Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PizV7EICjsSzGYdwgkhf_sIFrVg.roa
File:                     PizV7EICjsSzGYdwgkhf_sIFrVg.roa (raw, json)
Hash identifier:          C+DjfWvs9OaolHszVFIEliU6V8/Vj5rKE0jglLk/e/Q=
Subject key identifier:   3E:2C:D5:EC:42:02:8E:C4:B3:19:87:70:82:48:5F:FE:C2:05:AD:58
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       36
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PizV7EICjsSzGYdwgkhf_sIFrVg.roa
Signing time:             Mon 01 Aug 2022 01:28:41 +0000
ROA not before:           Mon 01 Aug 2022 01:28:41 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.126.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:41 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3E2CD5EC42028EC4B319877082485FFEC205AD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:0e:2f:a4:33:db:06:11:aa:dc:22:15:0d:
                    1a:b3:a2:0b:a1:14:e8:54:ef:37:6f:17:b9:e8:50:
                    3a:f6:fd:05:e6:55:a1:09:ae:9e:bf:e6:7f:bc:da:
                    9f:f4:60:30:ca:79:c5:e3:d5:74:57:b5:e5:66:32:
                    28:d7:4b:fd:f8:10:1e:3c:32:e9:4e:9a:43:d2:29:
                    9a:c2:0c:02:d2:14:db:9e:a5:98:fc:4f:67:44:b4:
                    a3:54:ab:da:f2:fd:80:f8:09:7f:3a:9d:d6:3f:f7:
                    31:b5:0e:80:07:f3:53:f5:40:97:ca:b1:cd:03:db:
                    8e:b4:0c:49:68:60:6f:ec:b4:47:89:de:4c:6e:b5:
                    6f:19:f4:0e:fa:bb:42:20:40:31:d9:a1:2f:b9:28:
                    1a:ae:7f:f6:08:b1:b9:59:23:e9:32:8a:c6:35:21:
                    aa:0f:16:88:e6:c7:65:8a:e7:a7:a5:25:c8:70:bd:
                    0d:bc:eb:36:06:72:1e:6b:8d:73:cc:9c:7f:cd:a3:
                    c1:b2:f5:99:52:fd:a9:1d:85:3c:1c:93:33:05:69:
                    54:fe:da:c4:1b:19:69:2a:35:8e:9e:fc:4a:05:fe:
                    a5:91:d3:21:e4:13:1f:77:13:af:45:5b:e1:ad:f1:
                    31:36:5f:40:40:90:63:f5:2f:cb:76:c6:f9:c9:c1:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2C:D5:EC:42:02:8E:C4:B3:19:87:70:82:48:5F:FE:C2:05:AD:58
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PizV7EICjsSzGYdwgkhf_sIFrVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:da:15:e8:3b:39:39:95:53:1b:80:b3:6e:a9:f2:5a:16:
         71:1b:af:eb:cf:5b:b7:82:b5:52:cb:a6:57:97:3c:e5:ab:14:
         c9:cc:6c:db:e8:84:4e:73:8f:38:b8:a0:4a:f9:4b:c3:32:27:
         30:81:06:f8:fc:c1:89:20:54:bf:17:ba:b1:f4:36:72:ad:a9:
         b3:f3:66:c4:36:48:53:bf:3d:0f:2c:d2:75:94:3d:d2:1c:96:
         36:07:44:75:0f:cb:83:2d:7f:2f:d5:83:63:57:cc:94:34:bc:
         95:38:13:35:04:b7:8b:c0:c6:84:58:e4:79:a3:6e:ac:c3:30:
         76:4b:73:55:ca:a2:8e:12:71:08:f1:8f:44:bd:cb:3e:84:97:
         24:91:93:06:c0:e9:f5:c1:bd:05:13:24:48:24:80:eb:65:85:
         9e:f2:cc:43:cd:18:61:e3:24:ae:b6:ca:01:37:f2:1a:29:77:
         c5:a2:07:ee:54:e3:d6:cf:1c:13:0c:0b:70:98:71:44:b0:be:
         23:85:08:92:1e:6e:f7:96:77:91:5b:ef:52:8e:62:09:dd:e2:
         b1:2c:8c:f9:ab:93:8b:22:4b:76:39:15:ec:e9:20:27:b0:a3:
         24:be:d6:77:62:49:48:c0:77:fa:70:41:74:3f:48:11:17:c2:
         4f:d4:71:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org