Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/051vrwzzt8NoSmkUNa8GHcSHbF8.roa
File:                     051vrwzzt8NoSmkUNa8GHcSHbF8.roa (raw, json)
Hash identifier:          +jFwQtEPYT0h1tKSn5L+kYe1kUtgCU4AcjSu5MTrPkU=
Subject key identifier:   D3:9D:6F:AF:0C:F3:B7:C3:68:4A:69:14:35:AF:06:1D:C4:87:6C:5F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0164
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/051vrwzzt8NoSmkUNa8GHcSHbF8.roa
Signing time:             Thu 01 Dec 2022 01:28:26 +0000
ROA not before:           Thu 01 Dec 2022 01:28:26 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     10013
IP address blocks:        210.188.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:26 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=D39D6FAF0CF3B7C3684A691435AF061DC4876C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:4b:40:e1:1b:b4:d9:4a:b3:ca:26:95:86:
                    ed:81:0d:76:05:41:d0:d3:9a:e1:a5:68:88:12:45:
                    a0:df:78:ae:11:e7:e4:86:c2:20:31:a0:bf:73:c6:
                    25:f2:dc:8f:d0:ce:5d:9e:5d:f3:1a:b1:99:55:f8:
                    0e:48:e9:c9:d0:83:cc:c1:ca:d7:d1:ff:89:b4:c6:
                    0b:9b:3b:8a:23:c2:fb:4f:09:16:ee:42:27:bc:b5:
                    66:d0:40:33:54:37:21:37:73:62:2e:9b:4c:ad:f4:
                    53:4f:33:c3:82:e1:b2:88:6b:14:11:61:82:e6:14:
                    cb:9b:19:e2:55:24:50:be:1e:d6:34:96:1b:af:6b:
                    af:d4:e4:92:e9:40:5b:65:56:21:5f:61:39:00:cb:
                    b6:06:1c:ff:c1:8f:d1:6a:55:c3:c6:73:13:0d:67:
                    95:5d:28:9e:05:04:79:a9:f3:4b:0e:21:1c:4f:37:
                    00:82:f0:28:cc:8a:14:84:71:cb:85:2b:3d:e8:53:
                    75:74:3c:09:6a:10:29:d2:56:a5:c0:0a:f8:b8:0f:
                    1c:ed:17:20:4d:37:9b:35:60:f8:3f:4a:65:5d:99:
                    dd:4d:b9:63:da:f4:a8:7b:d2:f5:80:d0:a8:ef:2b:
                    4b:8c:99:50:4e:56:00:33:b0:72:24:24:57:ac:89:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9D:6F:AF:0C:F3:B7:C3:68:4A:69:14:35:AF:06:1D:C4:87:6C:5F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/051vrwzzt8NoSmkUNa8GHcSHbF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:8e:94:56:e8:36:83:c8:fb:f4:d7:ab:4f:34:7f:fd:2e:a2:
         66:9c:b2:b9:4f:9e:3c:99:d4:68:9c:d7:bf:1f:a9:2e:69:a6:
         8d:b6:85:82:b1:c2:fd:49:f2:aa:e4:23:eb:55:6d:0f:7d:3e:
         68:fe:88:16:7d:b3:5a:ff:6e:33:34:a0:3d:03:08:2d:11:2a:
         e2:50:ba:6b:18:57:33:0c:71:d4:42:f5:d0:72:16:15:48:15:
         ab:33:13:42:66:b2:80:ee:03:cf:83:b2:99:e4:dc:3e:03:8d:
         c2:8e:99:77:6e:e7:5f:04:e9:37:fb:62:ab:b5:18:7f:67:ff:
         05:cf:2b:fb:20:2b:5a:fd:c3:b4:68:cb:3d:5f:6b:dd:c6:29:
         1e:e9:1e:ba:03:82:6a:6b:22:d2:e1:dd:7f:2e:25:91:cd:65:
         5d:c5:73:ec:9e:27:49:b5:d3:47:f9:1a:7b:a4:b6:7c:54:4e:
         f0:b5:f2:53:77:32:aa:b9:c7:5e:46:6f:45:30:76:39:ec:ba:
         56:7e:2a:0b:ac:12:93:ac:bf:0d:f0:c1:e8:94:64:a9:65:c8:
         95:a3:6a:70:7f:a9:12:54:65:fc:f6:54:31:48:39:69:17:be:
         9a:fe:25:cd:f5:a3:bf:08:38:3d:07:1c:28:1c:f4:9a:eb:94:
         bc:e7:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org