Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gTEHhL7vwhp8Zti4t0nfJRFspNU.roa
File:                     gTEHhL7vwhp8Zti4t0nfJRFspNU.roa (raw, json)
Hash identifier:          nfgkl8NdjocCA9duOoXCq8oljCVZOLyFFsjXSItsFU4=
Subject key identifier:   81:31:07:84:BE:EF:C2:1A:7C:66:D8:B8:B7:49:DF:25:11:6C:A4:D5
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       BB
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gTEHhL7vwhp8Zti4t0nfJRFspNU.roa
Signing time:             Sat 01 Oct 2022 01:29:21 +0000
ROA not before:           Sat 01 Oct 2022 01:29:21 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        218.228.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:21 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=81310784BEEFC21A7C66D8B8B749DF25116CA4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:52:10:98:ff:dc:c4:8a:b4:d7:fa:6a:78:
                    be:a0:44:20:78:3d:54:42:c1:08:20:2a:22:a9:d5:
                    1f:d8:21:e8:75:6b:46:5e:70:04:14:e0:f2:16:7f:
                    d6:e0:45:cf:fa:bc:93:d5:0c:87:14:ca:b9:b1:1c:
                    00:e8:c0:61:a3:a1:1d:a5:17:34:62:5a:15:79:d8:
                    20:6a:5c:fd:5e:d0:31:bb:1f:d2:4d:9b:07:f1:da:
                    b1:e2:1d:bc:07:f3:e5:55:00:dc:1c:f7:a4:4d:b1:
                    d2:f0:bd:58:ca:7e:74:e7:18:68:f3:3a:e6:df:89:
                    4c:76:10:4e:8a:38:9a:c9:c2:50:c4:6f:01:55:dd:
                    a8:c3:8b:81:e9:9e:11:46:bc:6e:b4:2f:17:c9:b8:
                    f0:41:61:03:b7:59:05:21:62:51:73:8a:5e:50:3f:
                    a1:8a:68:23:3a:10:85:33:db:14:cc:65:ea:e2:d2:
                    bb:5d:61:98:01:88:7d:46:c8:e9:c9:59:47:3a:59:
                    4f:5b:64:00:e9:a9:70:6b:46:a1:73:c8:7b:2a:28:
                    5e:bf:64:9a:fc:eb:e9:4b:3c:d8:25:78:9a:96:91:
                    26:c4:fb:76:18:80:c3:91:fb:bd:b1:44:57:06:f9:
                    92:91:7c:86:22:80:36:72:16:ed:5c:38:7e:65:54:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:07:84:BE:EF:C2:1A:7C:66:D8:B8:B7:49:DF:25:11:6C:A4:D5
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gTEHhL7vwhp8Zti4t0nfJRFspNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:db:1a:ba:09:3d:aa:0e:dc:0d:2b:32:03:db:31:7d:0c:2c:
         ac:01:50:89:56:0a:6a:09:0c:9c:62:40:a6:bf:95:1d:d3:eb:
         73:1b:4b:49:ed:1e:a3:f7:34:41:d0:4b:9f:45:a7:e1:8d:29:
         a2:14:46:f1:ab:e7:0a:fd:fa:ea:72:5e:3e:cf:3f:10:6f:59:
         4b:09:45:22:0c:f6:e5:22:e0:7c:3b:8d:f3:8c:8b:d4:7f:5f:
         9e:7c:7c:4c:32:19:71:cc:ae:c6:69:4f:65:f5:57:68:86:8c:
         be:6d:e3:82:7e:7c:d4:57:e0:cf:21:18:8a:5b:38:e2:bf:0a:
         d6:e5:e8:b1:66:09:f9:16:bf:d0:4e:f5:96:b8:12:db:db:22:
         0b:8c:e3:8d:c1:d1:12:53:a8:b2:5e:15:85:7c:36:ad:5b:1b:
         3c:a7:d0:4f:78:46:23:16:a0:83:0f:ec:2d:8c:dc:84:fa:98:
         2c:60:ee:b1:00:ba:0f:51:68:82:0d:d5:01:61:c1:03:58:2c:
         0c:3f:67:fe:05:a2:08:0a:93:dd:99:7b:40:84:90:0f:a2:ad:
         af:52:97:09:99:68:8b:9f:cf:83:6f:24:db:71:e4:a2:f4:dc:
         5e:7e:d1:4b:0b:4c:48:7d:31:4e:d3:11:81:58:28:f4:40:22:
         0b:87:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org