Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/N-ojZZudvebSjeA_qJAXeIvHbkE.roa
File:                     N-ojZZudvebSjeA_qJAXeIvHbkE.roa (raw, json)
Hash identifier:          IL3+X0t3nxw5v2JoktqzwCzgR9z22AFWLuBmltYA3lY=
Subject key identifier:   37:EA:23:65:9B:9D:BD:E6:D2:8D:E0:3F:A8:90:17:78:8B:C7:6E:41
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0160
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/N-ojZZudvebSjeA_qJAXeIvHbkE.roa
Signing time:             Mon 01 May 2023 01:28:20 +0000
ROA not before:           Mon 01 May 2023 01:28:20 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        122.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:20 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=37EA23659B9DBDE6D28DE03FA89017788BC76E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8f:9e:28:d6:cf:99:cf:e2:bb:40:aa:ea:a8:
                    d9:5f:f7:3d:f2:74:22:1d:02:b2:a0:0f:38:58:f7:
                    6a:b5:fd:21:f9:42:83:2b:cf:88:fa:37:93:7b:67:
                    b1:10:7d:6c:c6:bb:62:79:ae:54:a7:86:f9:18:52:
                    c9:9f:7e:12:33:96:3b:ae:a2:82:6b:1a:27:ba:9b:
                    81:4c:bc:9c:a9:ae:46:5f:e8:b9:42:e2:60:2b:93:
                    cb:80:59:46:e1:30:ea:72:83:1d:cb:ca:64:97:c1:
                    12:bc:c7:74:16:b8:24:61:8a:4d:17:03:f6:ad:82:
                    43:9a:41:6f:bf:9c:4e:91:8a:69:bb:75:dc:80:bd:
                    e8:90:ba:1e:d9:8b:48:4f:97:0a:4f:35:45:4d:43:
                    45:e7:9c:88:7f:9f:1b:ed:dd:aa:7e:fb:ae:f2:7d:
                    68:51:7d:b3:47:b6:fc:4f:c8:5e:b6:ca:d2:cb:24:
                    28:1a:21:45:91:8a:37:d2:db:5f:53:e4:fb:de:60:
                    93:f4:61:79:21:f9:0b:54:12:6e:75:19:6e:32:60:
                    85:61:d9:6a:71:54:36:2e:17:65:1a:60:91:88:80:
                    4a:21:c8:f9:71:6c:21:a8:1c:57:6a:fe:91:09:7b:
                    41:16:cb:63:a6:9e:ad:be:a0:79:ae:89:ea:1f:36:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EA:23:65:9B:9D:BD:E6:D2:8D:E0:3F:A8:90:17:78:8B:C7:6E:41
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/N-ojZZudvebSjeA_qJAXeIvHbkE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:88:0b:ca:1b:4e:92:8b:19:a4:ad:1a:4c:4e:d4:bc:fe:56:
         65:89:fa:b8:69:01:fe:f1:9f:e8:13:92:cd:06:b8:17:0f:64:
         9f:8f:9e:c1:8e:80:3e:da:e1:8f:83:43:23:11:40:b6:eb:c7:
         44:45:ec:91:2b:62:00:fd:4a:00:cc:93:d4:dc:cf:51:82:33:
         c1:a4:d6:fd:c1:ec:ac:28:ab:ce:ce:19:4f:38:94:41:6f:54:
         a3:63:64:ca:fc:bf:7f:f1:87:05:46:b8:1c:96:f3:4b:41:41:
         3b:8a:b1:96:cf:5d:fc:d8:b3:ba:91:3e:09:86:8e:28:6e:ea:
         ae:5d:63:34:e2:eb:39:a5:94:c7:71:01:5a:3a:fc:08:6f:2a:
         d4:81:82:98:4c:92:ac:27:01:99:ab:ad:99:fc:16:c2:e5:ce:
         7c:7a:b6:ad:e5:6d:35:30:25:a7:06:fb:9a:b1:d3:28:94:a9:
         96:29:ca:92:18:66:ed:ca:bd:11:9e:11:2b:6a:23:21:c2:64:
         bf:e4:ca:c4:8f:a1:d9:e6:fc:30:60:fe:85:37:ad:44:08:93:
         79:b9:7b:95:a9:f4:da:1c:64:c7:b7:09:0e:42:71:5e:ea:c4:
         e8:26:82:ad:b2:37:71:ed:26:06:36:da:a6:e3:3f:d2:0f:3e:
         03:a4:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org