Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/8j29fsm_P0tj4vv5pgGtKWAsxKs.roa
File:                     8j29fsm_P0tj4vv5pgGtKWAsxKs.roa (raw, json)
Hash identifier:          xKzmvU78RJgndbZeOiIpmpUVmgFauelmdUfAndRkTdA=
Subject key identifier:   F2:3D:BD:7E:C9:BF:3F:4B:63:E2:FB:F9:A6:01:AD:29:60:2C:C4:AB
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       A5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8j29fsm_P0tj4vv5pgGtKWAsxKs.roa
Signing time:             Sat 01 Oct 2022 01:29:15 +0000
ROA not before:           Sat 01 Oct 2022 01:29:15 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        49.239.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:15 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=F23DBD7EC9BF3F4B63E2FBF9A601AD29602CC4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:77:15:4d:27:e7:e4:a5:f3:ef:3e:ad:3d:
                    c0:a7:e7:be:10:27:b2:bb:4e:03:cc:0e:3a:78:cf:
                    d0:ef:90:66:af:c3:31:61:67:bc:0c:92:65:05:cc:
                    ca:53:12:9f:31:ab:84:80:a6:5c:b5:11:72:6d:5c:
                    05:de:12:5f:47:28:53:e2:1c:1b:a1:0a:3d:36:ed:
                    8f:e4:02:90:5c:98:63:2a:00:a3:de:09:2e:ce:d4:
                    9b:67:4f:94:ed:d7:40:62:5e:ec:41:4b:6c:a1:56:
                    ad:eb:83:96:56:fb:c4:76:12:f7:bb:29:94:e5:a3:
                    6a:73:7a:c3:a3:fc:10:cd:3d:a0:54:31:0b:88:ae:
                    d4:3b:27:55:52:c0:0c:61:9b:03:3e:e1:1d:13:5d:
                    cc:5f:1c:d0:8a:46:ab:bd:68:d3:ce:31:85:0f:9c:
                    91:c5:9a:d7:07:c5:25:7b:44:06:ec:32:94:d5:f1:
                    c0:48:16:0c:54:f9:1b:73:64:7d:ce:a5:74:9c:6e:
                    d1:b6:f2:14:b7:d7:20:6d:1f:48:b0:38:9d:66:96:
                    87:48:fc:16:2e:3e:02:05:f9:19:77:12:9c:dc:a4:
                    a8:00:cf:68:32:3c:b5:77:fc:cc:66:58:75:07:4f:
                    59:79:a9:77:97:55:f3:c1:d0:80:76:31:31:37:a7:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:BD:7E:C9:BF:3F:4B:63:E2:FB:F9:A6:01:AD:29:60:2C:C4:AB
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8j29fsm_P0tj4vv5pgGtKWAsxKs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:95:dd:f1:6e:48:82:94:6b:87:f6:79:a9:76:1f:b3:5f:
         d6:de:15:5f:39:e0:6d:49:ff:f3:0a:6f:a1:6c:80:a0:d6:5e:
         de:79:da:37:5e:b8:4c:80:53:b9:b4:88:e4:6e:77:4c:fb:80:
         bd:2c:8d:64:9c:13:f5:92:4c:a6:42:18:52:2d:5b:0c:22:d3:
         8e:4c:3f:fc:e8:ab:04:7c:eb:dc:e4:2c:da:7d:2f:30:0a:5c:
         18:91:26:3b:e7:45:ff:51:d5:9e:77:1f:a0:fa:d9:52:14:81:
         6c:63:90:48:c2:e6:41:fb:16:a7:7c:b4:51:a2:6e:e5:63:cf:
         12:4c:33:25:92:32:33:23:00:68:da:19:33:48:5d:80:80:da:
         b4:22:f1:7d:d3:22:60:92:ae:7a:63:43:32:b6:c4:75:ea:6d:
         07:9e:13:32:18:ff:7a:c6:62:5e:99:e9:df:3c:89:93:70:34:
         3d:b5:b2:db:f5:3b:16:0d:b6:ad:57:39:65:30:9a:d7:b0:d4:
         b6:66:8c:d4:32:1a:0c:6f:1e:8e:e0:28:37:6c:51:01:dc:46:
         cf:f7:cc:26:ec:8a:53:18:77:be:36:11:d6:19:19:fe:0a:b8:
         08:58:37:e2:9b:1c:e7:2e:32:81:9d:bf:db:cd:cd:bf:ae:62:
         2b:81:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org