Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/jmmF3UD4-hYcR_juIYlTqjcLvX8.roa
File:                     jmmF3UD4-hYcR_juIYlTqjcLvX8.roa (raw, json)
Hash identifier:          qhcgUu/ngRQTpnmyhTLW+rrXNjWI0QuuluklOIpNNn8=
Subject key identifier:   8E:69:85:DD:40:F8:FA:16:1C:47:F8:EE:21:89:53:AA:37:0B:BD:7F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0154
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/jmmF3UD4-hYcR_juIYlTqjcLvX8.roa
Signing time:             Tue 01 Nov 2022 06:57:26 +0000
ROA not before:           Tue 01 Nov 2022 06:57:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9370
IP address blocks:        133.167.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 06:57:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8E6985DD40F8FA161C47F8EE218953AA370BBD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cd:79:af:d6:55:85:20:23:4b:ef:cf:76:72:
                    da:06:3b:cb:0c:a0:f3:e4:d8:c4:72:f9:fa:13:c1:
                    bc:3d:89:67:00:8c:96:03:bb:4f:da:29:1c:92:8d:
                    b9:d6:74:77:27:20:5c:ac:50:9e:30:d8:98:a0:dd:
                    08:fc:93:56:a7:2b:02:76:7c:6b:08:32:7a:5b:ec:
                    2f:d7:e3:2d:64:78:59:ca:ab:d5:b1:42:1c:5d:ac:
                    f6:fa:79:ab:bf:81:26:24:ce:d2:f7:51:d7:b4:e8:
                    b2:47:29:28:61:3c:c1:50:4e:64:dd:04:57:09:b6:
                    00:db:73:3d:d2:47:e5:e4:cd:21:5f:68:e4:36:32:
                    7e:71:79:cc:72:0b:6d:37:e3:38:20:85:e7:c1:74:
                    80:5f:46:89:98:5b:53:ba:dc:60:d4:b9:33:b2:5d:
                    a9:4e:d8:54:a5:d4:46:2c:b9:7e:63:10:ed:4f:03:
                    88:fb:ac:6c:fe:aa:34:40:f1:ca:0d:db:07:ec:7f:
                    3c:4d:2c:0b:c9:4c:7f:29:c5:ef:8f:b4:80:12:0d:
                    61:f8:7e:5e:65:a7:7a:d6:b2:eb:9b:72:35:ef:90:
                    04:fe:92:85:a0:ef:f5:01:25:12:43:49:54:6a:a8:
                    0b:36:4b:0e:bd:f3:cd:4b:08:1e:49:e3:f3:da:43:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:85:DD:40:F8:FA:16:1C:47:F8:EE:21:89:53:AA:37:0B:BD:7F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/jmmF3UD4-hYcR_juIYlTqjcLvX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.167.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:41:61:63:81:a1:6d:41:e2:1b:36:40:60:fb:52:1f:64:
         c4:8e:fe:dd:7a:30:a0:a3:13:11:4e:3f:b9:4a:7a:1a:75:56:
         56:98:02:36:ae:44:85:67:f4:d5:7c:a2:9c:3d:4a:0e:ca:8f:
         b8:3d:e1:71:4b:b3:66:90:3b:23:cc:59:29:f8:eb:f3:d1:04:
         18:ea:b1:6f:ee:6b:79:1a:2c:46:88:f0:9e:42:a5:9f:21:28:
         f4:39:77:51:a5:de:b8:ee:4b:4b:97:c0:ed:51:bc:c8:48:5a:
         b2:3d:9c:39:01:99:9f:6f:64:6c:7e:db:31:a9:20:76:9e:76:
         05:9b:a9:e9:bf:92:aa:c9:14:72:51:6a:cb:3d:00:be:eb:2a:
         87:ae:b2:08:28:73:e0:8a:eb:90:a3:ee:bd:71:ad:2e:32:73:
         bb:68:0f:71:b6:c5:ea:49:6a:88:a5:2f:f3:54:77:27:1d:85:
         c4:05:eb:2c:16:94:2d:4e:a2:5a:0d:fc:f2:25:a8:e3:3f:94:
         b0:0d:50:44:b8:3f:7b:3e:69:86:15:f2:f5:dc:ac:a4:f9:72:
         98:9b:f4:7c:a1:b2:5b:94:32:d0:09:b8:56:c2:32:0d:e3:11:
         b0:fd:c1:10:6c:58:88:31:f0:c6:fe:b2:cd:2a:bc:88:05:42:
         2e:e4:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org