Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/z4WaS0uHMIQB58hynMYLeJz5LhY.roa
File:                     z4WaS0uHMIQB58hynMYLeJz5LhY.roa (raw, json)
Hash identifier:          v5Kc9/ZM1GZbiyA/R884xIRbOXnAv88+OVCUUn3hMcA=
Subject key identifier:   CF:85:9A:4B:4B:87:30:84:01:E7:C8:72:9C:C6:0B:78:9C:F9:2E:16
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0123
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/z4WaS0uHMIQB58hynMYLeJz5LhY.roa
Signing time:             Fri 05 Aug 2022 04:34:39 +0000
ROA not before:           Fri 05 Aug 2022 04:34:39 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.132.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:34:39 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=CF859A4B4B87308401E7C8729CC60B789CF92E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:57:a4:df:7b:e6:b8:3b:71:f1:2b:19:79:
                    1b:68:ae:54:b3:27:92:3c:97:bf:68:15:49:82:28:
                    75:59:e9:5a:42:99:e6:cc:1c:a7:18:87:02:b1:98:
                    b6:91:1a:c6:1b:1f:07:53:b3:53:d9:c1:db:a0:91:
                    86:51:f1:6f:49:b0:96:33:fd:7d:d9:8f:16:a8:83:
                    ba:53:71:58:f8:b2:cb:44:b1:a1:be:a5:fa:09:2f:
                    f9:23:77:c6:4a:0c:1d:77:e6:2c:c9:98:65:c5:16:
                    8e:98:3f:a7:e8:ff:ae:08:68:6a:de:54:54:b3:f0:
                    0c:f0:1b:cb:b8:e5:3a:93:0b:fb:60:ad:c1:4b:5b:
                    50:e8:18:bb:d0:12:68:41:4e:41:ad:28:0c:ab:e4:
                    3c:0d:3c:f3:6b:b9:ff:fe:aa:6e:6e:0d:55:be:16:
                    9a:69:89:bb:62:9a:6c:99:f7:9f:ad:c8:b2:46:14:
                    71:73:1d:88:32:23:ec:89:13:e4:46:4a:5a:2f:8e:
                    c5:6a:1c:15:cc:be:90:e6:87:4c:68:26:1b:21:a1:
                    0b:fc:01:5f:82:3b:ff:a1:b0:5d:0b:56:98:be:df:
                    bc:f5:01:59:83:31:b1:38:ad:56:1d:7c:11:18:eb:
                    c4:fe:e7:42:2d:50:d7:2a:1a:dd:fe:88:1e:39:d8:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:9A:4B:4B:87:30:84:01:E7:C8:72:9C:C6:0B:78:9C:F9:2E:16
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/z4WaS0uHMIQB58hynMYLeJz5LhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:c0:fe:4f:63:36:9f:27:d1:d1:16:20:ed:81:a3:97:cb:
         33:48:c8:5e:8c:ae:d2:7c:0b:b4:00:2f:a4:53:dd:a6:eb:5a:
         2f:32:77:80:f7:bb:49:c3:cb:66:89:ca:08:0f:0c:a0:30:9d:
         66:2a:ce:80:4b:e0:c0:d1:db:4d:2f:31:e7:1d:9d:7c:ab:9e:
         c0:c3:3a:07:e7:bf:16:b9:43:d0:13:c1:fd:80:5f:2e:fd:e6:
         76:79:e3:f6:7e:b1:4b:6d:5c:e2:c9:a3:e9:b8:0f:0d:1e:78:
         86:41:5f:e7:4c:a7:38:28:c6:0c:93:b3:c2:3b:c2:3c:3d:64:
         a0:2f:19:ef:e7:ac:07:6f:ca:02:7c:0b:e4:69:59:27:14:b4:
         ff:81:85:1c:a1:78:15:04:00:fe:e6:f4:a5:f9:8c:5c:7c:b0:
         6d:95:2d:0c:c6:79:43:2c:e5:8f:0e:74:e9:b8:3a:3b:22:57:
         f5:59:6e:f2:e3:5a:f3:65:97:a7:19:77:c1:06:3d:20:c3:89:
         31:45:a7:cb:83:85:74:7a:4e:e3:c5:74:29:62:6e:91:fe:9d:
         41:32:5b:18:9c:61:a8:73:e1:aa:bc:bf:03:42:60:1e:ad:87:
         d5:4f:d2:d2:fe:f5:1e:41:9a:1b:11:93:89:b7:de:c4:a7:83:
         0b:93:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org