Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/GDn66xWndmeWlH3oRw4VtT8FYjc.roa
File:                     GDn66xWndmeWlH3oRw4VtT8FYjc.roa (raw, json)
Hash identifier:          LwJDXvNEG4knmN42S4jFdLO9eNTbuf3For5RTna0pE4=
Subject key identifier:   18:39:FA:EB:15:A7:76:67:96:94:7D:E8:47:0E:15:B5:3F:05:62:37
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/GDn66xWndmeWlH3oRw4VtT8FYjc.roa
Signing time:             Sat 01 Oct 2022 01:29:26 +0000
ROA not before:           Sat 01 Oct 2022 01:29:26 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        220.210.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:26 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=1839FAEB15A7766796947DE8470E15B53F056237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:b8:86:24:dc:93:83:2d:1a:d2:0f:26:52:
                    a7:1b:80:4e:08:b2:11:ba:6b:b1:0d:54:3b:3e:7d:
                    99:54:3f:66:44:dd:0b:f7:7d:94:4d:c9:c3:8e:62:
                    86:ea:23:d1:a0:ca:b8:f7:87:ab:9f:77:fd:34:71:
                    97:ea:a2:1d:7a:b6:60:04:6f:1e:fe:bc:ca:05:3d:
                    6c:25:c0:ae:6e:41:b2:c9:25:3e:51:e5:4f:37:5e:
                    58:ef:d1:2a:69:52:bb:44:ee:de:44:20:e0:c7:1a:
                    a8:76:c5:08:92:6c:23:26:a9:bd:dd:44:8d:ba:7c:
                    34:98:9d:af:7f:ce:3a:75:2d:c4:f8:d0:9f:1b:44:
                    4f:be:fd:92:b8:05:df:19:51:de:09:a6:83:0c:09:
                    dc:4b:51:5b:82:2a:c4:00:d1:99:77:24:72:52:13:
                    b3:7f:87:5b:ea:6d:0f:f2:3c:67:06:f1:c1:81:db:
                    58:0b:7b:5d:32:cc:0a:2a:cb:27:28:9f:0d:b6:91:
                    f4:d5:35:4f:e8:ad:3f:99:42:cc:4e:f9:e4:a2:96:
                    11:d5:02:61:9e:3d:73:4c:a4:0a:b3:94:f8:75:5c:
                    9e:7e:00:87:9d:8b:cf:22:29:b1:7d:6e:9e:72:96:
                    ed:7e:8d:3b:4a:9b:e5:41:c3:dd:a3:15:f6:1e:85:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:39:FA:EB:15:A7:76:67:96:94:7D:E8:47:0E:15:B5:3F:05:62:37
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/GDn66xWndmeWlH3oRw4VtT8FYjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:db:d4:eb:45:85:48:76:cf:35:37:5f:b5:a6:a5:d4:f5:12:
         d1:d5:91:d4:c3:cb:67:0e:83:4f:18:6d:cc:7d:f9:2e:55:f9:
         43:72:b1:15:59:a6:13:a2:81:be:7b:da:ce:58:d7:33:d4:46:
         d9:3c:6b:14:93:53:ee:db:9d:3d:e3:c3:b5:e3:21:dd:80:0a:
         bb:b4:b2:d3:18:aa:84:d7:77:b8:c8:31:69:38:34:93:44:37:
         a9:ba:91:83:21:0f:f8:8a:7a:7e:3c:51:db:95:8d:c8:dd:77:
         f6:f8:d3:b0:42:07:a4:b6:db:50:40:17:b6:f3:92:37:63:04:
         db:0f:cf:6d:81:26:e1:d7:38:1e:5a:07:0e:cc:e1:ed:0b:d7:
         f9:a2:c2:b4:fe:0f:23:b0:b7:19:f8:11:63:cf:b8:f9:4e:aa:
         16:8b:df:fb:40:eb:ec:0e:fe:b7:bf:5c:1f:23:61:6a:09:e9:
         38:9f:3b:57:58:a5:26:25:77:d1:f0:cb:91:3e:ac:d9:e7:38:
         a1:9a:a2:da:f8:9d:07:09:39:b6:74:88:ef:93:0f:46:ce:7e:
         07:a5:ec:b1:c0:cd:ca:0a:70:6c:e4:1c:3f:cd:58:2b:be:8e:
         4b:b7:37:de:ec:d8:2d:0a:55:88:38:b4:97:25:61:7a:8d:c0:
         05:e4:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org