Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/VhYqB2ufkxYXls2OsUzk3cXZTME.roa
File:                     VhYqB2ufkxYXls2OsUzk3cXZTME.roa (raw, json)
Hash identifier:          iAn+ojpbqyAFfH9BRlMpXSozLFsBZPJSMRJYuZ1CJCg=
Subject key identifier:   56:16:2A:07:6B:9F:93:16:17:96:CD:8E:B1:4C:E4:DD:C5:D9:4C:C1
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       09
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/VhYqB2ufkxYXls2OsUzk3cXZTME.roa
Signing time:             Mon 20 Feb 2023 03:32:55 +0000
ROA not before:           Mon 20 Feb 2023 03:32:55 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:32:55 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=56162A076B9F93161796CD8EB14CE4DDC5D94CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:26:fc:b1:05:6c:36:f1:83:92:e1:ec:22:
                    8b:82:02:8d:5b:d4:2d:c2:68:06:74:37:40:56:80:
                    54:19:95:ab:1b:2c:be:a4:c6:31:1a:89:3a:06:95:
                    69:6e:92:7a:2c:29:c2:ed:cf:d7:10:75:61:8d:1b:
                    44:92:98:f5:36:6c:44:52:8a:2a:f6:a1:9f:a2:88:
                    25:48:fb:b4:53:a9:cb:b0:83:04:10:47:f6:da:1c:
                    96:fe:06:7b:e3:41:5a:ab:23:16:6a:0f:a5:a4:5e:
                    5a:98:1e:33:33:17:c9:e0:53:64:5b:3e:63:31:70:
                    96:90:95:ee:07:59:cb:92:eb:c9:02:24:52:4f:c5:
                    84:82:69:6e:b3:ac:4e:8d:7b:e6:34:7a:06:33:3d:
                    5d:89:a3:47:56:16:77:48:76:09:6a:d1:39:df:73:
                    31:fd:57:32:57:2c:74:0e:c9:30:d4:32:77:f9:1a:
                    a2:52:df:b2:27:54:a2:a0:4d:79:cb:8d:04:ea:fc:
                    62:f7:2e:dc:55:b5:35:38:e0:85:cc:12:79:24:d5:
                    e4:9d:75:e3:6e:bf:a5:71:62:85:fe:fc:29:73:09:
                    85:4d:1e:b2:a8:80:c1:3c:b5:bb:e2:c5:6c:98:c1:
                    ef:7f:78:3e:10:bc:ad:81:85:b3:3f:15:20:65:56:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:2A:07:6B:9F:93:16:17:96:CD:8E:B1:4C:E4:DD:C5:D9:4C:C1
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/VhYqB2ufkxYXls2OsUzk3cXZTME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:a5:3e:fc:ae:5a:02:2a:60:35:3f:f3:f4:51:36:a5:06:
         3b:17:10:37:56:51:e1:69:58:df:b1:94:f4:11:78:b8:63:80:
         94:8b:38:ee:ab:70:14:76:85:9a:a9:a8:8c:56:b8:70:85:37:
         5b:1f:e6:34:21:c6:fa:0e:c0:a3:d7:54:06:59:40:60:86:3c:
         0a:35:59:ff:d9:7b:2a:24:f2:38:78:3a:57:11:9f:d5:ad:4b:
         e8:52:31:50:68:2f:12:dc:e6:f8:9d:1c:d2:35:ab:f2:dc:b4:
         2c:5a:97:d2:c3:f8:bf:97:18:20:6d:95:db:db:14:74:c7:22:
         62:93:67:60:87:b1:d1:c1:a7:48:ec:5b:81:d0:1b:87:e0:21:
         49:b9:a1:f6:68:f3:c2:c4:75:b5:ae:62:e9:8f:99:91:9d:b2:
         e5:fc:b9:6a:bf:c2:dc:76:1e:9b:e3:4c:05:a6:66:7f:90:08:
         c2:53:71:70:9e:05:07:1a:0c:97:5e:18:fc:f4:b3:53:eb:51:
         3a:aa:3f:19:7e:b5:94:45:b4:d3:99:f9:f7:e5:28:c4:75:36:
         3a:0e:b4:4c:70:08:1a:ab:db:4d:65:74:5b:d5:1c:83:b9:94:
         22:ee:f7:89:9f:41:67:6c:c1:7a:13:46:24:d8:44:c3:75:16:
         e6:82:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org