Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/Wa_cGd1oTeeOLH9eUEXiAYLXjoM.roa
File:                     Wa_cGd1oTeeOLH9eUEXiAYLXjoM.roa (raw, json)
Hash identifier:          V4MA6AaYN8OOQSer7aT3938dwMRoFp1PjHvxw7+ZirE=
Subject key identifier:   59:AF:DC:19:DD:68:4D:E7:8E:2C:7F:5E:50:45:E2:01:82:D7:8E:83
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       07
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/Wa_cGd1oTeeOLH9eUEXiAYLXjoM.roa
Signing time:             Mon 20 Feb 2023 03:28:52 +0000
ROA not before:           Mon 20 Feb 2023 03:28:52 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:28:52 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=59AFDC19DD684DE78E2C7F5E5045E20182D78E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:83:62:82:cf:83:06:60:5b:de:fa:c7:29:
                    dc:22:2c:1e:2e:61:f5:b4:aa:27:e3:b1:4f:76:5e:
                    5c:8f:da:4a:a0:ad:1d:8b:87:4d:97:27:b7:29:11:
                    a3:f0:9c:24:f7:43:2f:85:fe:e1:94:47:95:0f:c9:
                    63:fd:48:78:97:b8:88:7c:ad:37:ae:71:5a:e6:7f:
                    32:d8:94:fd:38:1d:46:7e:f4:56:67:25:3e:6b:86:
                    a1:94:2a:4a:1c:29:b4:ae:15:81:1a:c3:72:4e:16:
                    63:bb:ba:60:67:78:de:d4:37:1d:3f:87:81:1f:10:
                    48:61:c0:fc:93:0e:0e:18:d7:c4:5f:11:3b:c7:f3:
                    e5:1c:d0:52:e8:58:f4:de:21:7d:52:ea:39:6a:f4:
                    77:dc:ec:2f:8f:a2:0a:76:5d:c7:15:3a:55:a6:27:
                    5f:d1:d8:74:2f:fe:b7:5c:de:64:a5:0f:26:d7:f4:
                    72:60:34:3f:40:2a:f6:c5:be:34:4f:05:f5:a8:1e:
                    fa:13:ca:e2:11:be:c8:99:2e:00:ac:e2:16:e5:3d:
                    50:47:26:6e:80:0d:e5:7d:ee:cb:cb:d5:69:f6:8b:
                    52:8b:4d:82:f0:49:45:89:5a:f6:80:50:b5:7a:f8:
                    ae:d9:c2:8c:94:93:84:4b:14:01:bc:35:b9:8f:66:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AF:DC:19:DD:68:4D:E7:8E:2C:7F:5E:50:45:E2:01:82:D7:8E:83
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/Wa_cGd1oTeeOLH9eUEXiAYLXjoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:30:30:c8:15:de:7c:a5:af:36:9c:90:cb:1f:d7:80:bf:
         b4:67:1a:27:0f:34:62:86:2b:8d:2d:47:ba:e2:46:c9:60:a1:
         f4:98:48:0e:44:00:80:e7:db:d6:04:4c:69:5a:a3:c8:0e:63:
         3f:02:ab:7a:94:85:97:34:11:5f:4c:d0:fe:71:4e:fc:74:5a:
         a5:6b:c0:b6:b9:f6:db:eb:da:9e:2f:8b:ec:0e:80:1c:37:d6:
         4c:63:1f:c9:8c:91:b5:00:66:24:98:fa:fa:ba:1d:b2:ca:60:
         4f:6d:ca:42:e4:33:0a:ac:dd:8f:09:01:89:08:96:7b:07:a2:
         a2:38:3c:6f:29:23:6a:1a:e5:2e:c1:ff:42:e7:cc:77:7d:f3:
         41:b1:85:2e:ae:3c:04:9c:dd:68:ba:92:60:40:b5:98:95:87:
         e5:7d:22:dc:7e:5f:4f:39:c3:31:03:b0:53:bf:19:62:83:c4:
         60:d1:64:0c:fd:c7:a9:7f:5d:13:b6:53:80:52:1d:85:ef:e6:
         18:8b:92:cd:d0:99:5e:c0:06:5f:d6:aa:f0:47:ab:3f:a8:5c:
         03:3c:31:83:e3:55:8a:91:38:6f:bb:c1:85:78:f1:91:33:c9:
         13:24:0e:56:f2:e8:8a:00:ca:59:a3:d9:c1:df:c5:dc:a3:b6:
         46:7d:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org