Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/Rf9TGMIXJQv71Na7h-TbskwEu04.roa
File:                     Rf9TGMIXJQv71Na7h-TbskwEu04.roa (raw, json)
Hash identifier:          2o1LKJvNFi2SDp2QgCkgKmS/eRtonEcW/p3ANCPjjpM=
Subject key identifier:   45:FF:53:18:C2:17:25:0B:FB:D4:D6:BB:87:E4:DB:B2:4C:04:BB:4E
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       3D
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Rf9TGMIXJQv71Na7h-TbskwEu04.roa
Signing time:             Mon 19 Apr 2021 04:48:08 +0000
ROA not before:           Mon 19 Apr 2021 04:48:08 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     38631
IP address blocks:        43.223.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Apr 19 04:48:08 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=45FF5318C217250BFBD4D6BB87E4DBB24C04BB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:57:7e:ea:c6:ec:93:eb:09:44:45:92:ad:
                    16:f0:39:bd:f2:54:e0:90:04:d3:25:5d:aa:97:6a:
                    bc:bb:0a:2a:02:6c:65:f7:16:42:79:f9:73:b0:92:
                    3c:61:6b:b7:3f:76:68:f6:cd:66:43:60:ed:f9:47:
                    cd:a8:a3:7b:90:0b:44:67:ec:af:a8:0e:e5:31:a2:
                    22:7d:64:6d:34:a7:aa:68:c4:1f:b0:66:67:f4:08:
                    98:14:97:b2:5e:9e:7e:82:89:45:f5:c5:19:41:5d:
                    5d:73:2f:86:04:cb:cc:c9:b6:72:89:6e:6d:37:18:
                    04:83:fc:5b:75:bd:d4:f5:17:7b:42:bb:e7:16:ee:
                    9c:16:c6:5b:6a:10:4f:c3:f7:87:59:82:fb:6a:fa:
                    f2:a5:08:05:92:b2:92:a1:51:11:3c:9a:c2:73:1d:
                    0c:9a:c7:c3:87:e9:fe:e4:2f:aa:b6:d0:4b:27:fb:
                    5e:23:db:df:a7:d1:e7:87:e0:86:45:b0:f9:f9:a7:
                    73:0d:f8:de:7b:1f:61:2b:61:ab:08:17:43:d8:1a:
                    8d:dc:11:81:7d:0d:68:b0:74:db:d1:cb:8a:d8:75:
                    80:10:4c:bb:2e:dc:d7:e7:3d:7f:c4:18:3d:a5:94:
                    73:4f:67:c6:aa:6f:4d:d5:07:b6:a3:f4:b1:ae:7c:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:53:18:C2:17:25:0B:FB:D4:D6:BB:87:E4:DB:B2:4C:04:BB:4E
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Rf9TGMIXJQv71Na7h-TbskwEu04.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:67:d0:40:8b:b7:fc:1b:1f:98:89:ac:9b:0e:1c:81:80:12:
         68:4f:30:98:8f:95:dc:82:1a:d3:ea:2f:9a:9e:28:d5:b9:c5:
         df:87:d1:e9:7c:4f:fe:c1:b8:0f:32:7f:e4:4c:ac:39:e3:f9:
         4b:8b:83:4a:3b:ef:b5:b7:e2:82:ea:5f:98:5c:ea:87:07:3e:
         b6:ad:8d:e2:4d:62:70:30:59:aa:94:f8:a4:a2:08:3c:fd:16:
         6e:a3:8d:3c:86:8a:04:44:27:26:30:93:86:e6:2d:61:29:dd:
         98:53:50:e7:68:b0:5e:89:a8:31:40:8d:8d:ff:7f:8c:24:14:
         73:79:df:a9:b7:14:19:b9:ca:8c:62:b3:77:7e:a2:c5:0c:a6:
         da:ee:f5:09:de:f4:db:60:e7:8f:bb:64:53:67:3b:eb:8c:d7:
         b6:c8:31:2a:0c:7f:d2:ba:44:7d:7b:8c:c6:96:02:08:2b:38:
         14:9c:c3:a3:c3:12:7f:ca:be:9f:d3:8b:ab:b2:2d:c8:8e:76:
         bb:27:17:12:52:a8:d3:04:ab:5d:10:08:b9:ef:72:98:ec:8b:
         76:a1:16:a6:c4:a1:55:e0:0b:61:dc:43:48:ee:26:ec:15:7a:
         db:f6:75:ce:88:6b:28:7a:18:69:69:34:8e:7b:90:ba:a1:a3:
         b3:90:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org