Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/3sHmv08Gxa3TOMpNjYBYhyh02bs.roa
File:                     3sHmv08Gxa3TOMpNjYBYhyh02bs.roa (raw, json)
Hash identifier:          97qhAyrqmrO8uPqrsiMGnaF2X7J/xHfIElaLUvHyQC8=
Subject key identifier:   DE:C1:E6:BF:4F:06:C5:AD:D3:38:CA:4D:8D:80:58:87:28:74:D9:BB
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/3sHmv08Gxa3TOMpNjYBYhyh02bs.roa
Signing time:             Sat 01 Oct 2022 01:29:19 +0000
ROA not before:           Sat 01 Oct 2022 01:29:19 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        124.41.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:19 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=DEC1E6BF4F06C5ADD338CA4D8D8058872874D9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:17:8f:1d:51:48:d1:78:9c:2d:2b:a3:1e:
                    28:d5:83:ec:5e:44:2a:f0:20:70:32:d3:e7:34:b5:
                    a7:36:93:2b:b1:b7:f6:af:6a:db:fb:64:4a:c6:f6:
                    06:49:f2:db:87:60:18:9a:37:97:95:a4:01:03:a9:
                    2f:95:44:e9:7c:1d:36:0b:1c:bc:d8:d5:e0:74:67:
                    6b:d9:32:b9:ea:30:42:e0:24:03:fb:90:7e:dd:b5:
                    a4:69:f4:7e:c6:38:bc:c1:61:29:ae:12:ef:10:d2:
                    c1:9c:f0:c7:7b:73:7f:33:c2:4c:15:44:dd:6c:fe:
                    0f:8e:07:7b:3e:ec:5b:7c:7a:bf:a8:74:5f:3f:0b:
                    2f:eb:9b:fe:88:51:7f:ab:08:cb:4f:31:5e:81:70:
                    22:30:38:80:93:13:2c:c6:a3:78:f6:df:38:bf:9f:
                    8d:fd:c2:0b:6c:0e:7b:de:bd:48:90:68:c5:4f:bb:
                    5a:45:a8:40:1f:bb:28:41:29:8b:33:88:f6:34:c3:
                    89:e0:02:71:02:28:c6:0c:e9:d9:ee:f5:81:84:0c:
                    a6:db:a7:6f:dc:34:c8:dd:12:2c:8a:b1:e9:72:00:
                    43:42:36:9a:a1:fa:b6:cd:0f:b4:55:a2:00:8c:05:
                    05:1a:ab:de:f9:73:53:31:76:c5:16:13:e1:77:24:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:E6:BF:4F:06:C5:AD:D3:38:CA:4D:8D:80:58:87:28:74:D9:BB
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/3sHmv08Gxa3TOMpNjYBYhyh02bs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.41.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:cd:4e:67:b9:58:11:e8:49:80:72:5e:f7:54:44:54:3b:
         fd:bb:a2:7b:ee:22:7f:61:ba:c5:a8:4f:87:2f:93:6a:6b:91:
         d8:ae:c6:3e:1f:00:f3:12:0e:17:34:bf:80:dc:bc:88:5c:42:
         2a:2a:58:d9:4e:3e:d0:d6:73:55:4d:1c:9e:b0:61:dd:47:30:
         71:cc:f8:35:e6:bf:76:f6:c3:77:79:44:7e:99:54:d6:63:5a:
         58:7e:f6:88:49:9e:65:44:92:a2:0e:e7:62:cb:71:bf:2d:7f:
         14:69:49:6d:c8:ab:c1:11:5e:d3:0f:69:db:27:f1:02:0a:9a:
         16:e2:48:1c:12:25:b7:60:8e:de:d3:74:4e:a0:a7:b2:18:c6:
         b1:3e:99:81:8e:98:47:de:fd:76:11:ea:65:7b:9a:b7:0d:62:
         40:54:db:fc:99:71:8c:02:55:df:1d:0d:98:77:d3:18:7d:32:
         24:b1:b7:5f:4b:62:06:5a:30:87:28:43:01:6f:38:e2:c5:ff:
         87:d0:ec:06:0b:36:98:4c:97:92:2e:e7:6e:da:c6:fe:aa:e7:
         ca:1e:7a:8d:c8:bc:07:da:3d:cb:13:0f:e2:90:ed:44:a7:40:
         b4:b4:e1:ae:ae:21:d2:c3:15:70:bb:84:6d:93:20:ba:aa:0d:
         c6:f9:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org