Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/h_cEF4AnhTlJiST1ofdgePDZyNI.roa
File:                     h_cEF4AnhTlJiST1ofdgePDZyNI.roa (raw, json)
Hash identifier:          yIEY+nQdaqovILHT1N5DopTyKKi2A5GhqF/obkNYpg4=
Subject key identifier:   87:F7:04:17:80:27:85:39:49:89:24:F5:A1:F7:60:78:F0:D9:C8:D2
Certificate issuer:       /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial:       34
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/h_cEF4AnhTlJiST1ofdgePDZyNI.roa
Signing time:             Sun 01 May 2022 01:29:56 +0000
ROA not before:           Sun 01 May 2022 01:29:56 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55391
IP address blocks:        14.0.8.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
        Validity
            Not Before: May  1 01:29:56 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=87F7041780278539498924F5A1F76078F0D9C8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:f4:52:10:2d:b1:62:b1:6a:12:94:2d:47:
                    5f:36:e8:ee:08:c6:c8:b2:a8:39:1b:af:30:1f:12:
                    33:df:46:b1:73:c1:07:67:0e:ba:ab:98:40:eb:99:
                    9d:0d:64:b3:a7:2c:b2:8b:e1:10:fc:3b:67:76:cb:
                    5a:cd:c7:07:45:a1:2d:54:de:be:e7:85:64:a7:ad:
                    22:bc:15:81:88:06:7f:75:b7:09:88:b6:d5:9c:ea:
                    9d:d7:df:a4:38:5a:e3:a3:7d:fc:5b:e1:2d:f1:59:
                    64:68:f9:fc:0d:21:68:54:d3:88:6f:c2:08:3c:d7:
                    86:15:a8:3a:03:b4:e2:3f:d0:22:77:c8:38:67:f7:
                    af:54:4c:69:e4:fb:ce:7d:38:de:c5:24:43:f7:1a:
                    50:da:df:5b:6e:2a:74:4e:95:da:06:ad:8f:f9:fd:
                    dd:49:55:a4:e0:75:74:54:ec:c9:b0:e1:bd:40:d6:
                    cd:82:8f:fc:08:78:c3:2d:91:48:e7:46:20:9b:4a:
                    4b:4e:5e:8f:9d:03:8b:79:26:e5:58:03:d2:e2:dc:
                    2b:3d:89:da:7f:9c:61:85:af:1c:5d:aa:77:c6:4e:
                    b2:ea:52:51:24:b3:59:69:c1:4e:ff:9a:5f:0e:25:
                    19:53:62:50:15:89:e1:5c:5f:9b:2b:0f:76:61:ee:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:04:17:80:27:85:39:49:89:24:F5:A1:F7:60:78:F0:D9:C8:D2
            X509v3 Authority Key Identifier:
                keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/h_cEF4AnhTlJiST1ofdgePDZyNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:be:dd:c4:21:00:8e:a3:06:12:42:cc:08:7b:8d:b9:17:
         ee:18:31:73:18:8b:f9:05:94:2d:0c:92:89:2e:29:bf:a7:a3:
         53:a7:b3:e0:bf:63:e1:7c:33:4d:01:5f:4b:38:37:88:47:d8:
         ff:24:05:f2:b3:5f:02:55:3b:79:6e:af:23:ea:93:ad:e7:c7:
         48:c1:6c:1c:3a:fd:0f:cf:20:eb:de:6e:f2:e4:77:8b:b4:1e:
         42:a5:e1:23:5a:e1:8b:b9:35:ee:8d:bb:20:a7:b0:19:49:86:
         be:e4:3b:67:a9:d9:86:df:a4:a3:99:77:87:f5:8b:fc:0b:6b:
         62:63:b5:a5:eb:9e:ce:bf:e6:cd:fa:8e:fc:e7:65:b3:71:e2:
         07:c2:7d:ba:2e:b3:42:8f:cd:fa:96:37:5e:b5:52:3b:74:4a:
         b9:b6:ac:0e:9d:54:cf:66:00:c2:4b:b5:64:98:7a:64:fc:79:
         df:83:67:b7:69:1e:5d:b4:43:ea:54:67:d5:31:50:a7:5f:27:
         82:76:47:68:60:19:31:83:fb:4e:34:e2:9f:c5:d9:8d:a6:f9:
         e6:e0:a9:a8:07:06:33:81:ea:34:35:3e:d1:a0:e8:90:d1:52:
         e2:eb:ca:a9:23:be:43:41:67:b1:c5:7a:f0:1a:32:87:47:0b:
         d5:8a:c0:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org