Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/iu-DgtGGjNRUobT0DoLrDcA2GeA.roa
File:                     iu-DgtGGjNRUobT0DoLrDcA2GeA.roa (raw, json)
Hash identifier:          mE7Ty18o6Pr2S0LpdaNZPwYIdkHLB2w5buBdvyQTrt0=
Subject key identifier:   8A:EF:83:82:D1:86:8C:D4:54:A1:B4:F4:0E:82:EB:0D:C0:36:19:E0
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       44
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/iu-DgtGGjNRUobT0DoLrDcA2GeA.roa
Signing time:             Tue 04 Oct 2022 02:50:20 +0000
ROA not before:           Tue 04 Oct 2022 02:50:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     7521
IP address blocks:        115.69.237.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Oct  4 02:50:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8AEF8382D1868CD454A1B4F40E82EB0DC03619E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:16:46:d2:66:e2:ce:11:0b:dd:9f:8f:17:
                    8f:4e:c5:59:de:14:a3:9b:de:28:b0:f6:52:7b:3f:
                    a7:6e:38:d1:33:a9:2f:a5:40:5f:2a:e6:05:e7:e9:
                    0a:46:22:fc:1c:20:d7:36:de:86:1d:e1:4d:8b:1c:
                    b3:5e:03:a5:5a:c1:13:0c:35:22:f6:72:2d:0a:f9:
                    b1:7b:47:c4:fb:07:97:82:d1:f5:79:d3:17:eb:07:
                    22:55:0c:4e:1d:7a:a9:2f:c4:08:ee:7b:62:cc:34:
                    16:9b:1c:ad:00:f2:38:ef:c4:5a:12:d8:c6:f8:55:
                    6d:20:1c:36:7b:b4:d9:25:5f:77:bd:81:20:2d:15:
                    7f:de:d7:f5:7f:f4:ab:30:33:d2:ba:70:2e:0e:3e:
                    39:cf:47:47:71:c2:1a:4b:dd:43:f7:90:40:dc:4e:
                    ac:b6:da:1f:21:3b:e1:56:0e:4a:5d:c7:5b:cd:c1:
                    ac:ae:2a:d2:53:39:c2:53:8d:1b:e5:2a:2b:52:ea:
                    22:36:93:07:f2:83:1a:f7:59:20:8d:2c:9f:af:36:
                    40:7c:5d:42:dc:c6:51:81:a0:aa:d2:d3:c3:74:23:
                    da:66:d1:3a:0c:2b:a1:a4:ce:a9:d8:c6:c1:8c:68:
                    04:38:23:04:61:92:ee:3f:9c:ee:79:b2:98:a7:74:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EF:83:82:D1:86:8C:D4:54:A1:B4:F4:0E:82:EB:0D:C0:36:19:E0
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/iu-DgtGGjNRUobT0DoLrDcA2GeA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:df:bc:f3:cb:67:05:2c:36:65:5e:b8:2b:e7:a2:1d:32:0a:
         23:c0:0e:f2:d3:f1:67:50:67:7d:71:cd:42:c9:da:ef:55:7e:
         81:66:f1:8f:79:fe:b1:73:3a:b0:9d:5f:e4:95:4e:e1:51:15:
         00:4c:73:da:95:bc:5e:ab:a7:12:b4:f0:98:98:d8:82:11:30:
         d7:95:1f:5b:50:8a:b3:13:58:d2:9a:31:f1:e9:2c:71:69:3e:
         ef:2b:c7:cb:37:0a:68:48:02:e8:4c:fa:fa:5a:f9:33:06:f6:
         47:b5:72:7c:27:35:bf:c8:a5:0c:7d:b6:0b:50:c7:d2:ba:fd:
         fd:39:11:0f:cd:c1:da:ce:f9:d9:a4:37:7f:2a:f5:b5:74:01:
         15:35:1b:9e:22:d3:e4:54:92:e1:47:3e:ae:1f:12:b0:f3:aa:
         b2:3b:dd:ce:d5:b0:4c:0b:cd:ed:99:33:d0:2e:c9:2a:ec:0f:
         d6:44:d3:aa:65:2e:aa:22:40:77:df:38:88:05:f3:77:16:01:
         ce:dc:70:df:30:6f:17:05:31:4d:e2:8a:8b:34:43:c8:60:9a:
         2c:5b:6d:64:59:73:52:eb:fc:79:70:bf:17:55:66:b8:ff:23:
         77:95:81:ee:d2:a9:03:a6:8f:84:9e:cf:a6:7b:b5:24:8a:2a:
         c9:02:d7:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org