Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/WFzDZIA-21bhcP6YK3syvh-wWjU.roa
File:                     WFzDZIA-21bhcP6YK3syvh-wWjU.roa (raw, json)
Hash identifier:          mz6eH872nc9QQLIbWY69RHSXrweSIdCP0JlPY9Re8Qs=
Subject key identifier:   58:5C:C3:64:80:3E:DB:56:E1:70:FE:98:2B:7B:32:BE:1F:B0:5A:35
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0109
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/WFzDZIA-21bhcP6YK3syvh-wWjU.roa
Signing time:             Fri 10 Jun 2022 03:10:28 +0000
ROA not before:           Fri 10 Jun 2022 03:10:28 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        114.160.0.0/11 maxlen: 11

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:10:28 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=585CC364803EDB56E170FE982B7B32BE1FB05A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:f7:ba:54:85:46:b3:34:b9:37:40:a2:31:
                    c5:12:03:e6:1e:aa:4a:c0:f7:21:6c:d2:cd:f8:82:
                    59:ee:5f:84:51:e7:0b:19:b5:f6:a2:f5:72:5d:02:
                    11:86:8a:10:a4:d3:78:a3:06:17:f3:87:41:cf:3f:
                    54:ec:5d:05:85:c9:23:18:d8:c8:26:e3:53:c5:9f:
                    58:ac:8d:5e:17:80:1a:91:40:03:2a:ef:29:a2:cf:
                    79:d1:ad:bb:8b:11:15:14:cf:8e:e6:28:61:aa:11:
                    a0:c2:fa:4f:4c:78:a8:67:68:92:a3:b2:13:b4:73:
                    38:25:ae:8f:27:26:f0:d3:ac:14:ee:fa:0a:b5:de:
                    94:97:ce:56:55:85:e8:86:c0:f6:c1:1e:eb:ea:c7:
                    b6:9b:0b:95:1d:ff:03:c8:09:ed:7d:35:16:dc:89:
                    ce:32:a2:f7:14:bd:bc:c2:8d:33:2e:57:6c:ba:01:
                    00:f8:8d:e8:39:c4:23:de:cf:17:c0:49:f5:6d:9f:
                    4b:4c:26:83:d6:53:b7:c5:96:27:e8:5e:3d:19:82:
                    f3:6c:e8:53:51:21:e2:ea:58:c1:7d:6b:1e:32:36:
                    91:e0:46:5b:fa:ee:39:7a:fe:89:16:c7:fc:72:17:
                    18:a0:58:34:b0:ad:05:09:51:d6:e5:83:a6:43:e2:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:C3:64:80:3E:DB:56:E1:70:FE:98:2B:7B:32:BE:1F:B0:5A:35
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/WFzDZIA-21bhcP6YK3syvh-wWjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:6e:76:a0:9d:18:b7:9c:23:86:22:19:81:76:48:34:4f:
         77:7b:9c:fc:12:37:3d:07:67:ca:ad:8b:82:89:c8:df:81:cb:
         8a:37:c6:51:e8:01:74:74:2e:e8:c3:7e:35:05:e0:ec:9a:a5:
         2a:f1:50:60:67:37:82:0e:91:36:40:c6:53:b9:dc:c4:c5:76:
         a4:0d:ac:a3:98:97:fd:3b:a7:2a:4d:1e:27:84:52:55:df:4d:
         d0:1e:05:e3:db:ce:2a:99:ae:1c:59:b5:9f:13:dd:28:49:7a:
         a2:d0:f0:54:4e:e1:73:e0:6d:40:87:09:de:c4:71:f0:c3:56:
         88:54:51:2f:b7:d8:c0:71:cd:67:8d:6b:62:70:d8:e4:10:67:
         de:a9:e3:73:f8:13:37:04:57:f0:41:f4:04:f2:a8:a1:d5:ab:
         34:fe:5a:7f:29:ee:1b:09:7f:4d:ad:5f:a1:1e:48:9d:0b:bc:
         6b:35:31:82:b2:f1:a9:b1:e3:1a:3b:05:e1:96:47:d0:88:4a:
         24:a4:8d:06:0a:71:73:51:5f:d0:4d:a1:af:e0:8f:31:60:50:
         51:77:a5:ee:af:77:2c:c3:96:4a:8d:bc:26:6c:1a:01:51:4f:
         90:e1:3c:18:1d:04:c6:55:7f:d9:a6:47:df:e4:02:a7:a1:9d:
         ca:c9:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org