Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/fFCL0AQ3mp8RQA0jV85zU18wlZg.roa
File:                     fFCL0AQ3mp8RQA0jV85zU18wlZg.roa (raw, json)
Hash identifier:          1Y/2jtTgi1EvuVJMpqFweufXpYAavKTkzk1IwVlfo1c=
Subject key identifier:   7C:50:8B:D0:04:37:9A:9F:11:40:0D:23:57:CE:73:53:5F:30:95:98
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       D6
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fFCL0AQ3mp8RQA0jV85zU18wlZg.roa
Signing time:             Tue 01 Nov 2022 07:12:12 +0000
ROA not before:           Tue 01 Nov 2022 07:12:12 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2497
IP address blocks:        133.236.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 07:12:12 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7C508BD004379A9F11400D2357CE73535F309598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:6c:d0:c4:0a:8a:38:4c:11:fa:0d:55:c8:
                    0d:09:52:0d:ea:27:19:a7:17:e6:a6:e6:61:f4:32:
                    13:91:cb:ac:d7:a5:5c:a4:8e:f7:3c:62:75:24:56:
                    ea:43:a1:48:60:e1:fa:82:5d:32:37:61:f7:38:45:
                    dc:96:a7:d5:03:37:00:f3:7e:74:a8:1c:50:59:73:
                    bb:fa:c6:4d:1b:ec:d9:17:85:48:61:7c:db:b4:07:
                    c5:3d:19:8c:a6:35:8f:4d:e2:25:42:ad:2e:d2:5f:
                    b6:5f:e7:02:d0:b7:ec:61:5b:22:16:e0:fe:60:7a:
                    fa:6f:18:1b:b7:2a:f1:9b:ca:c3:9b:63:95:74:c9:
                    85:c7:3c:6e:b3:03:cb:d2:78:27:4b:30:f4:3d:6a:
                    20:29:e1:49:48:de:78:17:e8:35:78:67:65:eb:3b:
                    32:51:c1:f5:d8:ee:77:82:f6:86:9e:e9:d0:69:17:
                    56:35:60:ad:9f:4b:b4:ae:e6:cc:1d:78:83:9d:d3:
                    f0:2c:67:9f:fd:b7:94:20:5a:bd:b8:4c:9f:43:76:
                    27:4a:9a:08:ce:d5:71:a4:3a:b0:0a:ff:85:7a:8b:
                    e2:e8:10:1f:c9:d3:ad:04:49:9f:dc:66:db:ab:e5:
                    b7:1a:e7:28:d7:b4:46:8e:5e:a9:6f:67:4a:e5:5c:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:50:8B:D0:04:37:9A:9F:11:40:0D:23:57:CE:73:53:5F:30:95:98
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fFCL0AQ3mp8RQA0jV85zU18wlZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:98:e7:24:77:d4:35:10:aa:30:a3:a3:f5:db:e5:f1:5c:
         11:7a:45:61:0d:53:3f:cc:6e:b4:b0:8c:15:ce:9d:05:2f:9a:
         56:bc:49:60:b1:63:39:94:ad:55:d7:3b:2d:11:80:10:c2:c6:
         18:70:9f:0f:52:3c:95:1f:df:d1:4d:9d:6b:00:7b:ee:88:33:
         36:b8:d0:70:1d:81:79:c9:ab:22:e0:ad:2b:f3:85:cc:f2:cc:
         47:c3:c5:a5:f6:d8:36:33:7b:59:02:be:cd:64:51:f4:d0:57:
         81:83:50:7d:bf:d4:df:ec:87:e6:fd:74:af:45:07:2d:36:5f:
         64:7a:56:2d:8d:59:e6:65:a8:2c:15:55:84:a8:fc:e7:08:dd:
         42:1b:12:82:49:72:70:b9:16:b1:ae:b1:1b:c7:8b:ff:ce:1b:
         fd:e7:fb:2a:02:5c:1d:8b:23:f9:45:ee:51:7e:14:57:4c:03:
         5f:ed:aa:a6:1c:80:81:49:21:a4:12:ad:a7:b7:55:c0:6b:8e:
         49:42:8a:bd:b5:9d:b0:99:7a:b3:a2:c6:c7:72:3d:c6:3a:5d:
         74:ed:c1:be:d2:81:d6:4e:b2:9f:22:73:84:c9:56:aa:07:dc:
         a5:28:35:93:5d:39:6a:66:75:13:01:aa:a2:f3:03:6e:6a:7c:
         fd:96:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org