Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/E_eS9wXEt8J5jgHNq9UwD8bB1zU.roa
File:                     E_eS9wXEt8J5jgHNq9UwD8bB1zU.roa (raw, json)
Hash identifier:          IMpdsTMGKNbkFtBVmNPMTubJPELmSEBTDL9v58rjBgk=
Subject key identifier:   13:F7:92:F7:05:C4:B7:C2:79:8E:01:CD:AB:D5:30:0F:C6:C1:D7:35
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       10
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/E_eS9wXEt8J5jgHNq9UwD8bB1zU.roa
Signing time:             Mon 20 Feb 2023 03:36:53 +0000
ROA not before:           Mon 20 Feb 2023 03:36:53 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:36:53 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=13F792F705C4B7C2798E01CDABD5300FC6C1D735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:e4:a6:df:26:fb:fe:90:c2:7c:c2:1d:55:
                    40:59:70:47:09:14:e6:f4:95:91:d6:0b:e1:d6:3c:
                    36:5b:74:94:74:53:bd:3a:9b:b1:44:af:8e:e2:e4:
                    aa:f1:78:95:90:c4:ae:1a:50:49:10:c6:4f:c1:6c:
                    09:31:b8:93:99:b1:b9:24:0d:32:81:94:12:3d:fc:
                    a5:29:7f:95:29:c7:a8:50:13:86:26:88:80:ca:c8:
                    6a:f6:e4:25:51:fa:df:02:81:1e:f6:7b:5b:0b:9d:
                    4e:5e:51:57:80:3e:04:9d:e9:a8:48:be:38:0a:fd:
                    9c:3e:d1:ac:8e:c4:7a:a4:b3:92:64:4e:9f:8e:4c:
                    a2:96:e3:e7:b5:21:87:9a:07:bb:65:03:4f:78:dd:
                    d4:df:45:7b:cd:ed:03:f2:1c:9b:c5:1f:97:4a:69:
                    cb:6b:a7:3a:6f:f1:b4:f8:0f:3f:0c:9e:38:9c:ed:
                    f7:c5:b4:bc:6f:3c:1a:41:5b:2c:55:02:d7:c4:a7:
                    39:0a:88:08:2b:4a:54:5b:42:18:2f:cc:71:44:c9:
                    c2:96:dd:96:91:71:c3:34:99:db:d1:01:74:4a:41:
                    51:93:fe:18:93:f9:35:f2:24:67:37:3e:2f:59:d2:
                    04:05:89:02:f9:ba:8c:76:96:17:7f:e3:3a:51:9c:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F7:92:F7:05:C4:B7:C2:79:8E:01:CD:AB:D5:30:0F:C6:C1:D7:35
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/E_eS9wXEt8J5jgHNq9UwD8bB1zU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:14:97:ce:41:34:84:4c:8e:1e:67:c2:6b:02:67:66:24:3b:
         b3:26:78:65:41:3c:09:24:fa:ed:63:47:91:3a:99:ec:2e:56:
         57:2e:4f:f3:e8:5c:b4:e6:12:5d:27:22:ff:cb:01:ea:c9:7b:
         31:1d:a4:a6:f2:bf:1f:f1:d8:a9:c2:5c:00:a6:16:c5:ab:1a:
         2b:63:3a:60:39:14:7c:22:ae:26:86:13:aa:f0:80:ab:ad:cb:
         94:9b:35:a3:a6:db:87:4b:3e:6b:4e:74:e7:a3:14:25:09:8b:
         ab:41:61:5c:9e:48:ac:52:2c:ca:97:0d:94:92:e0:ef:32:d4:
         9e:5b:69:05:2c:bf:77:03:30:d9:c1:e7:f2:bd:a8:d1:17:e9:
         30:39:b5:69:34:1d:a5:52:3d:e7:84:c7:a2:67:8b:2f:02:49:
         45:2b:8d:97:63:b6:c3:b2:00:43:ea:b0:b7:c0:a3:66:43:fb:
         d3:64:70:f2:d4:bb:75:02:98:0d:81:e4:2b:2f:2b:23:90:4c:
         b0:c2:04:72:f4:d8:e0:89:9c:f9:8e:d1:08:95:04:c2:f3:5f:
         15:31:e1:40:c2:4f:31:f8:02:66:24:97:80:3d:c9:c5:1f:2f:
         69:31:4f:c6:d4:cf:f9:30:a5:ee:7d:8c:29:a0:56:cd:be:2c:
         f5:c2:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org