Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0c35mTFhO63zgV9jJV-2xwzCxGQ.roa
File:                     0c35mTFhO63zgV9jJV-2xwzCxGQ.roa (raw, json)
Hash identifier:          aVmoa8Oyt3XHZ8EJWpnaV/RvJlIRDpWb2D/LYjMELg8=
Subject key identifier:   D1:CD:F9:99:31:61:3B:AD:F3:81:5F:63:25:5F:B6:C7:0C:C2:C4:64
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       016D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0c35mTFhO63zgV9jJV-2xwzCxGQ.roa
Signing time:             Thu 01 Dec 2022 01:28:28 +0000
ROA not before:           Thu 01 Dec 2022 01:28:28 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:28 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=D1CDF99931613BADF3815F63255FB6C70CC2C464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:c9:66:bc:1d:37:56:f7:9e:84:19:9c:89:
                    e1:16:94:c9:ac:60:37:a3:21:48:01:a8:12:1b:99:
                    b8:25:d3:ed:e7:77:b1:1f:70:f9:51:2c:2b:67:a2:
                    f7:67:80:09:53:0f:12:c8:82:b6:79:97:30:73:32:
                    c2:5c:c8:1a:40:f6:8f:b9:7f:c7:d7:67:17:bd:b4:
                    bc:93:60:b0:0a:6b:1b:6b:8a:46:52:07:23:f0:5d:
                    4e:ca:4c:19:87:14:49:d7:89:e4:1a:31:4b:7e:a5:
                    54:2b:4b:6c:89:74:8b:05:46:cf:14:7e:71:f6:03:
                    8e:8b:e2:91:df:62:79:18:69:8f:aa:24:a6:40:5d:
                    dd:66:1c:dd:e6:81:e6:1f:0c:f9:a4:0c:05:26:49:
                    c0:74:86:2c:69:0d:2f:a4:96:a0:0d:43:c9:ef:fe:
                    9c:3d:62:90:73:5d:ed:ca:3a:68:3d:ca:9e:9a:0e:
                    1b:9c:15:a7:45:03:8a:ae:16:d3:a5:cf:43:38:33:
                    86:1d:c1:20:cf:9d:d9:59:f8:a1:a3:c4:5a:b6:d2:
                    e3:53:85:c6:39:7a:33:5f:d9:01:ad:ef:18:ad:28:
                    cb:42:c1:fa:cf:d6:2a:3c:3d:3a:15:d5:7e:1b:9c:
                    55:74:91:d5:25:8d:84:50:84:3b:dc:d3:2f:38:97:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:F9:99:31:61:3B:AD:F3:81:5F:63:25:5F:B6:C7:0C:C2:C4:64
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0c35mTFhO63zgV9jJV-2xwzCxGQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:05:59:27:44:bc:02:ea:ab:c1:c5:5f:3d:12:78:92:3c:55:
         cb:45:f8:09:8a:9a:01:d5:f4:f7:62:b0:d8:af:35:02:8b:01:
         c8:5c:a7:63:29:c2:e6:4d:35:fe:00:0a:95:04:46:65:f9:d1:
         56:c1:6c:bd:d3:14:17:db:59:81:a8:64:39:5e:55:aa:e4:2f:
         e9:7f:ea:dc:3b:4c:dc:29:8a:c7:7a:51:05:6c:9c:14:1d:0d:
         85:9a:c5:19:75:f2:34:62:fb:a8:2a:e6:9f:bd:7f:07:73:dd:
         23:42:5f:13:ad:20:c2:b6:55:12:49:ce:a7:72:e5:cc:43:d7:
         6e:f2:a6:0b:8f:87:4e:4d:f6:52:f1:8b:45:0b:db:3c:57:fe:
         72:4c:b1:b0:1b:58:97:9d:2d:21:64:e8:0f:6a:89:21:1b:e4:
         35:38:09:9b:0e:9b:62:7f:4f:18:d4:9a:04:a5:f4:8b:95:5c:
         8b:76:ef:99:f3:f5:69:19:30:41:37:71:fa:8d:24:d3:fb:88:
         54:b3:68:39:39:16:ec:1e:d8:e1:9c:35:7c:73:4a:63:ba:f2:
         8f:4d:3c:66:41:05:1e:0a:16:7f:80:ac:5d:d3:fe:63:29:42:
         47:5c:c9:ae:4b:0e:15:e8:1a:1f:b4:84:6d:64:16:6a:67:fb:
         c7:2c:34:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org