Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa
File:                     CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa (raw, json)
Hash identifier:          Nbtdeoi24VKXwAKBUOsxovrFba25wFFi/XgZ0CjVcZE=
Subject key identifier:   09:F4:BE:1E:4F:8C:C3:EB:63:74:1C:F2:2F:FC:91:0A:06:AB:C8:EE
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       26
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa
Signing time:             Sat 20 Feb 2021 08:03:57 +0000
ROA not before:           Sat 20 Feb 2021 08:03:57 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     9621
IP address blocks:        119.59.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Feb 20 08:03:57 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=09F4BE1E4F8CC3EB63741CF22FFC910A06ABC8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:3f:35:32:ad:e1:ce:f0:4c:06:13:17:e6:
                    d9:0a:d3:92:1d:69:b2:bb:aa:7e:10:be:f1:28:29:
                    19:af:37:08:65:18:d7:99:a8:b8:21:72:95:7f:26:
                    ee:9b:d0:80:9b:5b:73:03:d9:ff:25:22:8a:6c:76:
                    b2:6e:54:67:59:d0:80:15:f7:2e:68:89:24:6c:dd:
                    e4:4f:ae:b1:d4:ed:ff:c5:a7:f1:57:b4:7a:6f:35:
                    2c:4b:ad:2b:c5:0c:cb:ea:99:e8:7e:b5:1f:63:92:
                    71:aa:9f:4f:07:e5:a8:bd:ef:5c:1d:a2:d6:8b:dc:
                    0d:3a:29:65:fe:11:29:a0:9b:9e:81:18:63:f8:49:
                    9b:c2:4b:fb:df:30:6b:3a:a9:72:3d:24:ff:65:a5:
                    5a:5c:dd:6e:16:2e:29:3a:ec:96:90:ac:b0:33:01:
                    bc:a5:7d:94:17:a0:7b:56:a1:75:03:a1:29:1f:d2:
                    2f:53:39:f0:a6:e5:47:92:4a:ff:82:f2:8b:9b:66:
                    c0:37:e7:db:9c:6d:1e:ec:05:ab:e5:0c:64:d1:0d:
                    f5:32:ea:b8:e5:14:d2:60:77:99:d8:d1:94:24:9e:
                    1a:89:89:38:83:91:44:a3:35:df:76:66:d5:1a:66:
                    df:b1:38:f5:2b:2a:c1:53:f9:05:44:a2:f0:62:cc:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:BE:1E:4F:8C:C3:EB:63:74:1C:F2:2F:FC:91:0A:06:AB:C8:EE
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:51:72:69:db:5b:93:fe:59:f0:9e:4f:ce:83:4b:16:b4:58:
         f4:8f:d4:6e:78:f2:25:30:32:5d:30:b6:16:36:f3:e6:0e:cf:
         47:f5:4d:4d:ff:1a:85:45:07:15:37:fc:7c:dd:25:19:24:1e:
         6e:74:a0:1d:c8:80:e0:95:d7:7c:bf:9d:42:01:2e:81:f3:16:
         93:96:09:0a:67:39:8e:48:60:9e:55:68:ab:ca:47:27:d9:6c:
         f3:cd:cf:73:93:60:c0:54:0b:dd:7e:7f:36:5a:0c:4d:59:82:
         45:5a:b2:08:60:75:c1:ac:b8:da:91:3c:fb:95:73:5d:70:d5:
         21:d6:2a:17:33:f7:82:d4:e8:c7:45:2a:38:17:19:7c:05:3a:
         bf:c9:de:83:02:4f:2b:be:d9:21:bc:22:a1:d3:b6:d8:fc:d4:
         b8:ca:18:b3:eb:59:1b:a4:70:84:20:f6:f4:41:11:c3:88:3d:
         7f:95:c5:5d:38:64:82:23:e3:47:4f:92:1d:2d:02:2b:98:11:
         5f:a5:60:cc:45:bc:0b:57:24:ef:eb:64:73:a8:05:88:a0:44:
         10:67:ca:99:b9:09:fa:53:8c:9f:c8:88:e0:7d:fe:d0:2e:e4:
         5c:a3:c7:13:60:05:6e:8c:9e:35:fe:4c:bb:ea:56:5b:51:32:
         3c:e1:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org