Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa
File:                     k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa (raw, json)
Hash identifier:          UNl74Qv46AWL6mpAKFMXMWw87BRIR170H5DP1DrBWew=
Subject key identifier:   93:B9:EA:68:9D:6E:44:17:1C:14:3B:F6:56:8B:A6:E6:BE:E0:F2:A4
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       0A
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa
Signing time:             Mon 20 Feb 2023 03:32:55 +0000
ROA not before:           Mon 20 Feb 2023 03:32:55 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:32:55 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=93B9EA689D6E44171C143BF6568BA6E6BEE0F2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:56:e8:35:8f:dd:cd:87:5d:6f:e8:21:ab:
                    d1:9b:6d:04:18:d8:5e:ef:93:14:8d:bb:dc:07:51:
                    3d:36:fe:0c:34:2a:51:8f:df:40:79:a8:10:9d:16:
                    c7:a7:c4:17:7f:b1:16:8b:18:a7:81:22:c2:41:3f:
                    c3:4c:72:fc:6b:84:8a:7f:38:52:4c:79:4e:7f:e8:
                    3e:67:d9:3a:07:bf:2d:76:e5:1a:80:e3:23:8f:2b:
                    f1:5a:0a:58:3e:a2:3c:b1:96:a3:00:ef:2e:e5:6c:
                    25:9c:31:47:ee:4a:44:96:81:eb:4c:dd:e7:5f:79:
                    0c:32:1f:14:7e:99:3d:52:e6:b4:12:34:9b:47:21:
                    7d:7a:c0:2b:d2:1d:8b:ff:ec:1c:f7:19:c9:13:f6:
                    c4:db:25:5d:f3:3b:23:6d:8c:4b:62:d5:13:78:1f:
                    46:9c:7a:2f:77:f7:d1:ec:b2:04:bb:eb:09:8a:81:
                    af:60:d0:35:35:5e:21:27:ba:72:00:24:fe:90:41:
                    99:ab:b4:9d:12:25:de:4d:50:21:8c:3d:c9:18:86:
                    5f:4e:ef:a9:31:32:72:08:ce:64:f1:41:42:f1:8a:
                    d5:54:f7:15:d7:5c:d9:62:4a:15:e2:38:b1:01:3d:
                    3e:b5:13:a6:0b:97:8a:bc:98:88:9a:7b:d7:4d:f4:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B9:EA:68:9D:6E:44:17:1C:14:3B:F6:56:8B:A6:E6:BE:E0:F2:A4
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:c7:1c:50:2a:a5:8f:1c:fb:7f:8c:3e:bf:35:fe:ac:a7:
         c5:92:f2:c9:d0:31:f3:43:63:9c:20:8b:6c:46:5d:3e:57:b4:
         df:cb:7b:f0:6c:a3:b8:eb:60:f1:20:8a:46:e6:fe:f4:95:a3:
         ab:a5:00:86:7d:ad:6c:67:37:7b:e7:e0:f5:8e:c8:f2:98:67:
         ab:ff:a5:a4:ba:32:99:67:94:14:4c:0e:6f:30:c2:1b:d4:37:
         47:f3:9b:a8:24:01:90:7d:02:86:08:fa:b5:c3:2c:51:2d:73:
         19:6c:af:2e:52:9e:99:3b:16:6a:42:0c:f1:f5:10:90:fa:59:
         ba:0d:d0:5e:b3:28:ff:d3:37:57:cc:76:a5:9f:2f:83:db:92:
         31:93:0b:2f:81:31:ff:47:8c:8e:9a:9a:d6:01:24:19:c8:f0:
         1a:c2:2a:2f:1c:56:cb:29:bc:43:0a:17:be:25:5b:38:fa:1b:
         f2:8b:0c:91:b7:aa:03:0a:06:84:bb:79:a4:73:43:8b:df:34:
         38:ed:61:73:d5:15:23:22:e5:79:bd:0e:ba:aa:61:39:61:92:
         ca:2c:a6:db:25:21:4e:44:d3:82:df:a4:d6:34:36:3e:2a:dc:
         34:a2:41:46:c3:fd:e6:fd:7c:3e:0d:7d:1e:90:2e:6f:2c:9f:
         f1:ae:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org