Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/ScsETJUzfxL-uZ1itYmTitcwA20.roa
File:                     ScsETJUzfxL-uZ1itYmTitcwA20.roa (raw, json)
Hash identifier:          b2v8f9dlyu+nF7N9JotmMJFNkt0KiedsjsOEIvQR8qc=
Subject key identifier:   49:CB:04:4C:95:33:7F:12:FE:B9:9D:62:B5:89:93:8A:D7:30:03:6D
Certificate issuer:       /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial:       2A
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/ScsETJUzfxL-uZ1itYmTitcwA20.roa
Signing time:             Sun 01 May 2022 01:30:07 +0000
ROA not before:           Sun 01 May 2022 01:30:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     58785
IP address blocks:        157.118.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
        Validity
            Not Before: May  1 01:30:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=49CB044C95337F12FEB99D62B589938AD730036D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:7f:39:1b:08:d5:fe:46:a6:3a:e5:73:66:
                    3b:26:6e:aa:0e:29:3e:a2:2b:3a:65:75:5c:3c:9d:
                    01:f2:85:f4:8f:b8:cd:fd:7b:57:ef:5d:c6:3e:70:
                    53:88:dd:e5:ff:ad:a2:ee:bc:f9:e6:16:ba:7b:2b:
                    c6:15:2d:5c:40:c5:f7:8e:8d:97:b2:56:10:1b:83:
                    92:51:51:fc:da:4d:03:69:8d:c9:b4:83:c6:36:37:
                    5d:d3:50:d2:74:6f:78:ff:87:e2:85:93:8f:60:f3:
                    9b:c0:35:39:dd:1b:76:44:0f:fe:df:a5:a4:7d:32:
                    5e:65:3d:91:1f:fd:bf:89:c3:2c:99:49:ff:00:01:
                    31:0b:8b:a8:c3:dd:20:75:d3:22:3f:c0:c6:1d:48:
                    41:c8:1e:f9:c2:93:22:00:51:fc:dd:97:d1:63:b1:
                    53:21:fe:b9:24:2f:3f:1c:ec:71:97:85:e7:27:06:
                    81:fa:7d:2f:83:71:8b:c1:b6:d5:d5:94:1b:4a:e1:
                    4b:3b:25:70:43:6a:d0:d0:00:91:38:9e:58:c5:28:
                    d4:b9:96:f2:d1:93:b1:96:8c:6b:67:11:7f:bd:cf:
                    59:8e:7f:c4:bf:ce:62:f6:89:19:fd:c4:56:2c:ed:
                    5d:fd:d8:b1:a3:6b:b9:5c:d4:ce:61:e8:93:44:1b:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:04:4C:95:33:7F:12:FE:B9:9D:62:B5:89:93:8A:D7:30:03:6D
            X509v3 Authority Key Identifier:
                keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/ScsETJUzfxL-uZ1itYmTitcwA20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:f1:8a:ed:f7:44:5b:4a:39:63:98:83:2d:17:a6:4b:e6:
         5d:a9:a8:18:4b:34:43:9a:fc:14:06:9b:75:2c:f0:85:3d:d5:
         0d:c4:3e:f3:7c:38:7d:51:05:a2:f7:81:c6:b7:68:07:7b:a5:
         8a:d8:02:42:b3:76:a2:9c:9b:a9:18:d5:79:5d:bc:7c:d7:ff:
         d0:2f:7a:3d:13:27:fb:88:a7:12:54:05:1c:5c:52:01:cc:55:
         e1:48:1d:c8:18:da:3e:b3:31:3c:ba:23:01:2d:1f:f1:e8:91:
         5c:bd:f7:f3:ff:01:b2:d1:b1:88:c2:cb:a3:98:8e:f2:e0:75:
         5b:d9:84:0b:f9:fe:d5:84:ea:82:13:2f:b7:25:68:2c:61:c0:
         e0:f4:2c:c9:c4:aa:44:cb:0e:e6:1e:e2:83:da:f9:16:02:21:
         bc:e2:2e:78:ac:3e:13:13:ec:c7:bb:ec:c5:90:56:3f:cf:3e:
         7b:1b:2f:6f:7a:25:1b:d9:3b:9e:5a:74:56:fd:b3:2b:31:80:
         2d:67:ed:1f:8a:96:18:d4:0e:6e:13:a9:df:9c:4e:0d:51:63:
         c4:9b:21:79:66:5f:09:01:c5:3a:d0:de:cd:1f:6d:2d:22:95:
         fc:97:ce:74:2a:1e:8b:a5:73:ea:e8:17:0b:ca:91:5f:20:53:
         28:94:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org