Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/YYZN9Fvc14sHFnDoTv4G07GSmmY.roa
File:                     YYZN9Fvc14sHFnDoTv4G07GSmmY.roa (raw, json)
Hash identifier:          7Vwtk36I8cgYnRAm3wIZXLYbcQjUaRrcE3uzo4cgImw=
Subject key identifier:   61:86:4D:F4:5B:DC:D7:8B:07:16:70:E8:4E:FE:06:D3:B1:92:9A:66
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YYZN9Fvc14sHFnDoTv4G07GSmmY.roa
Signing time:             Sat 01 Oct 2022 01:29:18 +0000
ROA not before:           Sat 01 Oct 2022 01:29:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        125.30.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=61864DF45BDCD78B071670E84EFE06D3B1929A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:2f:a6:d2:c0:1e:e7:53:d2:8c:aa:8f:d2:
                    32:d6:66:0b:f1:55:66:63:65:e3:09:75:c4:3d:5e:
                    13:c5:a1:9f:f9:9f:96:43:40:c8:61:b1:28:d3:e9:
                    5e:5a:52:90:84:77:f6:15:36:37:c8:e0:aa:6a:e3:
                    3b:65:4d:87:a5:45:3c:df:ec:40:b9:08:4c:e4:ae:
                    cd:f4:cf:28:83:ab:7d:12:51:58:38:25:95:19:2c:
                    09:85:b6:7c:d2:81:f5:e1:6f:4b:cb:f0:22:47:f1:
                    7d:7e:12:8e:20:d0:91:c9:65:b3:01:e3:c5:c8:d4:
                    64:65:d5:fc:9f:04:ec:2b:66:5e:6e:d0:eb:79:b2:
                    bc:25:61:29:dd:eb:e4:fd:60:f8:a4:99:46:3a:24:
                    42:ed:ce:7d:7a:79:60:a1:19:51:fc:2b:bb:68:da:
                    56:3e:1d:ec:fa:4f:50:1d:0f:a2:5e:b7:74:6e:1a:
                    fb:e3:bf:1e:14:38:41:49:fc:7f:3b:9e:5b:90:1b:
                    31:da:6f:ad:98:54:50:d4:f9:f3:de:d9:bc:42:64:
                    73:12:3e:f9:84:8f:75:21:f6:3b:5b:f0:89:d8:02:
                    bf:5b:65:66:75:07:0f:bf:16:7e:33:8f:5c:f4:f9:
                    3a:82:1a:4f:1e:12:68:7e:83:37:d5:36:3b:cf:52:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:4D:F4:5B:DC:D7:8B:07:16:70:E8:4E:FE:06:D3:B1:92:9A:66
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YYZN9Fvc14sHFnDoTv4G07GSmmY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:5a:02:ac:c3:cd:15:f4:4b:7b:76:2b:9b:c9:d2:ee:c5:74:
         c9:9b:3b:10:34:83:af:35:df:ec:d9:64:bf:7b:bc:d0:27:e6:
         82:f2:f6:19:08:fd:a0:6a:3b:eb:08:41:cc:dd:25:de:d5:59:
         e4:24:d7:b8:2d:c5:26:a4:1d:c2:97:73:7e:89:39:5f:67:7c:
         27:a7:44:5a:dd:69:fd:d2:fb:8a:e0:b9:79:6a:3e:e9:84:f6:
         8f:70:b7:05:37:84:92:5c:84:17:51:5e:5d:f4:eb:8d:8d:ec:
         b1:c9:36:d4:3d:60:48:24:15:c1:18:65:ad:c0:f9:e0:b1:3d:
         01:0f:44:22:69:58:81:48:63:41:78:22:e2:44:40:2b:57:c7:
         27:2c:bd:60:91:91:90:7e:c7:08:7f:34:69:62:23:ae:6a:cc:
         e0:1a:71:a0:e7:c1:8e:3b:d1:ed:bf:a9:ba:91:30:45:86:ac:
         bf:1e:f0:5c:46:56:ab:bb:b6:14:ba:b0:c0:eb:bc:f2:e6:2c:
         51:19:73:dc:ad:d7:4c:39:23:80:c7:78:73:bf:8b:47:9e:2e:
         be:07:09:d2:57:2c:bf:ef:b1:26:2a:07:75:97:ae:a3:30:ee:
         70:83:6a:90:55:e4:fd:95:62:23:72:a4:ed:cd:57:b4:13:90:
         91:90:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org