fc:
                    b4:08:82:84:14:3f:18:ff:2f:a5:9b:22:bb:b3:72:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:53:72:D4:04:83:0F:7C:A1:7D:D5:00:7E:4E:00:A9:62:2B:A2
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZFZTctQEgw98oX3VAH5OAKliK6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:d4:13:be:90:b2:05:dc:ee:b7:45:ad:26:71:14:7d:0c:
         83:1a:a8:e3:a5:36:8c:46:c0:00:f7:c0:0e:47:75:55:ee:96:
         e3:f4:e3:0e:82:5f:d0:30:99:1b:13:4f:4e:5c:46:c7:09:a2:
         0d:25:66:c4:25:e2:f8:77:83:70:52:d6:be:c3:e0:07:ae:78:
         fc:35:84:b5:1e:d9:bb:ec:ee:6d:0b:bb:8b:c4:07:6c:1c:0b:
         e4:b3:0b:da:93:c3:68:da:ce:f2:71:bc:81:cc:23:0b:1a:fb:
         7a:88:8e:fd:0f:79:81:70:21:08:e8:c2:7a:22:b3:7f:a4:94:
         a9:db:f9:a7:89:be:c2:5c:9d:b1:40:28:8c:de:0a:66:a6:6f:
         c7:ad:9e:52:2c:8b:87:b4:36:2e:87:05:b0:e0:78:ee:0e:50:
         e4:22:16:a5:f4:db:17:75:3f:57:f2:10:8e:f7:da:aa:04:7c:
         df:0d:d2:51:5d:23:b4:b8:a0:70:b4:2c:04:bf:f9:81:0b:40:
         e6:35:30:a3:34:7c:98:fa:2a:8c:16:0d:2c:f0:a2:23:71:aa:
         6a:0a:8f:e4:1c:a8:77:12:4c:a5:de:c6:ff:d2:d4:79:23:93:
         6f:55:d9:cc:e6:e7:87:05:18:2e:42:52:25:f6:ed:b4:f2:36:
         4a:fe:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org