Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/iQcsPRJCKYLaeHFCEUz6GhcVCsk.roa
File:                     iQcsPRJCKYLaeHFCEUz6GhcVCsk.roa (raw, json)
Hash identifier:          KloMjn0hwk+lNXPHOH8WyoKstKEz/DNMtT5P2CyTLWY=
Subject key identifier:   89:07:2C:3D:12:42:29:82:DA:78:71:42:11:4C:FA:1A:17:15:0A:C9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iQcsPRJCKYLaeHFCEUz6GhcVCsk.roa
Signing time:             Sat 01 Oct 2022 01:29:24 +0000
ROA not before:           Sat 01 Oct 2022 01:29:24 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        210.148.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:24 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=89072C3D12422982DA787142114CFA1A17150AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:6d:02:7b:a0:cf:08:76:f4:81:60:2c:bd:
                    2e:c0:42:8c:cc:3b:90:5f:21:69:02:fa:db:c8:8e:
                    b3:d8:ee:14:39:cd:2a:a8:75:e6:a0:3b:af:97:d0:
                    7a:1c:27:62:54:11:a0:ef:0d:37:92:45:ea:ab:72:
                    fd:9e:d2:f1:39:ac:6d:c4:24:6d:0d:37:d9:fa:34:
                    e6:07:b1:4b:7e:0e:82:9f:9d:74:62:a2:bc:17:c3:
                    ca:bc:71:fe:c7:8d:d1:12:ef:63:ec:af:25:25:3c:
                    90:a5:bc:2d:e5:ac:01:c8:f8:b6:89:8d:5f:98:46:
                    ac:d6:f4:05:90:73:24:31:98:56:b8:5b:05:e8:2a:
                    b7:39:bf:be:20:2a:e2:cb:9d:52:0a:ec:75:87:89:
                    b4:08:44:d3:c8:a4:56:bc:fa:39:54:cc:28:77:21:
                    2f:54:b6:03:96:9e:38:ba:af:33:2d:29:ae:8b:0a:
                    07:ef:7e:5f:69:27:6d:b2:1a:f0:b2:f8:56:6f:a3:
                    6f:8d:cd:2b:19:c1:3a:24:62:31:4c:23:07:ee:b5:
                    02:13:5a:1c:35:0d:c5:be:5c:7f:87:ac:63:ce:c3:
                    74:89:45:00:1d:a9:34:44:7e:f6:4f:de:e9:6f:ed:
                    f9:eb:c3:27:03:b1:14:82:78:6a:fc:78:cd:a7:7c:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:07:2C:3D:12:42:29:82:DA:78:71:42:11:4C:FA:1A:17:15:0A:C9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iQcsPRJCKYLaeHFCEUz6GhcVCsk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:01:b0:12:da:fa:16:16:e0:e2:a9:c6:91:8e:6a:ec:36:
         13:45:21:13:4e:08:7c:bd:1b:4f:66:f9:ec:81:43:49:1b:f4:
         00:df:32:8b:c8:26:26:25:38:db:c1:d4:19:81:9b:28:f6:c4:
         b2:57:ee:5a:e1:38:df:86:d0:e5:9e:97:d9:0e:5d:91:8a:47:
         58:5b:b1:dd:0c:43:45:73:92:2f:c3:9b:00:cc:87:14:b1:89:
         cd:68:d3:9a:ac:88:02:bb:c3:57:c1:d5:68:03:b2:04:38:f7:
         74:53:2f:27:fa:70:51:47:42:06:31:45:d1:d0:cc:63:a1:a9:
         de:2c:fd:52:b7:d6:f1:5e:c1:2d:0b:5b:c6:55:93:24:8c:18:
         c9:96:cc:6e:e8:7d:d1:da:21:b6:fe:1a:a6:c3:67:68:dd:66:
         57:12:33:3e:70:c9:de:38:8b:67:7b:2f:b6:ae:31:e7:2a:da:
         76:89:99:68:54:37:c1:80:c1:0d:9a:3c:ba:fc:5b:cd:ca:ec:
         04:80:9b:20:fb:52:bb:46:f5:8d:6b:59:85:9d:2f:36:d0:c5:
         93:8b:3d:00:8f:d6:c0:b7:27:e8:7c:33:39:64:6b:02:4f:e3:
         5e:47:c8:d9:48:26:bc:c3:00:52:25:21:3a:be:26:a2:d9:8b:
         b5:88:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org