Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7iyqbhqqa2Fiev4Nknz-QTRAdNA.roa
File:                     7iyqbhqqa2Fiev4Nknz-QTRAdNA.roa (raw, json)
Hash identifier:          AeddqvSzZ4BMD5g1I9zNJyjNiGb+ul5JyVtWMk92FIs=
Subject key identifier:   EE:2C:AA:6E:1A:AA:6B:61:62:7A:FE:0D:92:7C:FE:41:34:40:74:D0
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       013F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7iyqbhqqa2Fiev4Nknz-QTRAdNA.roa
Signing time:             Fri 05 Aug 2022 05:10:50 +0000
ROA not before:           Fri 05 Aug 2022 05:10:50 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        220.96.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:10:50 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=EE2CAA6E1AAA6B61627AFE0D927CFE41344074D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:e0:dd:a3:ec:09:09:2c:66:bc:58:cd:eb:
                    bf:21:f2:af:14:b7:1a:f7:9a:c3:02:a3:22:ae:aa:
                    4a:17:38:93:a6:84:13:e6:36:71:f8:e5:a7:34:17:
                    38:ec:f8:7b:6c:f2:5b:74:37:eb:4b:2a:cc:91:4c:
                    41:45:d4:12:61:bf:e9:11:91:e0:f5:c8:8f:d3:32:
                    21:29:ab:1b:d5:6c:59:66:ad:78:71:fe:01:6e:42:
                    84:c6:f8:11:46:a5:6d:b4:e4:e5:81:b4:4c:9e:b7:
                    71:35:dc:f4:eb:2d:41:cc:7f:dd:53:94:da:63:64:
                    d3:f0:3a:6a:b0:f9:25:15:c3:b0:4a:df:60:60:20:
                    32:13:b4:3d:a2:98:80:eb:e2:99:e0:c3:ad:93:64:
                    0d:b7:44:2d:a5:dc:02:24:d1:e9:35:98:88:71:59:
                    24:38:13:b7:64:4b:75:ce:d6:4e:b3:32:78:3d:27:
                    f3:2a:4a:bf:9b:c7:93:28:58:67:b3:3c:4b:c9:a7:
                    3a:0e:78:79:e2:24:88:65:b2:ad:b7:b3:1a:c4:39:
                    26:6e:75:2a:33:95:68:d9:25:59:90:77:42:0f:79:
                    56:e8:fa:b5:2a:97:9e:a2:d9:6c:b4:0c:1c:cc:14:
                    46:64:c2:78:ad:70:c8:e0:6c:27:ca:aa:f4:f6:89:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2C:AA:6E:1A:AA:6B:61:62:7A:FE:0D:92:7C:FE:41:34:40:74:D0
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7iyqbhqqa2Fiev4Nknz-QTRAdNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:f5:59:1d:ff:20:08:54:5d:c3:e3:8e:a0:2e:85:34:31:
         ea:0b:3d:1f:4f:4c:5c:cd:8b:35:76:08:ec:83:61:80:a6:f4:
         a4:95:51:b3:9b:6e:6b:5d:c8:5d:ef:a4:a9:71:bc:13:e2:3f:
         d2:70:ad:69:55:6c:e3:5c:25:46:ec:ec:9e:60:46:c7:f9:89:
         ac:fc:7b:b0:9d:3a:fa:c4:b3:3f:bb:bf:ed:e6:43:a3:83:95:
         1b:f1:e9:42:24:2b:f6:fc:62:09:21:ef:13:82:02:7a:47:42:
         8d:19:e2:6d:e7:04:f7:2f:0c:f3:3a:e2:23:11:76:57:81:5c:
         1c:35:00:16:eb:89:4c:04:20:37:2c:4c:af:8a:12:f3:be:e5:
         b9:bc:f8:91:fa:68:82:b8:f6:c4:7c:60:df:d7:72:b8:09:3d:
         b0:a5:98:75:be:7a:e2:16:94:2b:30:66:d7:77:5b:e0:44:a9:
         a2:6b:2f:6b:37:51:09:3f:2c:91:5b:6e:de:b7:b2:d2:76:89:
         e2:1a:87:cb:e5:a0:30:85:6e:83:53:cd:e5:d4:58:a0:ab:a6:
         bb:32:8f:5c:d3:5c:19:f1:b1:9a:3f:71:27:b6:a8:5b:2d:b1:
         84:62:b2:f5:56:a7:f7:77:86:51:fe:1e:8b:64:93:a3:95:5b:
         2f:5c:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org