Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/x33GjdDzaY6Kp4ppBfvirfNcw6A.roa
File:                     x33GjdDzaY6Kp4ppBfvirfNcw6A.roa (raw, json)
Hash identifier:          nAFFOVMoLWq4RRgcERVqc4y34HHK84mLo5bcruqiOAo=
Subject key identifier:   C7:7D:C6:8D:D0:F3:69:8E:8A:A7:8A:69:05:FB:E2:AD:F3:5C:C3:A0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       69
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x33GjdDzaY6Kp4ppBfvirfNcw6A.roa
Signing time:             Mon 01 Nov 2021 01:28:36 +0000
ROA not before:           Mon 01 Nov 2021 01:28:36 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        125.30.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:36 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=C77DC68DD0F3698E8AA78A6905FBE2ADF35CC3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:d9:c2:4a:11:77:af:00:24:8f:1a:30:ef:
                    db:4f:93:bc:ab:43:6f:1e:d7:b7:b2:00:b1:6c:7b:
                    ef:ad:5d:a9:6b:b9:c2:9e:36:f5:39:33:b5:27:9e:
                    69:5b:fc:a6:01:37:01:92:97:49:0f:a1:50:06:f0:
                    9a:55:9a:7c:b4:88:30:d0:eb:9a:8f:97:4c:8b:57:
                    c8:e0:73:76:4f:bb:7a:06:a5:64:68:62:64:27:61:
                    66:7a:3d:6c:29:a3:0e:a3:61:fd:20:1f:19:5e:bc:
                    4e:83:d5:0d:8c:38:00:c4:e1:e5:99:1f:fc:04:bf:
                    d1:04:e3:05:22:2d:54:da:4b:eb:69:f6:e5:bb:27:
                    ba:39:b7:c6:bf:bd:01:a4:d5:df:39:0f:7e:de:31:
                    12:49:b3:6d:83:69:db:b9:d3:dc:e0:47:6d:59:9b:
                    bd:c9:6e:09:3f:c1:d2:d0:1f:57:3b:a7:bc:d9:e4:
                    e9:f4:39:9a:a6:9e:44:8e:a0:8a:57:b0:9e:69:ec:
                    df:a0:a7:d8:4f:db:95:36:01:0a:22:55:93:a0:97:
                    00:5b:c5:41:a2:9f:75:39:28:66:ae:09:ef:52:b1:
                    4f:79:36:19:5c:ab:8f:87:3a:9f:af:58:f9:a4:0a:
                    98:93:1f:76:84:0e:eb:76:e7:49:92:4b:c2:7a:6c:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:C6:8D:D0:F3:69:8E:8A:A7:8A:69:05:FB:E2:AD:F3:5C:C3:A0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x33GjdDzaY6Kp4ppBfvirfNcw6A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:ee:65:3b:67:7d:61:a0:cb:17:bc:3c:64:5f:a5:56:81:
         b8:de:36:91:21:b8:21:5c:88:9b:e7:8f:01:8a:99:21:98:b8:
         0d:9e:0b:49:12:7c:61:59:38:48:e8:83:4e:d2:f8:25:e0:15:
         83:cc:75:31:19:72:5c:0a:9a:77:96:a3:44:c7:d7:55:b2:c5:
         70:d3:65:6c:96:4d:7d:1a:50:20:d0:8b:fb:37:9e:9e:76:ef:
         62:50:d7:2d:3e:10:5f:2c:d1:b5:48:93:ef:ff:57:2f:26:79:
         f1:35:72:15:73:fb:9a:9b:29:b5:13:be:71:bb:ae:00:55:63:
         8b:c6:c3:51:d4:c6:ba:f7:5a:02:d7:85:94:d5:5b:e9:e8:84:
         20:ad:d9:0b:c8:6c:ae:49:ee:25:ad:de:28:1c:00:cc:c2:ba:
         0a:06:35:00:f1:82:9f:75:7d:af:a6:d5:73:be:0c:1c:bc:3c:
         53:18:ff:31:2b:62:16:93:dd:bf:51:20:b9:ac:e5:9b:18:39:
         aa:6b:59:e0:ad:b1:f6:5e:8b:8d:5d:3d:d4:12:79:48:4f:d0:
         7f:e7:f6:c9:41:bd:f5:01:9f:76:f9:cd:59:ad:9b:36:98:e3:
         66:c9:a3:90:5d:9c:c5:ff:cb:c5:d9:ea:6b:5d:22:09:1b:6c:
         74:e9:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org