Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/slOlLzPhBZtB5_j4lH7ofo2G2AM.roa
File:                     slOlLzPhBZtB5_j4lH7ofo2G2AM.roa (raw, json)
Hash identifier:          XOE2IX87ZVxKx5sClU9EPVChiKqBBgnl1fPoDgfsxoU=
Subject key identifier:   B2:53:A5:2F:33:E1:05:9B:41:E7:F8:F8:94:7E:E8:7E:8D:86:D8:03
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       08
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/slOlLzPhBZtB5_j4lH7ofo2G2AM.roa
Signing time:             Mon 20 Feb 2023 03:28:52 +0000
ROA not before:           Mon 20 Feb 2023 03:28:52 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:28:52 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=B253A52F33E1059B41E7F8F8947EE87E8D86D803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:44:b6:87:ad:e5:17:f7:62:01:74:96:aa:
                    1a:fe:99:ae:72:76:8a:b1:30:49:54:69:a1:05:b8:
                    ef:66:92:f9:1c:d1:8d:12:a5:57:fc:65:02:13:7a:
                    07:cd:27:f5:b3:7f:a4:51:e4:c4:43:cf:fa:0a:48:
                    8f:ec:f4:3e:ba:3d:6c:cf:19:2d:4d:d0:d7:78:4b:
                    4c:e8:3f:16:d8:eb:70:cd:07:27:62:e5:6d:2e:03:
                    c3:a9:58:39:78:ba:e4:5c:4f:08:42:56:ff:db:6e:
                    1b:0d:82:6a:1f:2f:d9:2d:d5:f0:0c:e9:39:52:83:
                    85:a3:a6:b8:1c:91:8f:0f:aa:9d:68:0d:b3:f1:fd:
                    ce:3c:aa:d1:b1:7f:9f:89:26:e8:ba:2a:5d:03:1d:
                    44:cd:35:b9:40:92:67:18:cb:96:5f:23:d9:62:ea:
                    c6:cd:0c:fe:fa:b1:f3:79:69:af:b3:83:1d:20:35:
                    39:a1:5c:61:8b:a1:20:92:46:82:81:1c:d2:d1:87:
                    07:c7:b8:88:7a:54:f9:86:dd:ae:45:6b:f4:fa:50:
                    84:78:7f:76:45:1d:2d:0b:87:50:e8:24:06:ff:ca:
                    dd:a7:17:1c:5b:89:e5:d1:0b:64:b6:10:ef:55:7c:
                    65:fb:b4:28:24:35:30:b0:b2:b8:c1:69:cf:bd:bc:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:A5:2F:33:E1:05:9B:41:E7:F8:F8:94:7E:E8:7E:8D:86:D8:03
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/slOlLzPhBZtB5_j4lH7ofo2G2AM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:4a:a4:ad:3a:80:95:a6:8f:d9:45:5c:f4:6d:78:f8:00:
         c0:9b:9d:96:17:16:31:55:87:a2:52:e9:c8:27:2e:09:97:0d:
         86:7b:08:13:20:d7:43:e1:72:cb:2a:7c:e5:66:2c:a8:3a:17:
         d2:17:a2:89:82:13:0e:af:a2:ed:27:b2:09:1c:99:26:a9:98:
         3c:4d:42:a9:99:6d:c6:d4:b9:09:ec:ab:d4:0e:30:dc:a2:7a:
         d6:f2:bf:82:a5:db:d1:05:ea:f1:b7:1c:b8:9a:6d:a7:3f:dd:
         57:64:46:6f:93:63:d3:4a:1a:a4:be:5c:d2:2d:73:32:71:3e:
         c1:a8:89:d9:91:ca:a3:50:89:9d:7f:53:db:3e:b7:7e:0e:12:
         71:ea:12:1b:34:9e:36:65:5f:44:d4:ac:7e:90:25:04:91:7c:
         47:b7:7e:26:9b:de:1a:c3:cd:ba:64:e5:7e:75:8c:d1:51:8f:
         06:7d:3c:c6:99:30:d1:c2:2f:8a:e6:51:3c:1f:eb:ca:ee:6e:
         a2:e5:cb:8f:c7:92:53:74:3b:ae:ca:71:15:87:4d:d7:8b:a4:
         f6:cd:d8:d4:1a:02:a2:e5:29:e2:89:7d:f0:a3:4c:5a:a1:8f:
         2f:6d:54:62:85:6b:53:52:d9:6e:c3:66:33:90:ba:be:ff:7a:
         f2:ba:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org