Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/sJ09aNFuplh9QJE0H78J4HWe84Y.roa
File:                     sJ09aNFuplh9QJE0H78J4HWe84Y.roa (raw, json)
Hash identifier:          Ci2455RhrqYGkV0DeLNUJN9ydN+7tH9rtdTJQ3vh/DQ=
Subject key identifier:   B0:9D:3D:68:D1:6E:A6:58:7D:40:91:34:1F:BF:09:E0:75:9E:F3:86
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       2E
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/sJ09aNFuplh9QJE0H78J4HWe84Y.roa
Signing time:             Wed 18 Aug 2021 07:54:25 +0000
ROA not before:           Wed 18 Aug 2021 07:54:25 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        202.225.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:25 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=B09D3D68D16EA6587D4091341FBF09E0759EF386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:ca:a0:a8:d1:ba:c3:a6:2a:d6:ed:3c:7a:
                    a5:fa:dd:fa:74:09:f1:82:c4:75:66:d4:7f:23:a5:
                    38:9c:fe:18:88:df:69:b3:ed:44:13:b1:cc:fe:82:
                    55:a0:ca:05:13:06:26:95:63:60:21:d5:d2:e1:99:
                    8a:17:3b:3e:58:90:db:72:bc:9e:85:08:a9:c6:bf:
                    a3:af:85:e1:f6:03:82:5a:2f:70:21:84:0c:a4:3a:
                    8b:1a:fd:02:17:94:de:05:d4:6d:25:5b:dc:14:c0:
                    9a:3b:c2:71:5e:8f:39:85:cf:c0:e6:1c:27:41:c7:
                    d1:57:a3:d4:b9:40:c4:98:93:ec:c6:dd:bb:3d:6a:
                    28:b4:8d:73:3c:01:9b:8b:ad:4a:40:ed:63:3b:47:
                    4f:ef:a8:fc:34:ca:6e:4d:dd:ed:51:75:e1:80:16:
                    33:90:f4:4e:07:d8:6a:e4:ff:ce:9c:c8:42:d2:90:
                    0e:e1:6e:d1:0c:e8:dd:3a:a5:d4:8c:b7:cd:fd:9a:
                    df:34:07:14:4e:63:4f:2c:0e:b0:bd:6e:17:6d:1e:
                    4e:e8:55:f6:43:38:24:6b:ae:70:ec:9d:39:27:08:
                    91:7a:bd:50:49:2c:ad:39:83:3b:bf:e3:37:87:ce:
                    97:49:81:ca:0b:ee:2c:2b:db:07:74:47:47:a0:11:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:3D:68:D1:6E:A6:58:7D:40:91:34:1F:BF:09:E0:75:9E:F3:86
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/sJ09aNFuplh9QJE0H78J4HWe84Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:25:86:dd:25:d0:c8:d9:f6:a3:ef:ad:5a:fe:04:9f:e6:
         6e:f4:80:2e:7e:0d:52:4f:af:00:64:41:23:df:17:0f:df:0a:
         ee:a6:8a:2c:9d:b8:24:57:42:01:7e:c6:c9:7c:a5:23:c5:a3:
         c3:df:61:b0:02:61:e0:c1:9d:f6:ff:22:e8:d9:b5:ca:78:01:
         53:fc:ca:fb:f5:4f:53:08:d7:eb:b3:63:e3:03:0e:3c:76:b1:
         61:97:e4:0e:28:eb:0f:e2:08:68:fb:a8:94:bc:ef:3f:0f:c9:
         31:4e:c0:7a:27:96:56:ca:32:02:2f:18:bb:5a:83:9d:5d:d1:
         33:f2:f1:6c:f6:70:c2:35:4e:58:be:4b:f2:05:51:16:aa:c7:
         50:3b:e3:48:ef:04:85:4b:32:85:1c:0c:21:b0:67:02:5d:9f:
         b5:d8:55:b9:d1:c0:15:81:7d:1a:f1:99:8f:91:38:83:8e:37:
         62:40:b5:7d:4e:bd:e9:ac:a0:ac:d4:db:12:95:26:48:74:18:
         69:4e:3d:07:59:1f:f4:1a:11:34:51:bd:59:ad:9b:8b:44:80:
         23:eb:9a:cc:51:2e:ab:42:c5:4b:e2:38:91:11:17:4a:05:00:
         bb:ba:7b:4f:83:9e:c2:8f:78:5a:41:10:fd:27:76:d0:d0:3f:
         4c:c1:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org