Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/EV-8WY7aDgbyVUqivAWGt53o_zo.roa
File:                     EV-8WY7aDgbyVUqivAWGt53o_zo.roa (raw, json)
Hash identifier:          PHocGtl21nF1GfmJT++Mcs+WfZvk7d2E2AcG2eBXEJ8=
Subject key identifier:   11:5F:BC:59:8E:DA:0E:06:F2:55:4A:A2:BC:05:86:B7:9D:E8:FF:3A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0164
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/EV-8WY7aDgbyVUqivAWGt53o_zo.roa
Signing time:             Mon 01 May 2023 01:28:21 +0000
ROA not before:           Mon 01 May 2023 01:28:21 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        124.84.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:21 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=115FBC598EDA0E06F2554AA2BC0586B79DE8FF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:31:0f:31:fc:79:ac:24:09:f6:ca:89:f9:92:
                    b4:c8:91:22:40:26:d7:bb:d8:08:8e:f4:de:29:8b:
                    b9:b6:da:dc:a8:42:4d:66:64:bd:d7:79:68:17:01:
                    7c:ea:d4:cb:78:fe:02:8b:a2:13:cc:6b:19:f4:32:
                    e5:f3:74:a8:07:01:13:9e:2a:e1:00:2d:1b:de:fd:
                    a6:19:7a:c3:0a:bf:2c:12:f4:36:95:94:d1:e2:37:
                    c2:6d:46:51:cc:69:ca:cd:08:19:f4:af:43:ce:c7:
                    96:b5:3a:98:e5:98:98:90:a0:12:5e:e7:83:40:c9:
                    9e:4b:b2:fb:07:1f:7a:01:1d:85:6b:a0:e6:08:af:
                    df:9f:50:3c:79:21:a6:79:0c:cb:93:45:fa:ed:f1:
                    fb:3b:17:11:0b:7a:b6:b5:f7:38:54:ab:89:e2:1e:
                    96:03:40:46:85:2f:74:97:41:5c:19:79:6e:70:d5:
                    49:6f:4f:e7:29:43:65:ff:9e:f9:d7:e9:5c:9b:be:
                    c5:42:61:79:79:38:e1:db:c1:b3:d3:5c:a5:d8:58:
                    ec:b9:56:41:6b:f0:81:b1:b1:bc:24:d9:46:5a:96:
                    a4:23:3a:d1:76:fe:31:a5:e9:c2:0d:0c:dc:04:28:
                    51:ca:5c:13:74:b4:3d:91:eb:7d:8f:5e:91:41:a3:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5F:BC:59:8E:DA:0E:06:F2:55:4A:A2:BC:05:86:B7:9D:E8:FF:3A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/EV-8WY7aDgbyVUqivAWGt53o_zo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.84.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c5:4c:44:be:01:5f:0b:3d:78:b1:f9:34:f8:d2:d1:05:d9:8f:
         19:9f:d4:e4:42:1e:d9:fe:bd:56:f0:40:2e:b5:51:c2:3d:09:
         73:b3:f8:54:8a:f3:3f:17:ca:03:b7:b2:61:26:32:5e:2c:44:
         9d:11:53:a9:8f:39:5d:2c:86:a1:34:be:37:f5:b0:1c:99:05:
         56:69:a9:ff:3e:28:ce:2e:80:6d:91:bd:33:59:5c:18:2b:c3:
         5c:2e:b0:01:cd:c0:42:4b:e9:44:bb:3f:1e:80:27:a6:6d:01:
         56:83:a6:f5:db:36:04:2d:67:86:1f:b1:3d:5d:73:22:47:ba:
         77:92:3a:40:5c:52:97:f0:27:6e:6f:41:88:80:dd:5c:90:e9:
         3c:69:f2:b4:ea:45:76:11:34:93:8a:39:ca:c1:ce:a8:3d:63:
         ff:46:9a:e4:d4:63:d2:3c:ba:54:b1:a5:a0:f1:89:7b:84:5d:
         17:fa:04:75:62:e5:ef:36:5e:ef:71:18:5c:2a:98:06:3b:52:
         96:30:a7:a8:06:b7:9a:0e:2d:68:41:bc:e3:2f:f2:ea:be:56:
         6d:20:bb:fa:22:cc:c1:ca:c8:0d:6a:ce:a0:a7:93:f0:4a:da:
         d3:c0:28:b8:d6:34:c5:61:1c:7f:b5:66:84:33:17:41:42:1b:
         5b:b4:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org