Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/lgmrWEigPKN0tWfhIfYdPCzpORk.roa
File:                     lgmrWEigPKN0tWfhIfYdPCzpORk.roa (raw, json)
Hash identifier:          vFAKG/6RtEGhHRB7x3EK319x1HeCffJR9FBVph1thPE=
Subject key identifier:   96:09:AB:58:48:A0:3C:A3:74:B5:67:E1:21:F6:1D:3C:2C:E9:39:19
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       67
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/lgmrWEigPKN0tWfhIfYdPCzpORk.roa
Signing time:             Mon 01 Aug 2022 01:29:07 +0000
ROA not before:           Mon 01 Aug 2022 01:29:07 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        27.127.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:07 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=9609AB5848A03CA374B567E121F61D3C2CE93919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:21:46:82:5d:91:f4:ba:1b:8d:6b:5f:a2:
                    55:4d:39:cb:a0:f2:ba:51:45:cb:a4:0f:98:a1:0b:
                    d0:22:22:a4:b2:74:f1:d9:99:4c:3c:f6:f4:1d:5b:
                    6d:c6:fb:f7:e9:c7:fb:97:07:c8:6e:6b:d6:85:2d:
                    71:7e:87:50:02:7e:8f:fc:cb:ec:e7:6b:3a:75:24:
                    27:1e:fb:a9:66:e8:0b:9a:de:ec:d8:4f:05:21:74:
                    91:49:ee:5d:f1:7a:c7:13:a5:60:73:66:ad:f7:a3:
                    40:dc:4f:00:13:0f:e0:84:ca:8f:62:d4:5d:79:9d:
                    c2:c0:21:12:3b:a9:51:1b:ef:a6:7b:47:80:ac:82:
                    5c:29:95:72:16:35:18:7f:d4:e7:61:33:63:e6:c8:
                    c7:2a:33:d4:8a:45:e9:f6:93:7e:86:a3:8d:c7:6e:
                    50:01:f4:29:d8:0b:06:70:83:c9:66:1c:0a:d8:ab:
                    ce:be:3a:7b:ec:5d:35:0d:63:f0:b9:13:62:45:78:
                    f6:c8:a0:1f:26:d2:66:4d:26:5d:de:be:56:7d:03:
                    59:3f:73:84:0c:04:e6:b6:b9:34:fd:93:fd:7a:2d:
                    90:50:56:9d:62:4e:3b:cc:09:3c:26:df:e1:f4:f1:
                    9b:08:e9:a0:45:15:79:99:d8:c8:2e:52:58:bb:dd:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:AB:58:48:A0:3C:A3:74:B5:67:E1:21:F6:1D:3C:2C:E9:39:19
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/lgmrWEigPKN0tWfhIfYdPCzpORk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c3:34:35:17:f4:00:d5:a9:6a:1c:b3:26:ed:54:21:62:5d:33:
         08:36:81:69:ab:30:1c:bf:c4:0f:45:ce:58:bf:98:72:cc:7a:
         5a:7b:8f:45:4c:98:64:e3:92:e4:4f:31:5a:cb:d3:6e:3a:71:
         f7:aa:dc:a9:a2:36:75:d2:19:29:15:43:c5:24:c0:a0:92:49:
         ad:e7:db:58:b6:fa:da:43:d8:6f:c8:ae:88:91:9c:c7:bb:b7:
         7e:21:47:44:b5:c8:80:1c:02:de:04:1f:04:15:61:e7:b4:9b:
         a8:a7:7a:ee:37:22:e7:83:37:e3:7f:d4:b7:1b:34:2a:a2:a2:
         d0:68:ac:37:90:65:ff:85:42:1f:f6:85:f9:f0:5b:1c:98:5a:
         95:ca:3c:5b:a7:aa:29:0b:7d:63:ae:c9:f0:50:a6:6f:30:ec:
         c5:0b:74:64:cd:69:39:2b:25:a1:41:be:3c:b5:64:3f:7a:94:
         5e:93:5f:ee:76:25:e6:a3:20:f0:4b:a3:90:f9:1f:35:03:c1:
         4e:94:0b:61:e7:10:19:93:03:9a:20:8c:9e:d9:70:03:37:3d:
         70:be:a2:49:54:a3:2c:e8:bc:64:9a:a4:29:93:36:66:f8:79:
         f7:69:82:9b:b1:b0:9b:4b:b0:b1:2b:10:76:23:05:41:53:8a:
         bc:c1:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org