Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nx_FMWtlL7Zt6dYeteknWqgEvvk.roa
File:                     nx_FMWtlL7Zt6dYeteknWqgEvvk.roa (raw, json)
Hash identifier:          1GhdAl14o0n0LVL2fwxwu6Nvd7+u0fUd2+I+8nNRX7k=
Subject key identifier:   9F:1F:C5:31:6B:65:2F:B6:6D:E9:D6:1E:B5:E9:27:5A:A8:04:BE:F9
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       32
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nx_FMWtlL7Zt6dYeteknWqgEvvk.roa
Signing time:             Mon 01 Aug 2022 01:28:40 +0000
ROA not before:           Mon 01 Aug 2022 01:28:40 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:40 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=9F1FC5316B652FB66DE9D61EB5E9275AA804BEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:a5:b0:b0:30:19:30:04:c3:53:ea:81:e6:
                    4d:cd:c8:67:9c:8d:8a:94:95:fc:00:9c:24:e0:00:
                    ac:9e:fb:cc:b2:65:b0:d6:a1:75:6c:a0:0a:1d:29:
                    a3:1e:e1:08:09:f9:0e:67:28:d3:b9:33:5a:31:d2:
                    9e:6c:06:ae:5c:62:86:b1:a0:b0:db:f7:c8:27:e3:
                    ee:18:ac:84:74:97:40:78:ed:5e:af:a3:0c:07:17:
                    0b:44:b2:37:6e:c1:98:6b:a8:b7:13:5a:34:e5:58:
                    75:33:14:44:8d:a8:7f:0f:0e:36:db:fd:91:19:b9:
                    f8:ac:c5:c6:07:e7:6f:5c:8d:81:01:da:cd:fd:77:
                    f9:a4:df:11:9c:3e:2c:1d:37:ec:bf:5e:e6:a4:3e:
                    a0:32:23:d7:17:a0:79:05:61:3c:64:ad:de:88:fd:
                    51:37:a5:ab:60:c1:3c:c4:6a:d6:7e:53:3b:87:7b:
                    19:48:02:1c:8f:da:bc:f4:e2:79:53:e8:b9:64:19:
                    e9:d8:a5:89:79:c8:51:1d:20:71:7e:25:94:d5:e7:
                    8d:90:d6:48:c8:73:7c:de:66:40:f4:54:21:7a:8a:
                    d2:2a:50:4f:a4:4a:62:20:81:f6:19:07:c5:e7:89:
                    e3:30:10:92:d9:44:ac:5a:97:8d:ec:18:d0:73:1c:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1F:C5:31:6B:65:2F:B6:6D:E9:D6:1E:B5:E9:27:5A:A8:04:BE:F9
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nx_FMWtlL7Zt6dYeteknWqgEvvk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:cf:d8:20:14:5f:8d:d1:70:e6:fc:33:bf:b0:39:44:3c:
         87:d9:0c:80:f5:71:e6:ac:81:5c:16:8a:9b:49:81:35:7a:a8:
         ce:b2:61:75:d9:0b:5a:2e:7c:6b:0b:43:80:f7:55:00:17:4f:
         28:d5:7f:98:82:32:49:9b:05:39:e5:16:db:fd:71:67:3f:2b:
         0e:9e:af:33:e5:33:18:39:15:87:24:df:78:c4:ef:e2:56:75:
         a1:3a:37:39:5d:58:02:8e:52:9e:f1:a2:08:43:90:f8:b1:62:
         f2:24:43:29:89:da:cb:84:e1:55:27:50:08:72:e5:8e:2f:7f:
         32:b5:f3:c6:40:3e:69:a5:3a:aa:e5:e9:8b:1f:8c:a4:c5:84:
         8f:69:af:e9:5f:28:60:ac:e8:2e:65:87:ac:60:14:b2:75:2a:
         0d:cb:ef:6c:3d:6e:90:e4:81:bd:95:f2:9f:21:fc:62:66:a2:
         31:5f:3d:2c:23:ce:9b:d5:c6:d8:30:16:73:cc:38:02:0a:fb:
         ce:47:38:17:68:17:87:a8:52:b5:85:b8:14:7f:45:59:a1:08:
         7c:ce:5f:9b:f7:bc:e6:bb:bc:2c:76:ea:49:ec:ff:22:4e:53:
         ec:83:b2:a2:96:a8:fd:3e:b0:bb:f8:3e:fa:bc:30:09:02:cf:
         24:83:a9:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org