Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/NgPH3G_7uIZeRoK1GsfuY9emapE.roa
File:                     NgPH3G_7uIZeRoK1GsfuY9emapE.roa (raw, json)
Hash identifier:          gLGhM0d3r53a3jFudlUo/tNj10dyO+hrnAOH7wcWkgA=
Subject key identifier:   36:03:C7:DC:6F:FB:B8:86:5E:46:82:B5:1A:C7:EE:63:D7:A6:6A:91
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       29
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/NgPH3G_7uIZeRoK1GsfuY9emapE.roa
Signing time:             Mon 01 Aug 2022 01:28:56 +0000
ROA not before:           Mon 01 Aug 2022 01:28:56 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     24295
IP address blocks:        122.255.76.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Aug  1 01:28:56 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3603C7DC6FFBB8865E4682B51AC7EE63D7A66A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:42:e1:1d:93:33:5c:90:13:25:cf:51:85:
                    6f:29:4b:5f:54:1c:aa:a3:17:91:0b:2f:98:39:c9:
                    c3:1b:7c:9a:ed:66:79:73:5d:3f:6b:d0:0f:52:29:
                    a7:11:63:e8:ae:e8:06:9f:5b:1d:ff:21:98:9e:fc:
                    06:72:9a:34:1f:b0:9d:bb:31:95:d7:26:4c:b7:94:
                    c5:63:7d:f6:fe:82:f1:c6:ed:ac:76:93:c5:3e:e2:
                    72:3e:64:9e:2a:96:04:d2:b3:16:25:4a:e1:9e:f1:
                    6f:4b:06:9a:c4:5f:1f:b8:83:ae:e4:8d:dc:45:58:
                    a9:fa:53:37:f9:b5:dd:d7:8b:f4:50:28:73:05:ef:
                    fd:bf:b5:86:79:dc:6e:97:a0:f6:bd:22:1d:b4:ba:
                    86:ac:25:22:ef:b2:54:d2:af:e1:93:bc:9b:31:64:
                    7f:a3:92:56:1e:96:44:8c:9f:4e:f9:4d:37:4b:3e:
                    37:b7:68:82:93:87:b6:5f:de:53:ad:e4:c9:1f:ea:
                    1c:0d:36:76:26:fc:82:12:d7:51:ff:35:47:5b:6b:
                    22:f2:cd:fd:e6:ac:ce:ed:4f:5e:44:8a:dc:d4:49:
                    d8:eb:fd:3f:6a:6c:87:c2:62:d5:99:9c:78:82:49:
                    4e:3c:9d:99:c1:fb:59:69:41:cf:25:d5:cc:45:8b:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:C7:DC:6F:FB:B8:86:5E:46:82:B5:1A:C7:EE:63:D7:A6:6A:91
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/NgPH3G_7uIZeRoK1GsfuY9emapE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:7f:ec:6c:4f:70:14:6d:06:88:c3:85:68:fb:07:89:08:
         a3:e8:9f:16:9a:08:0f:71:c3:42:45:69:3e:34:27:5b:80:fa:
         0c:dd:5e:96:4b:4e:c9:63:cd:ba:6e:23:f3:8c:27:94:52:82:
         8a:c0:5d:a4:06:d5:9b:fa:09:72:72:dd:3d:7c:7c:fa:88:69:
         a0:c1:2a:8a:f5:35:2f:93:82:50:60:ce:6c:e6:f9:31:81:ff:
         12:bb:b3:d8:cf:a4:b7:ab:b9:61:18:54:4a:2d:d3:13:57:70:
         be:27:5b:35:67:97:d2:2f:aa:72:b9:d4:2c:c1:f1:a4:68:60:
         9f:7e:1a:9f:b4:fc:c1:22:70:d7:b3:c4:1b:8a:14:34:60:b3:
         ef:6e:c0:6a:b6:f2:0a:a6:05:92:f1:51:4f:84:76:25:85:e8:
         8a:2e:0d:4e:b9:76:7c:99:c0:d2:74:91:e4:3c:20:f6:70:94:
         84:1c:02:d8:36:5f:ec:4c:b6:d0:09:d0:36:e1:31:05:09:17:
         4e:8f:95:03:18:31:ac:28:29:6f:a6:4a:46:84:b1:cf:db:46:
         2e:ae:b4:42:fd:ec:d1:40:67:01:09:d8:8c:2d:22:d5:c1:7b:
         82:c8:cf:54:3c:a7:9d:6b:92:be:4d:69:cd:a9:08:69:9c:10:
         10:f6:1d:66
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5
NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTIyMDgwMTAx
Mjg1NloXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoMzYwM0M3REM2RkZCQjg4
NjVFNDY4MkI1MUFDN0VFNjNEN0E2NkE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMJDQuEdkzNckBMlz1GFbylLX1QcqqMXkQsvmDnJwxt8mu1meXNd
P2vQD1IppxFj6K7oBp9bHf8hmJ78BnKaNB+wnbsxldcmTLeUxWN99v6C8cbtrHaT
xT7icj5kniqWBNKzFiVK4Z7xb0sGmsRfH7iDruSN3EVYqfpTN/m13deL9FAocwXv
/b+1hnncbpeg9r0iHbS6hqwlIu+yVNKv4ZO8mzFkf6OSVh6WRIyfTvlNN0s+N7do
gpOHtl/eU63kyR/qHA02dib8ghLXUf81R1trIvLN/easzu1PXkSK3NRJ2Ov9P2ps
h8Ji1ZmceIJJTjydmcH7WWlBzyXVzEWL8m8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ2A8fcb/u4hl5GgrUax+5j16ZqkTAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR
yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru
WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNjAyL05nUEgzR183dUlaZVJvSzFHc2Z1WTllbWFwRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJ6/0wwDQYJKoZIhvcNAQELBQADggEBADbAf+xsT3AUbQaIw4Vo+weJ
CKPonxaaCA9xw0JFaT40J1uA+gzdXpZLTsljzbpuI/OMJ5RSgorAXaQG1Zv6CXJy
3T18fPqIaaDBKor1NS+TglBgzmzm+TGB/xK7s9jPpLeruWEYVEot0xNXcL4nWzVn
l9IvqnK51CzB8aRoYJ9+Gp+0/MEicNezxBuKFDRgs+9uwGq28gqmBZLxUU+EdiWF
6IouDU65dnyZwNJ0keQ8IPZwlIQcAtg2X+xMttAJ0DbhMQUJF06PlQMYMawoKW+m
SkaEsc/bRi6utEL97NFAZwEJ2IwtItXBe4LIz1Q8p51rkr5Nac2pCGmcEBD2HWY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org