Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Pa993QkTT7steVLMeFuX23srLwM.roa
File:                     Pa993QkTT7steVLMeFuX23srLwM.roa (raw, json)
Hash identifier:          fuQrl5FXFkXmgmjvnAln6qHhIbc3ICJi9iCSh5yyvtI=
Subject key identifier:   3D:AF:7D:DD:09:13:4F:BB:2D:79:52:CC:78:5B:97:DB:7B:2B:2F:03
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0126
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Pa993QkTT7steVLMeFuX23srLwM.roa
Signing time:             Fri 05 Aug 2022 04:38:39 +0000
ROA not before:           Fri 05 Aug 2022 04:38:39 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.160.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:38:39 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3DAF7DDD09134FBB2D7952CC785B97DB7B2B2F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:59:fe:04:56:67:42:79:08:c4:ce:98:be:
                    69:06:39:05:86:f2:b8:ed:d3:4a:f1:f4:bd:07:03:
                    a7:5c:c5:a0:80:97:5f:a0:41:df:f4:00:e3:5e:be:
                    5a:ed:6d:77:72:0e:ed:ef:25:34:47:98:90:cc:4a:
                    85:cb:de:6d:76:78:6c:51:e9:e7:c7:8a:54:cb:44:
                    ec:46:fb:a3:d3:3c:e4:71:fb:fe:22:b2:4d:78:00:
                    fc:2b:dc:f6:3b:11:2d:18:21:8d:2f:d3:3a:d9:bb:
                    6d:85:38:c1:68:3e:fe:8e:b2:f3:d3:2a:36:11:ad:
                    e2:9d:79:33:04:c2:41:5a:7f:09:a3:18:63:53:2f:
                    71:6d:45:35:b3:16:59:55:2f:26:f6:48:38:84:44:
                    32:8c:c9:85:fc:0a:4a:32:56:bd:9f:80:7f:6e:2c:
                    24:1e:8b:60:f1:90:b3:42:0d:78:2d:3c:ee:cc:e8:
                    0b:e1:c3:16:53:6d:09:a5:d9:c6:ae:22:6e:43:ec:
                    c7:79:b5:e9:f9:08:e3:0e:ee:07:f5:c8:31:19:50:
                    8b:5e:96:a1:de:06:00:c2:c2:1a:b5:86:ea:12:2c:
                    51:36:07:d4:88:22:51:7e:ac:84:35:60:fa:b4:26:
                    91:3e:d7:df:b5:89:d6:bb:70:38:11:1d:f5:10:7f:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AF:7D:DD:09:13:4F:BB:2D:79:52:CC:78:5B:97:DB:7B:2B:2F:03
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Pa993QkTT7steVLMeFuX23srLwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:39:d3:72:57:02:db:c6:ec:3d:5a:64:1f:6c:ab:5e:d5:
         51:dc:8e:36:97:d1:16:dc:fd:d5:9f:bf:1b:83:ad:c8:86:15:
         4b:e7:44:9f:ee:6a:a6:c7:c1:43:c7:c2:90:d2:12:56:99:39:
         e6:9b:9a:cc:da:9a:e1:d5:4e:ee:b8:91:3f:3d:3c:e4:cf:33:
         a5:fe:83:bd:88:85:c9:a3:c0:9e:24:b9:e2:6a:22:06:3f:f2:
         6d:1c:e1:ef:96:e9:0d:98:3a:97:fb:16:f4:75:6a:15:42:28:
         16:c5:d0:8a:22:5d:48:87:86:e5:3a:7d:0a:06:23:d0:ca:b1:
         8c:a1:77:5f:35:fd:b0:d7:ff:89:12:3e:41:13:32:19:e4:87:
         10:ed:e2:72:dc:3a:da:b3:be:b2:b2:2c:98:88:ad:22:1f:cf:
         15:8f:1a:33:82:ed:22:c1:6d:6b:47:10:29:ed:76:40:10:c7:
         f6:ab:95:cc:3c:02:b8:57:5b:c3:71:6c:ef:db:4e:bd:9d:85:
         bd:d5:14:b0:cb:b8:8f:c2:54:b0:83:71:ad:fd:9b:48:b3:77:
         c2:0d:85:6b:61:63:1d:3d:1a:c5:ec:fe:32:50:e8:ec:23:86:
         75:20:cf:c1:57:16:44:9b:1e:e3:7b:da:4a:15:ed:ca:32:3c:
         ae:07:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org