Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mlei7EeaQfOrRbUPPtSKucq-37I.roa
File:                     mlei7EeaQfOrRbUPPtSKucq-37I.roa (raw, json)
Hash identifier:          pL6ZMoRaNdhCauRTHEmyhj14JQdtJeSVb3f/4T4ZdSc=
Subject key identifier:   9A:57:A2:EC:47:9A:41:F3:AB:45:B5:0F:3E:D4:8A:B9:CA:BE:DF:B2
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       017C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mlei7EeaQfOrRbUPPtSKucq-37I.roa
Signing time:             Thu 01 Dec 2022 01:28:34 +0000
ROA not before:           Thu 01 Dec 2022 01:28:34 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        219.94.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:34 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=9A57A2EC479A41F3AB45B50F3ED48AB9CABEDFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:30:75:bd:80:0e:96:35:6f:c6:d3:07:ef:
                    96:ab:ab:13:9c:b8:0c:db:0f:13:e9:0e:b8:82:7b:
                    0a:76:8f:89:ce:0b:97:ac:78:25:6b:f5:74:2a:eb:
                    6a:ff:18:95:23:8b:54:2e:03:58:1c:79:0a:01:61:
                    4c:59:76:e6:04:11:cc:9f:2a:0f:43:7b:76:2d:d6:
                    42:4b:62:38:4c:6f:57:7d:8d:46:60:07:8e:9e:d5:
                    9f:88:0b:4e:00:d1:0a:12:6d:9d:3e:67:f5:0c:a9:
                    47:e7:26:fd:c9:c5:f1:5e:2c:58:47:31:f1:66:0d:
                    50:a0:51:66:72:f0:89:d7:7b:63:ce:90:44:d5:a6:
                    16:fb:5f:58:1b:c4:20:aa:32:f4:91:0a:88:b2:95:
                    01:77:1f:6e:c9:80:7c:4e:80:62:7d:06:c4:41:53:
                    bc:f2:60:a2:16:30:c7:48:47:95:35:6e:9d:73:1d:
                    30:b4:9d:bc:7f:fd:7f:37:40:1a:8d:a7:ce:7e:0e:
                    6f:ce:ed:4a:da:8b:57:ac:a4:f9:78:73:80:80:32:
                    61:18:43:81:37:29:55:0d:66:28:e3:77:07:2b:d1:
                    63:cd:3b:7e:f1:b4:ba:b8:38:6e:2d:ff:d2:8a:2e:
                    dc:5a:04:90:5b:c8:a3:0f:a6:94:ad:3b:66:88:7f:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:A2:EC:47:9A:41:F3:AB:45:B5:0F:3E:D4:8A:B9:CA:BE:DF:B2
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mlei7EeaQfOrRbUPPtSKucq-37I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:3f:02:4e:2a:fd:5d:82:4d:ee:fb:be:5e:af:d0:8f:8b:
         10:61:cd:dd:fa:80:4f:c0:fb:8c:60:b5:93:ef:7f:47:51:a5:
         7a:64:3f:44:8a:3f:39:04:5a:84:80:9f:3d:9c:e7:61:42:c7:
         d6:15:24:63:64:1b:54:8d:4a:61:49:ed:99:5a:d2:30:69:d7:
         90:0a:f3:06:26:a5:51:95:17:7b:0d:9d:98:ec:b0:a4:5d:aa:
         8d:9f:4f:e1:31:19:b0:74:5d:d1:f9:5b:fa:f7:1b:8c:b8:b2:
         b0:a8:87:8b:a6:fc:49:4d:d8:0d:b5:7e:e3:f1:0c:d5:81:9e:
         5d:88:70:74:b7:78:b4:e0:02:5a:f0:b2:78:39:d9:73:7d:b8:
         55:03:3c:73:09:1a:52:25:ae:bd:45:01:20:4a:47:de:3a:78:
         27:cb:a8:26:65:ca:d7:5e:b8:08:f2:2d:9f:b7:d1:18:0c:24:
         88:da:4c:71:79:d8:d4:c5:d0:ed:9e:af:1f:3e:db:05:3b:52:
         82:0d:7b:74:d7:34:95:21:79:b9:cb:13:de:04:2b:29:9d:4d:
         66:4a:1f:7e:10:5e:69:85:f7:12:eb:bc:7e:e6:7a:48:76:a1:
         99:70:9f:ec:9f:2e:21:5c:e3:32:01:87:6d:e7:3a:46:fe:c8:
         dc:4e:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org