Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/BD6ICA_9cZ7X_pYyLTanBqtwXf8.roa
File:                     BD6ICA_9cZ7X_pYyLTanBqtwXf8.roa (raw, json)
Hash identifier:          +czsdATC4a3txFKRLsJm/96V8HXwmbM+Kudt/DiBh5g=
Subject key identifier:   04:3E:88:08:0F:FD:71:9E:D7:FE:96:32:2D:36:A7:06:AB:70:5D:FF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0113
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/BD6ICA_9cZ7X_pYyLTanBqtwXf8.roa
Signing time:             Fri 10 Jun 2022 03:38:36 +0000
ROA not before:           Fri 10 Jun 2022 03:38:36 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        125.170.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:38:36 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=043E88080FFD719ED7FE96322D36A706AB705DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:d1:e6:7d:10:99:12:ff:c8:c8:c5:53:25:
                    ef:48:b9:cc:83:d4:24:0d:49:a0:b2:40:ea:33:47:
                    86:04:1d:87:b9:70:f1:c0:80:2a:03:6f:e9:40:de:
                    fd:3b:5b:1a:dd:ed:d4:59:4d:03:c3:bf:0b:ee:d0:
                    d4:8c:e8:59:69:bf:de:e5:00:34:15:73:ce:71:f0:
                    70:71:2a:06:4f:5d:45:d5:d4:96:a7:92:f4:18:f9:
                    a2:29:ad:a5:1c:99:13:fc:c1:05:48:cf:fa:e2:a0:
                    43:39:c5:11:7e:a6:34:1f:8b:ec:08:26:50:e3:6c:
                    93:64:b0:e3:76:4a:29:bb:87:3a:55:3f:7b:7a:33:
                    0b:41:b6:e7:a0:72:4e:29:3b:e9:28:b5:f2:48:ae:
                    b2:ad:8c:53:27:c7:2e:17:21:10:90:70:f5:24:2c:
                    1d:89:ae:d9:3d:c3:dc:80:3d:1e:d9:55:bd:85:51:
                    56:46:73:66:2b:40:7b:3f:58:54:28:b7:57:f1:34:
                    cd:42:c2:80:13:c0:73:89:f3:78:ca:55:40:c4:e1:
                    90:5d:86:ed:7f:86:c7:34:58:e2:6b:a0:db:e5:b5:
                    ee:15:09:0a:14:7b:b2:5c:e7:45:e4:eb:af:16:fa:
                    cb:d3:c5:cb:5f:7b:77:06:ad:4e:23:05:0c:6b:77:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3E:88:08:0F:FD:71:9E:D7:FE:96:32:2D:36:A7:06:AB:70:5D:FF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/BD6ICA_9cZ7X_pYyLTanBqtwXf8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:78:d4:fc:48:8d:11:19:27:ea:5e:41:39:24:f3:03:37:6b:
         cc:5d:c0:4f:00:31:ce:ab:07:0a:7c:29:10:78:55:ea:11:6f:
         f1:ec:f7:06:2b:67:ee:51:12:d2:97:d4:42:bc:c5:45:80:2d:
         0b:48:a4:69:e8:4a:57:ce:35:bc:55:56:f9:f1:b6:5e:41:f7:
         bf:31:78:d8:32:78:d2:a1:ba:60:be:44:51:ac:66:88:55:93:
         15:8f:47:f2:e6:fd:08:f6:d9:20:ea:72:bc:c2:c6:ac:4c:22:
         d3:0c:89:26:33:b3:46:2b:41:05:41:63:37:04:e7:58:a3:cf:
         cf:ff:63:77:f1:05:c9:c2:ae:e5:7a:0d:e1:d6:b3:b5:17:41:
         1e:35:a0:08:02:a8:44:d8:51:12:9b:77:13:1a:80:87:f4:6f:
         ac:10:27:34:0a:ec:c3:62:88:2b:a0:07:35:27:00:b0:fb:6c:
         75:c7:08:34:31:86:46:0e:ed:cc:77:91:01:d1:bc:7e:b8:8b:
         55:b7:c2:c1:31:d1:f9:16:5b:fa:1c:77:99:8a:45:30:ae:fc:
         cb:5d:9d:37:45:98:be:da:2b:7f:cc:58:b9:46:60:74:d2:9f:
         89:a0:0c:24:13:23:c0:29:89:fa:4f:62:b8:1a:84:37:ca:08:
         22:35:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org