Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/omVJk8f8tvIbzqtYJAGOWHXAIKc.roa
File:                     omVJk8f8tvIbzqtYJAGOWHXAIKc.roa (raw, json)
Hash identifier:          qRVx2nW0MwnzeK+oqGcRZfWPpqfFQKmr27PZltSncwE=
Subject key identifier:   A2:65:49:93:C7:FC:B6:F2:1B:CE:AB:58:24:01:8E:58:75:C0:20:A7
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       05
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/omVJk8f8tvIbzqtYJAGOWHXAIKc.roa
Signing time:             Thu 12 May 2022 01:11:12 +0000
ROA not before:           Thu 12 May 2022 01:11:12 +0000
ROA not after:            Fri 12 May 2023 00:42:17 +0000
asID:                     131954
IP address blocks:        121.58.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: May 12 01:11:12 2022 GMT
            Not After : May 12 00:42:17 2023 GMT
        Subject: CN=A2654993C7FCB6F21BCEAB5824018E5875C020A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:50:97:41:c9:c2:19:1d:e6:2a:5c:25:cf:
                    ba:83:0c:d5:54:d1:a4:52:14:ba:15:ca:48:83:68:
                    4f:8c:bb:19:db:84:ed:8c:6a:ba:d4:ec:da:9c:36:
                    3d:ae:ba:d6:01:e1:cb:92:59:dc:64:a1:ae:01:06:
                    80:87:7f:d9:fb:07:7f:33:e4:fd:75:3a:7e:aa:de:
                    88:63:4e:1d:e6:f4:e4:58:ba:4f:e7:a4:aa:ca:82:
                    5e:21:3a:86:b5:1e:ff:d6:d6:c4:67:cc:97:f7:5e:
                    fb:1c:71:73:94:66:3b:cf:98:31:44:5f:ce:4f:fe:
                    65:d0:40:f0:8c:36:fa:c1:93:3b:52:87:e3:fc:b6:
                    f9:69:51:89:52:a2:fd:d8:56:51:10:e7:46:a8:28:
                    50:6a:dd:57:6a:c7:b2:84:33:a1:0a:f7:9d:8d:60:
                    7f:21:ff:56:25:08:44:0d:d7:5e:bb:fd:79:96:0b:
                    42:07:8a:ae:07:59:9f:4c:9b:87:b3:c7:c8:2c:56:
                    e1:19:91:e1:13:b2:a4:12:9a:1e:f1:0f:d7:ab:16:
                    2d:07:9b:69:fd:4a:27:3d:af:fd:c8:48:3f:f3:3c:
                    37:f6:dc:71:62:3d:87:76:76:b8:6e:b3:37:b8:36:
                    59:2a:6d:64:e5:e8:10:71:a4:75:78:b7:12:6b:e0:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:49:93:C7:FC:B6:F2:1B:CE:AB:58:24:01:8E:58:75:C0:20:A7
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/omVJk8f8tvIbzqtYJAGOWHXAIKc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.58.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:94:38:a2:65:04:79:67:6d:c1:5f:37:07:30:40:9a:d8:
         a8:1a:34:07:f0:9d:1e:18:c3:a7:27:d9:ce:52:46:d0:ef:9b:
         08:cc:02:1c:2a:31:ae:75:8c:9f:1b:0d:63:c3:de:40:d3:ed:
         87:bc:c5:8b:1d:3d:c2:d7:4e:95:6b:50:4d:4e:ab:99:44:c1:
         1f:22:c9:96:66:2a:83:21:e7:58:af:1a:0a:d3:44:ce:99:f1:
         5a:cd:41:ce:0e:ea:a6:07:06:05:2e:13:34:e5:41:d0:d9:13:
         ee:f4:7c:af:38:37:ba:1b:fa:51:13:a9:48:db:10:ec:e0:0b:
         47:f5:11:f0:7e:5c:a7:c9:75:22:6f:f4:39:fa:4a:5a:1a:f0:
         9b:ec:72:8e:59:44:56:1f:cc:24:75:0b:e0:c8:27:f9:be:66:
         16:82:6b:7a:dc:ea:64:26:4a:af:6f:48:05:80:ab:d3:2e:1e:
         bf:11:9c:3c:7a:80:39:34:3c:10:04:87:b2:ed:e4:51:a8:d8:
         42:1b:eb:94:9b:51:5a:65:b2:79:96:95:1c:8e:3c:e7:ca:b7:
         20:32:a5:b8:b1:a0:87:01:f3:c5:84:3f:96:89:8b:1d:e4:6a:
         1d:d7:b6:90:f9:87:5b:6b:1f:44:35:45:f0:27:c0:90:ca:3e:
         cf:7e:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org