Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/w0CULqIo-jTb6Q3whgCINdyBQt8.roa
File:                     w0CULqIo-jTb6Q3whgCINdyBQt8.roa (raw, json)
Hash identifier:          Ua05c3c78Bed5jqqzcWad2bn5/DnYiDcNV5+UT16mLg=
Subject key identifier:   C3:40:94:2E:A2:28:FA:34:DB:E9:0D:F0:86:00:88:35:DC:81:42:DF
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       40
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/w0CULqIo-jTb6Q3whgCINdyBQt8.roa
Signing time:             Wed 18 Aug 2021 07:54:30 +0000
ROA not before:           Wed 18 Aug 2021 07:54:30 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        61.203.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:30 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=C340942EA228FA34DBE90DF086008835DC8142DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:d5:3b:01:3d:8a:8e:93:c6:e0:26:37:1d:
                    3d:1d:b8:5d:0b:7a:d4:60:b2:8b:e1:9f:cf:40:48:
                    0c:45:69:14:42:83:83:ff:23:9d:34:2c:68:be:a7:
                    74:96:96:23:da:72:09:f6:b2:4c:b5:ff:ae:c0:60:
                    d2:31:91:bf:e5:7c:41:57:7e:75:3f:f6:cb:c3:38:
                    fb:a6:b0:73:53:12:00:86:50:16:f5:9e:fd:00:24:
                    54:e4:3e:a6:f9:58:70:5f:8d:58:b5:17:29:40:ff:
                    23:95:e7:42:cf:a6:b8:d5:71:88:8a:b6:68:ee:f5:
                    19:9c:84:18:6d:92:2c:b7:68:5b:bb:2d:b5:be:cc:
                    ff:1b:31:91:3e:2b:41:41:54:47:29:4b:4b:c9:6a:
                    63:00:ee:6b:16:69:78:a1:fe:ee:74:aa:43:23:8c:
                    e1:e0:c8:36:67:70:ae:d8:5f:68:7a:9e:c6:64:04:
                    66:5e:6a:53:0c:9e:b5:eb:69:fa:60:82:06:3f:09:
                    65:de:d9:bd:bc:44:9e:ab:cb:65:3f:ae:75:02:70:
                    70:fa:a3:6a:07:7e:36:28:b8:0f:a9:a4:4d:b4:d6:
                    f9:4d:51:5e:21:1c:68:96:b5:5f:ec:05:e4:c5:d1:
                    91:ee:4c:ad:a9:4b:58:f0:c9:81:62:56:a7:e9:e0:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:94:2E:A2:28:FA:34:DB:E9:0D:F0:86:00:88:35:DC:81:42:DF
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/w0CULqIo-jTb6Q3whgCINdyBQt8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c4:86:fe:7c:4f:68:78:32:20:9c:6e:d4:ed:6d:82:a7:f1:3d:
         6d:5f:79:bd:74:24:45:f0:4b:89:e7:0e:c1:9c:ba:0f:a8:c3:
         0a:e7:ef:9e:e2:06:ef:c8:ea:b7:29:b5:61:ec:e4:fd:09:3b:
         37:4f:6c:a0:46:a6:00:b8:f0:74:37:a9:2b:6f:98:bd:02:bb:
         88:cb:4f:1b:c8:9a:8d:37:af:39:7f:61:d6:8b:5e:64:4d:d4:
         9d:8d:02:3d:32:62:dd:a5:31:21:54:de:01:ab:13:2b:bb:c0:
         a3:69:3b:2d:7d:25:25:29:00:5a:bf:68:ff:69:3c:84:82:8e:
         27:fe:14:c8:86:c1:da:60:80:67:6d:f2:b2:bd:85:50:34:a1:
         c0:aa:65:f0:a5:ef:0a:0d:51:46:27:45:28:60:41:23:1a:4b:
         e0:08:c0:41:6b:35:71:22:9b:08:29:da:c4:78:d4:fa:ed:cf:
         d7:cf:ba:cf:d0:14:ea:2a:8c:7f:1a:8d:e4:d4:ab:d5:78:b1:
         e3:be:52:b8:a6:02:62:03:5d:cb:a4:d7:68:60:94:53:ca:ce:
         8a:d3:6b:ba:e7:28:ee:15:bf:a7:93:40:c2:e3:9e:f5:02:32:
         c6:cf:52:77:87:d7:4c:f0:89:51:b0:b8:54:2f:d8:d1:61:6f:
         f7:53:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org