Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Px8lbuECj-LEqejF2BJF0YpLXwg.roa
File:                     Px8lbuECj-LEqejF2BJF0YpLXwg.roa (raw, json)
Hash identifier:          ED3IvxGNcYyYPLCmfPNzQA8Z3P6ygF0LHxIsbo4oMZc=
Subject key identifier:   3F:1F:25:6E:E1:02:8F:E2:C4:A9:E8:C5:D8:12:45:D1:8A:4B:5F:08
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Px8lbuECj-LEqejF2BJF0YpLXwg.roa
Signing time:             Sat 01 Oct 2022 01:29:25 +0000
ROA not before:           Sat 01 Oct 2022 01:29:25 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        219.126.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:25 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=3F1F256EE1028FE2C4A9E8C5D81245D18A4B5F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:bd:4a:d0:49:89:df:aa:27:52:f7:98:81:
                    7d:9c:cd:3a:bc:76:d3:1d:3b:be:76:41:03:8d:c1:
                    08:d4:18:cc:95:47:14:0f:09:28:14:50:9d:5f:9a:
                    fe:18:ec:91:92:d8:aa:cd:89:3c:8f:71:5a:a4:18:
                    d1:a3:78:28:ef:93:09:fc:9e:d2:3b:4c:23:60:68:
                    e5:bd:91:da:a8:b8:da:8d:7e:88:0f:b8:e2:fa:44:
                    eb:c4:26:54:5f:00:87:41:c5:07:b7:05:ee:25:50:
                    65:26:74:c5:cd:11:98:de:fe:41:95:a3:2b:2e:ab:
                    21:88:ee:f6:6d:83:06:e6:4c:f0:de:8b:29:65:56:
                    c3:44:70:22:1e:6a:8c:40:e3:53:72:78:3c:0f:0e:
                    08:1c:6a:4e:19:a5:b3:9e:4e:63:05:50:6a:a3:d4:
                    fc:0e:8f:a1:8d:71:1e:45:4e:07:21:b5:4b:26:c5:
                    ef:04:fd:3d:33:75:85:a0:87:4f:02:3b:87:e6:0a:
                    76:c4:6c:25:a0:c2:3b:8b:0d:b8:3b:12:f7:b3:0f:
                    5a:68:d8:40:69:44:4e:2e:03:6d:cb:07:a8:23:65:
                    1a:e0:15:da:13:17:2b:fb:cd:b9:d4:d5:1b:38:23:
                    2b:51:99:8b:f9:55:6a:5e:67:4e:66:61:87:12:69:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1F:25:6E:E1:02:8F:E2:C4:A9:E8:C5:D8:12:45:D1:8A:4B:5F:08
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Px8lbuECj-LEqejF2BJF0YpLXwg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:55:2b:b0:f9:b9:03:4d:46:3a:02:4c:45:ee:08:ec:c0:be:
         48:23:3f:b2:69:26:37:58:cc:87:58:b1:e3:7a:42:ce:b0:44:
         19:29:e5:24:fb:d0:3b:ba:9d:45:a4:62:90:79:b3:d5:4a:e2:
         db:89:f9:8d:88:2c:cc:e0:34:66:a6:39:a6:03:1e:6c:fe:10:
         32:69:6b:43:51:6b:33:b6:38:65:d0:97:56:9b:e8:a9:ba:37:
         4b:76:2f:8c:8d:08:89:82:e4:37:7d:ac:31:7b:81:27:f9:88:
         1f:b8:9d:c9:2a:3d:fa:de:d6:85:ab:27:49:08:7c:7e:85:6e:
         5b:f1:32:6b:9c:fc:4c:b0:e2:e9:54:88:e4:e7:75:ad:e1:92:
         43:52:98:3c:d2:e2:20:9d:d7:fa:9a:96:4a:ce:51:a9:e5:9d:
         d3:96:f3:c0:93:de:9b:ac:c5:69:39:48:b5:b6:71:c8:d0:54:
         09:d9:5a:2f:aa:6a:ed:96:bb:01:bd:26:53:c8:ce:d3:dc:24:
         e8:50:d0:9a:27:28:03:03:ae:d8:20:7a:8a:14:6a:ca:89:e7:
         c9:20:37:f3:39:6b:32:07:37:98:65:b3:e5:10:6c:75:9b:9e:
         f3:c9:2f:33:09:7c:d6:bf:a6:07:e0:75:8e:af:f1:3f:48:38:
         7f:39:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org