Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/XMzTQ0t0rP0wVbPo9pthsEopm0I.roa
File:                     XMzTQ0t0rP0wVbPo9pthsEopm0I.roa (raw, json)
Hash identifier:          D7x+hoWSwpd2XLmjqyPJI/FIPdxz7DaF0iXmtmeYgQU=
Subject key identifier:   5C:CC:D3:43:4B:74:AC:FD:30:55:B3:E8:F6:9B:61:B0:4A:29:9B:42
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       41
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/XMzTQ0t0rP0wVbPo9pthsEopm0I.roa
Signing time:             Thu 01 Dec 2022 01:28:50 +0000
ROA not before:           Thu 01 Dec 2022 01:28:50 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        210.155.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:28:50 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=5CCCD3434B74ACFD3055B3E8F69B61B04A299B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:13:82:22:86:9a:1f:16:3e:cc:18:2f:a0:
                    23:29:00:cb:e9:05:2b:a7:5e:06:7c:10:f1:41:d5:
                    5e:cd:52:d6:54:50:c8:24:9b:ec:9a:93:41:eb:82:
                    10:8c:77:80:66:9a:e3:6d:0e:08:c2:56:ec:52:7e:
                    44:e6:88:3b:e9:8f:d9:52:36:08:9c:d2:3f:eb:24:
                    e6:35:91:09:4f:d0:f9:71:f4:6b:d4:40:ad:c2:ed:
                    cc:0a:89:fc:3b:26:a2:e9:9e:11:2b:18:1d:e3:59:
                    03:65:11:44:5c:0f:9e:b2:14:cd:40:a6:8d:53:fe:
                    5e:3d:f3:e3:c2:68:29:51:f3:52:31:99:17:0b:99:
                    c0:aa:68:eb:40:e4:17:d3:85:61:1a:d5:57:0c:e2:
                    79:7a:c6:e6:66:18:90:ab:a1:86:9e:07:97:60:99:
                    8e:9c:24:df:e5:b4:b9:f2:ed:a3:60:85:5a:a6:b9:
                    b2:0f:ac:f7:87:1a:36:20:f1:20:ea:33:ae:36:db:
                    eb:2a:2b:e0:a4:49:a0:29:01:5b:47:c8:88:39:68:
                    65:1b:29:9d:01:91:fc:17:76:4f:5d:52:32:20:69:
                    0d:e6:09:a2:7a:6a:47:e0:01:81:4f:7f:00:70:ab:
                    ff:b7:85:e7:88:c4:f7:a1:6c:01:f5:3a:35:f0:0c:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CC:D3:43:4B:74:AC:FD:30:55:B3:E8:F6:9B:61:B0:4A:29:9B:42
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/XMzTQ0t0rP0wVbPo9pthsEopm0I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:04:53:b0:d8:49:1d:e0:c5:8c:5d:f5:7e:c8:7f:09:8f:
         32:d1:1b:92:c3:10:9d:4e:5a:dc:88:54:87:b0:3f:ff:8c:67:
         47:a9:f5:cc:c2:6c:67:a5:34:87:73:ec:a6:da:d0:b4:24:5c:
         50:63:68:77:45:a9:2a:19:fe:23:5a:4d:00:53:ea:fe:7a:78:
         14:e9:c8:55:51:c6:2a:cb:2b:26:37:8b:2c:43:15:99:d5:5b:
         a2:a9:d8:b0:65:3a:98:00:83:6d:6c:26:34:75:26:eb:c1:bc:
         15:fc:39:84:b9:a5:13:75:3b:d7:1e:e2:ba:c5:38:3c:97:14:
         72:94:6c:16:14:c6:64:61:22:46:54:79:c9:54:ed:d3:62:9b:
         93:be:1e:13:24:c4:50:89:62:a9:c7:aa:10:3a:94:af:62:e0:
         5c:a2:68:42:48:4a:51:4e:00:46:ca:d7:b8:73:3b:a3:91:b9:
         0b:da:fd:f6:9d:de:fd:70:8e:e0:d7:e0:9f:40:44:80:aa:8f:
         e8:28:30:ad:f4:b5:d5:48:f4:8a:d9:78:dc:5b:74:0e:4e:d0:
         b4:72:01:54:75:97:cb:bc:4b:43:10:fc:24:0c:67:81:df:61:
         a0:0c:a4:a0:47:bb:82:0b:00:69:ec:b0:e2:f0:31:89:cd:91:
         ea:13:57:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org