Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WVzp1-EVrolWij2nmop28qpyDcU.roa
File:                     WVzp1-EVrolWij2nmop28qpyDcU.roa (raw, json)
Hash identifier:          sKjss4rGraDfgnZy/OqarHNXZSZc1dgr/vxP9gXWr9c=
Subject key identifier:   59:5C:E9:D7:E1:15:AE:89:56:8A:3D:A7:9A:8A:76:F2:AA:72:0D:C5
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       E3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WVzp1-EVrolWij2nmop28qpyDcU.roa
Signing time:             Wed 01 Feb 2023 01:29:13 +0000
ROA not before:           Wed 01 Feb 2023 01:29:13 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        220.156.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Feb  1 01:29:13 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=595CE9D7E115AE89568A3DA79A8A76F2AA720DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:7b:e1:bc:5e:a3:84:8c:62:e3:e7:6a:a1:
                    c9:88:2d:a5:e5:50:59:b8:6d:db:30:1c:d1:97:82:
                    2c:47:e8:2f:ce:03:e3:19:9c:4f:20:69:13:46:6f:
                    b5:17:25:6c:c8:d3:f8:5c:59:d8:aa:45:bf:1f:d7:
                    d5:6a:11:34:9e:0a:87:a1:c9:ab:18:6c:bf:bd:b7:
                    d0:50:53:0d:25:96:93:c0:ef:c5:35:a9:84:aa:74:
                    0f:80:38:7b:4f:43:ae:87:01:5a:c7:e1:54:de:b3:
                    23:76:95:dc:75:50:9a:5c:45:d4:01:68:25:39:cf:
                    de:d8:e5:3e:08:79:e6:da:dc:c4:6e:d4:43:7d:ec:
                    f1:96:f5:4f:f6:20:5a:84:d6:96:aa:50:ed:1e:fa:
                    28:f8:7c:78:f6:07:f4:4d:90:dc:50:b5:c1:b9:7a:
                    dc:ef:33:a7:9b:67:bc:25:1f:20:ee:56:dc:d1:c7:
                    70:c0:4e:c6:0b:1a:ed:67:46:67:61:7a:fd:29:be:
                    69:e0:34:b0:21:dc:23:c8:b4:cd:c0:13:8c:6c:64:
                    6d:9c:67:b3:07:a6:de:bf:6c:9d:fb:18:36:08:ea:
                    5b:1e:c2:eb:1b:f0:9d:21:53:6a:0f:dc:eb:f2:e7:
                    8c:86:e1:b6:82:45:54:b0:b4:e3:be:09:3d:43:c2:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:E9:D7:E1:15:AE:89:56:8A:3D:A7:9A:8A:76:F2:AA:72:0D:C5
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WVzp1-EVrolWij2nmop28qpyDcU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:7b:fa:ba:94:6c:6b:9f:e4:3f:2c:23:17:ee:df:96:11:
         f1:26:5b:d4:2b:bc:00:d8:33:e4:80:06:08:cf:55:95:52:b8:
         b5:c1:51:d2:53:1f:bc:19:34:9b:df:b3:66:53:c6:82:71:0d:
         c7:e7:c2:5f:73:76:3d:c4:f7:83:57:45:fa:ac:ea:2d:fa:91:
         c0:e2:7d:1e:2e:ae:61:12:36:1f:d2:62:f6:af:65:5d:da:cc:
         c8:b1:c8:ff:9d:d7:27:3a:28:d5:83:db:ef:67:b0:33:ca:e5:
         9e:f8:a1:45:07:44:64:b6:39:fa:7f:85:28:16:68:4a:67:3a:
         76:b9:7c:d2:ff:87:fa:cb:a2:3e:bd:21:b0:e2:13:85:a7:cc:
         07:04:c2:1e:06:6e:48:0d:9a:81:03:ca:8a:cb:ab:a2:25:32:
         ee:53:e1:2b:e8:ad:a5:a3:d2:ea:ab:e8:55:80:be:aa:8a:f0:
         a0:8a:9c:2e:b3:5e:4b:97:f5:4c:cf:2d:bb:f4:a4:c1:b9:f2:
         fe:65:88:c3:6a:8a:ca:64:0c:e0:49:32:d2:03:9e:7a:de:dd:
         1e:0e:24:14:da:bb:07:e2:e4:ed:fb:6e:98:6c:50:12:9e:19:
         95:fb:b7:32:e7:63:d2:07:ca:e4:19:13:cf:1f:38:01:a6:d8:
         b6:e4:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org