Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/npF5g30RCry40SYIEURt6EOlUwQ.roa
File:                     npF5g30RCry40SYIEURt6EOlUwQ.roa (raw, json)
Hash identifier:          pJUOm2xGnGYMUnBoyLE2pdEQd8sZrE2bLHQdPURr4xA=
Subject key identifier:   9E:91:79:83:7D:11:0A:BC:B8:D1:26:08:11:44:6D:E8:43:A5:53:04
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       DD
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/npF5g30RCry40SYIEURt6EOlUwQ.roa
Signing time:             Thu 01 Dec 2022 01:28:39 +0000
ROA not before:           Thu 01 Dec 2022 01:28:39 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Dec  1 01:28:39 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=9E9179837D110ABCB8D1260811446DE843A55304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2c:25:2b:16:d1:6b:2f:f4:2f:ed:9d:4f:16:
                    1b:d7:80:f8:aa:98:d5:ac:5c:cd:6e:c8:81:ab:98:
                    0a:a7:da:4f:5e:0d:ee:d8:1e:f9:a3:1c:71:93:48:
                    2f:b8:01:ff:fa:14:07:13:cc:02:4a:42:89:41:0e:
                    0b:28:57:b6:28:ac:37:65:ea:6d:73:6e:51:0c:1d:
                    14:ae:04:8d:9e:c5:c3:e8:db:cd:a2:2f:e9:e4:d6:
                    f5:52:e0:17:e5:3b:69:a4:55:0c:35:e7:42:54:ec:
                    35:25:4a:95:db:94:c6:a9:c5:b7:51:0e:99:a1:d0:
                    ec:03:c8:13:14:3d:70:32:4e:0b:e1:06:a2:b1:0a:
                    e3:0f:a3:78:2f:69:f4:4a:9d:13:03:e8:46:53:8f:
                    04:65:4b:84:e2:ca:fc:d1:0b:c1:3a:5f:b6:7e:fb:
                    0f:fb:9c:cb:44:57:51:67:f8:41:4e:d5:97:fb:7d:
                    22:64:51:23:28:be:4c:06:a4:ae:24:3b:46:88:e4:
                    e5:9b:fd:54:43:14:2d:82:4c:de:88:5a:05:2f:18:
                    48:d2:f9:cf:6a:0e:8b:b9:0d:2f:f4:da:06:79:9b:
                    32:5d:ab:c7:7d:eb:7f:e7:e7:5c:fc:6c:1c:70:8d:
                    f6:9f:10:8d:bd:2e:f5:49:47:ec:95:dd:b4:fa:0c:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:79:83:7D:11:0A:BC:B8:D1:26:08:11:44:6D:E8:43:A5:53:04
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/npF5g30RCry40SYIEURt6EOlUwQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:22:eb:b3:f8:83:8c:c8:65:2e:b4:62:83:d1:41:98:b9:92:
         bf:8c:c7:09:8a:4b:2a:3e:57:64:02:be:dd:16:f2:03:e4:b7:
         8b:92:32:b5:ce:7e:b2:fb:7a:50:b7:ff:28:3e:cd:13:e8:03:
         fa:b3:20:9e:9d:29:37:aa:f4:76:c2:5c:2f:85:7a:e2:b0:02:
         69:e0:16:4c:83:d2:45:6c:8b:01:e6:fb:49:d0:7f:64:d6:08:
         76:2f:47:3c:3f:fe:7d:76:d8:64:b3:9c:ce:97:fa:5f:14:a4:
         6b:88:3b:37:c4:a0:5f:a8:17:70:d5:86:f8:6f:19:38:99:fa:
         17:12:bf:00:04:9e:0d:0d:41:03:28:a5:18:44:ba:bf:a7:38:
         9c:cc:ff:9f:cb:61:34:3e:f3:95:c1:e4:e9:57:2b:7b:23:bc:
         b5:bc:d0:fd:1a:26:0e:15:9b:a8:bd:ad:98:47:cd:71:35:8c:
         83:36:fc:e1:cf:f8:be:01:b5:cd:36:c3:ad:69:f1:8b:d3:c0:
         cf:86:67:56:67:95:cd:09:e1:49:52:c5:72:94:2a:99:3a:c1:
         a1:44:3b:6c:79:a4:f4:dd:1d:b7:44:79:c9:54:79:45:d0:af:
         3b:d9:23:b7:f6:21:2a:eb:6e:78:7d:bf:07:a6:a1:24:14:09:
         d5:82:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org