Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/jbVfxllkUpeWOI9lV5uVSSnK4rg.roa
File:                     jbVfxllkUpeWOI9lV5uVSSnK4rg.roa (raw, json)
Hash identifier:          2epIIHaaravYOcKqVM1nIMsJq8cW53VI0k1TuKvZ+78=
Subject key identifier:   8D:B5:5F:C6:59:64:52:97:96:38:8F:65:57:9B:95:49:29:CA:E2:B8
Certificate issuer:       /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial:       2C
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/jbVfxllkUpeWOI9lV5uVSSnK4rg.roa
Signing time:             Fri 17 Mar 2023 13:10:57 +0000
ROA not before:           Fri 17 Mar 2023 13:10:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     16509
IP address blocks:        150.35.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
        Validity
            Not Before: Mar 17 13:10:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8DB55FC65964529796388F65579B954929CAE2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:b3:51:22:ef:00:c3:53:2a:a6:75:1e:3d:
                    6a:b1:89:fe:aa:04:f2:00:55:5a:7e:81:a8:f6:95:
                    39:f8:06:51:98:ed:57:58:db:f6:e1:3f:d2:f6:0d:
                    98:ed:0e:0f:66:20:df:84:e7:5d:a9:ef:fb:85:5d:
                    d2:6b:80:d8:02:d2:0d:5a:66:46:51:4c:1b:45:ca:
                    6b:81:9d:18:bb:05:ca:6c:4f:04:fe:23:aa:5d:cb:
                    29:24:9d:02:d6:be:41:ad:74:18:a1:a6:0a:f6:ad:
                    ff:a5:c2:a3:9e:c2:68:2e:16:0c:7c:3c:90:80:c2:
                    25:37:73:2e:55:79:2a:3b:e6:d0:d7:ff:fd:ac:bf:
                    ee:4f:b8:c5:50:d5:dc:52:5d:55:c5:24:e6:d9:b7:
                    c5:e9:a2:d9:0c:dd:a8:90:48:12:76:6e:0d:ab:b1:
                    9b:d0:ab:80:cd:92:fc:18:b0:02:ca:35:26:b9:f5:
                    2e:4e:d6:c3:a7:43:97:4f:80:6e:f2:3e:e4:94:e1:
                    19:c1:1f:64:d7:8a:11:c1:ab:b8:da:58:44:2a:14:
                    5a:e3:a3:05:a0:0b:b7:55:7b:a2:dd:1e:70:b2:40:
                    30:2e:44:d4:1e:0d:bd:05:fb:fb:b2:56:8c:99:e0:
                    26:c5:a0:40:80:d4:be:29:86:e4:de:8a:ae:e0:3f:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B5:5F:C6:59:64:52:97:96:38:8F:65:57:9B:95:49:29:CA:E2:B8
            X509v3 Authority Key Identifier:
                keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/jbVfxllkUpeWOI9lV5uVSSnK4rg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.35.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:e8:64:a1:1a:7e:86:63:bc:82:c3:c4:d3:84:02:e2:0d:
         53:9d:18:48:1f:75:2c:28:e4:1d:ca:85:0e:3b:db:df:10:90:
         26:dd:86:7b:97:09:be:c4:30:2c:4e:e7:a5:f3:48:dd:6a:81:
         00:8d:37:cc:b6:ce:10:18:31:84:7a:3e:07:6f:11:81:25:a4:
         10:57:3a:68:40:70:c5:4a:02:e0:31:f3:51:f9:73:2f:7a:b7:
         b3:49:bf:9e:91:7e:70:97:c3:a3:58:e4:cb:9c:f1:42:f5:5e:
         a6:92:2f:71:02:1d:01:16:10:f2:df:87:e9:b0:ef:57:8e:fa:
         75:e0:3b:4f:4f:9a:49:cf:f6:4d:33:10:05:97:3b:a1:a1:7a:
         56:19:f4:a9:1c:dd:e6:ae:90:67:3e:ca:aa:f0:b2:91:be:49:
         94:4e:03:ab:41:12:72:5e:c5:b0:85:5a:16:a5:1e:bd:b5:f3:
         3d:b1:89:8e:1b:95:56:11:f1:80:5d:d3:62:48:f2:d6:90:b7:
         9f:44:f2:69:62:86:fc:0a:5e:94:4d:28:36:a0:fa:ee:2b:42:
         d1:27:09:cf:18:cc:a2:a2:f4:aa:b9:5b:bb:e1:bc:15:21:16:
         17:b7:67:45:80:78:7f:fc:11:77:67:3b:9e:00:49:d3:a9:6b:
         ef:3c:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org