Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/hujOA4HJHlyB6-epVh9HBWbxAq0.roa
File:                     hujOA4HJHlyB6-epVh9HBWbxAq0.roa (raw, json)
Hash identifier:          U/AfylnbHs9BezFvDYhAbkv/XfVWd3Wv78BYuGPYf8o=
Subject key identifier:   86:E8:CE:03:81:C9:1E:5C:81:EB:E7:A9:56:1F:47:05:66:F1:02:AD
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       9F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hujOA4HJHlyB6-epVh9HBWbxAq0.roa
Signing time:             Sat 01 Oct 2022 01:29:13 +0000
ROA not before:           Sat 01 Oct 2022 01:29:13 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        202.16.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:13 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=86E8CE0381C91E5C81EBE7A9561F470566F102AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:11:48:5c:f7:a3:6f:ee:17:b5:45:a5:48:
                    78:06:c6:79:3d:a4:05:29:f8:8f:a0:42:96:2a:df:
                    03:b9:11:20:c3:4c:6a:1d:c8:a2:bb:69:73:cb:bf:
                    d7:66:65:3a:b7:d3:21:ac:26:3f:5c:e0:10:0d:76:
                    43:f4:14:76:ef:30:0c:5a:48:35:c3:f8:d4:79:89:
                    3b:10:7c:61:2f:cb:40:e9:fe:d1:74:e5:19:ba:ee:
                    85:19:61:6c:94:f0:7a:6e:f7:68:89:29:6a:85:da:
                    e7:69:4e:11:39:a7:3b:88:5c:00:f2:e1:8c:cd:96:
                    bb:9c:af:ae:10:74:7e:9d:83:aa:3c:23:b5:ae:02:
                    03:6d:bd:19:ce:7f:93:92:21:b8:ad:83:6f:3f:04:
                    cc:21:3f:46:0d:10:5a:6b:14:02:26:96:56:8e:ff:
                    ad:56:f2:7b:db:25:0d:a8:b3:e8:84:71:ed:8e:96:
                    1e:74:b0:cd:59:c7:58:6e:a9:eb:31:23:f0:e7:91:
                    eb:76:b8:75:5d:14:15:8b:f1:fb:0c:d3:f9:99:b4:
                    f8:81:89:86:c9:76:08:1f:2c:a2:1e:94:7c:89:e9:
                    5d:43:d5:9b:b6:90:38:70:44:80:fa:b4:69:0f:df:
                    3f:57:4b:36:9c:c3:9f:c1:c6:31:fe:3f:73:f1:2f:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E8:CE:03:81:C9:1E:5C:81:EB:E7:A9:56:1F:47:05:66:F1:02:AD
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hujOA4HJHlyB6-epVh9HBWbxAq0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.16.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:bc:dc:33:59:3a:b4:ea:56:52:6e:87:36:49:db:f3:e1:
         6a:97:e4:fc:9b:88:f1:3f:40:5c:46:bb:a2:39:9b:8a:68:2d:
         31:b6:ef:89:5e:7b:91:21:a7:d2:81:4f:4b:e2:6e:f3:a6:84:
         0a:ee:ac:94:b4:f4:0a:9c:77:7d:c6:86:fb:b1:f7:25:2f:a4:
         d7:30:69:e9:a1:9c:73:b4:cc:81:d3:1f:a3:3c:f3:da:cc:5b:
         93:b9:94:d4:39:0e:97:3d:94:83:43:91:45:b1:74:1f:7e:dc:
         7a:22:7f:09:1c:ab:26:b2:6e:f2:a8:b2:1e:bd:16:da:a5:e9:
         78:26:69:46:b7:64:46:c4:98:29:53:1d:2c:66:a1:33:72:9f:
         49:36:d9:23:d6:35:2a:bf:e4:1e:85:c4:c3:ac:98:a6:08:93:
         a0:a3:da:00:44:64:87:f3:51:38:9b:ca:c3:20:69:16:ba:c0:
         0d:20:77:f0:46:5e:cf:e4:f6:c1:6d:91:15:ba:7c:50:fa:a4:
         e0:0c:60:e6:f1:c5:bc:a9:77:35:e6:1e:53:c6:ae:84:27:60:
         c8:dd:dc:10:59:09:a5:87:3b:cf:a9:cc:b7:1f:ea:07:46:44:
         a3:45:ab:88:4f:49:50:31:ae:87:b4:89:db:57:bd:68:3b:a0:
         8a:74:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org