Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/DgtJiHIzLIZt6veDU66c3ynw15A.roa
File:                     DgtJiHIzLIZt6veDU66c3ynw15A.roa (raw, json)
Hash identifier:          +FSPChxNIIfZApoBoUi54uYTG4khuUGebT+bRJ+spNY=
Subject key identifier:   0E:0B:49:88:72:33:2C:86:6D:EA:F7:83:53:AE:9C:DF:29:F0:D7:90
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       3F
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/DgtJiHIzLIZt6veDU66c3ynw15A.roa
Signing time:             Wed 18 Aug 2021 07:54:30 +0000
ROA not before:           Wed 18 Aug 2021 07:54:30 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        220.102.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:30 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=0E0B498872332C866DEAF78353AE9CDF29F0D790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:4f:87:5f:dc:76:31:f5:a1:cf:ca:46:06:
                    e3:fe:02:59:0d:53:1f:bb:91:f8:ec:53:c7:17:5f:
                    10:07:f8:bf:b4:4f:13:64:82:5a:f5:d3:47:2e:09:
                    83:db:58:b7:1f:86:68:3b:d6:4a:ea:1a:5b:06:72:
                    83:38:8f:95:a2:81:a2:ee:48:43:08:de:a4:ad:05:
                    bb:8f:57:79:a6:22:2a:1b:c3:57:bb:72:21:38:8f:
                    31:a7:45:dc:17:59:a1:b8:b2:5c:f7:24:ec:0b:76:
                    a8:cc:fb:38:b1:43:8a:19:5e:0c:26:52:c8:12:a8:
                    19:9b:c9:37:ec:01:a2:98:66:4b:f8:55:fe:84:6e:
                    ae:5a:b3:54:3a:a2:eb:fc:db:92:f1:3c:1f:ec:ca:
                    67:20:9c:83:a5:35:82:13:da:23:f5:60:09:7f:43:
                    93:8a:c3:f3:6a:5e:34:6a:d7:cb:f3:a5:1a:c0:34:
                    51:ce:44:aa:f8:e6:fd:e6:b1:0d:c6:a3:7b:b3:c2:
                    65:5b:ce:fa:c7:55:0c:45:57:de:b5:2f:86:27:9c:
                    a8:80:5f:8b:4a:d5:13:17:6d:7c:07:81:ad:29:51:
                    01:28:0b:1e:f8:d7:17:3f:bb:86:fa:bb:69:df:a3:
                    f4:40:d6:23:2f:75:50:e3:9a:34:45:45:c6:2a:f2:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0B:49:88:72:33:2C:86:6D:EA:F7:83:53:AE:9C:DF:29:F0:D7:90
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/DgtJiHIzLIZt6veDU66c3ynw15A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:45:65:31:9e:30:6a:78:a4:ad:81:48:60:62:5e:cf:d1:e9:
         b0:f8:dd:ee:a8:95:d7:f8:6d:4c:54:88:01:c9:fa:1c:10:96:
         db:5a:64:74:13:49:47:95:7b:bd:09:63:83:0c:ba:04:65:96:
         4d:6b:3e:f9:3e:53:55:8f:54:23:af:1d:ef:1c:39:62:f3:77:
         ad:9a:6c:54:1a:18:72:fd:c6:6a:9c:71:f0:6c:b4:6a:c0:dd:
         89:df:04:ea:bf:cc:fe:3c:fd:b2:06:8f:12:f5:47:05:3b:aa:
         19:6d:8f:a2:b6:f5:68:50:eb:88:74:9f:7e:50:15:ac:a9:9d:
         c2:e9:53:da:0b:68:f4:0d:4a:c2:64:e4:97:51:18:b2:6e:dc:
         24:cd:74:3d:67:03:d0:74:38:56:d8:01:3d:64:42:74:d5:c3:
         5b:0c:22:57:17:bd:c2:b2:a9:61:01:7f:f6:e7:11:ef:13:6f:
         33:c6:3a:47:b3:7d:07:c6:66:a6:53:8d:c0:6f:00:c0:7d:81:
         9e:3b:ee:ec:79:fe:1d:8b:b7:95:7d:1a:c7:65:5a:5f:fa:84:
         a6:72:25:27:0b:91:e6:59:51:ba:e6:60:c7:c3:9c:38:6a:f4:
         ff:83:ba:55:3c:88:d9:fc:f4:78:4e:e6:32:98:56:b4:f5:6c:
         97:f1:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org