Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/A-DQOww-u7HDqQRZDDymUW_6bAk.roa
File:                     A-DQOww-u7HDqQRZDDymUW_6bAk.roa (raw, json)
Hash identifier:          dB2UaulpJ/z+/1P15iHS+9VMrKnfm/Iv1fVnq0beP2I=
Subject key identifier:   03:E0:D0:3B:0C:3E:BB:B1:C3:A9:04:59:0C:3C:A6:51:6F:FA:6C:09
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       013B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/A-DQOww-u7HDqQRZDDymUW_6bAk.roa
Signing time:             Fri 05 Aug 2022 05:06:55 +0000
ROA not before:           Fri 05 Aug 2022 05:06:55 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        219.160.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:06:55 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=03E0D03B0C3EBBB1C3A904590C3CA6516FFA6C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:47:b4:56:b1:1b:c4:57:bb:35:2f:df:90:
                    43:7a:3d:60:cc:a5:1b:f0:c3:bf:d2:fd:6a:56:50:
                    9e:cc:ec:07:86:c2:f5:68:fd:6f:75:35:5f:e9:f6:
                    60:e9:22:33:ed:91:a8:3f:27:06:ad:b5:7d:b6:fe:
                    46:fb:57:54:b6:24:8a:67:7e:0d:a1:4e:cc:49:a4:
                    3e:59:9e:25:fc:35:c6:85:ca:c9:33:1d:6d:3d:8c:
                    9b:50:81:fe:80:60:83:42:6a:82:5c:0e:34:7a:f5:
                    94:cc:0f:b0:b7:94:ae:bf:05:2c:4e:a3:41:b9:d0:
                    a8:a3:2d:96:32:cb:94:76:46:35:97:cd:18:83:91:
                    fc:a4:88:e5:8e:a5:21:8e:3e:d5:c9:4b:8d:e8:07:
                    7f:ec:ef:ce:ed:c4:c7:2a:c2:36:4a:4e:0a:45:98:
                    c1:6b:d5:ba:ff:7e:be:11:10:0f:2a:39:4d:e2:2b:
                    46:ca:0c:f7:02:a0:45:a5:35:41:d3:88:0a:88:0e:
                    03:cf:66:dc:ac:df:52:f8:f0:97:a6:0b:4a:85:2d:
                    63:3b:0d:55:9e:af:64:b2:c6:6f:5c:41:9c:e3:d3:
                    0c:45:80:8c:4f:01:df:ee:81:0d:ea:4a:d5:5a:9f:
                    68:08:38:df:25:1b:88:0f:f9:78:d8:00:e4:f9:8e:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:D0:3B:0C:3E:BB:B1:C3:A9:04:59:0C:3C:A6:51:6F:FA:6C:09
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/A-DQOww-u7HDqQRZDDymUW_6bAk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         20:a6:9e:45:dc:e3:60:11:93:ce:1a:8f:82:a9:a2:da:7c:4c:
         51:75:ac:29:4e:26:ee:f8:31:b8:30:6c:4f:a1:db:c8:70:d9:
         34:3d:3b:5a:9d:ed:b9:8a:6f:4b:8b:16:77:08:f0:1e:38:d6:
         d5:a7:e8:51:1d:b0:7d:fa:1e:e2:dc:d8:1e:6f:a9:af:50:c8:
         a5:5b:ca:94:aa:7b:24:67:da:59:64:95:1b:72:12:35:cc:cf:
         97:fc:eb:b9:45:31:9b:d1:bd:bb:a8:45:47:5d:9b:8d:9d:ec:
         63:95:00:e6:92:42:d2:97:0e:7f:73:3b:4e:34:a8:d9:62:90:
         fc:a1:4a:7b:64:79:38:a9:07:6a:b2:02:87:bb:10:5f:e7:fa:
         e3:db:0c:b5:75:40:d1:c6:97:64:b5:23:46:76:2b:8c:7b:41:
         6f:9c:c0:d6:77:ea:7c:de:be:96:ce:79:91:27:c7:7a:bc:f2:
         24:e7:ff:36:93:0a:ed:c9:0b:ba:da:37:2f:f7:f6:21:04:50:
         de:c0:18:95:63:0f:44:f8:dd:8a:86:e2:01:02:89:04:59:aa:
         dc:4b:c6:6e:00:8f:75:09:1f:6c:95:1a:c5:1a:fd:c2:1f:2a:
         8f:81:12:a2:a7:fb:0c:dd:bb:6f:81:fc:76:ab:5d:15:7f:77:
         1c:92:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org