Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Kc1zDgoTkeDqkGLAkYLlqabLl1g.roa
File:                     Kc1zDgoTkeDqkGLAkYLlqabLl1g.roa (raw, json)
Hash identifier:          x2eYI1kexLoeEynEXRNeAmEjopSpzSx2gkyoCObk1X4=
Subject key identifier:   29:CD:73:0E:0A:13:91:E0:EA:90:62:C0:91:82:E5:A9:A6:CB:97:58
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       41
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Kc1zDgoTkeDqkGLAkYLlqabLl1g.roa
Signing time:             Sun 01 May 2022 01:29:50 +0000
ROA not before:           Sun 01 May 2022 01:29:50 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7667
IP address blocks:        202.255.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: May  1 01:29:50 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=29CD730E0A1391E0EA9062C09182E5A9A6CB9758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:56:40:d1:3d:9f:9f:ac:93:23:18:1b:dd:
                    de:37:a2:bc:e4:49:6a:8e:4e:36:26:43:91:d5:8a:
                    b2:20:a7:9c:74:87:98:fa:25:8f:91:80:65:a2:a8:
                    ea:81:3f:cd:d3:00:1b:55:08:78:0d:92:17:fb:7d:
                    6f:f4:e9:ce:20:17:d8:90:4a:81:30:44:9a:04:40:
                    e4:33:73:a8:70:38:7a:ad:36:68:c4:6b:cd:b6:04:
                    4c:5c:69:ef:0a:f3:69:87:34:ee:47:4b:d5:ff:03:
                    d8:bb:65:8b:9d:54:ea:6e:90:da:69:74:65:a3:57:
                    33:17:ed:74:a0:4a:16:d2:83:8d:42:03:0a:a0:79:
                    e4:97:cf:cd:d2:bd:83:aa:b5:9e:32:34:e9:16:35:
                    50:fa:f3:ec:9f:fe:44:d9:e7:3b:48:0f:35:ad:4e:
                    8d:76:d5:b8:c6:38:04:29:82:c8:6b:5c:d9:74:1d:
                    b5:7d:8a:e1:67:a2:cb:74:4f:af:2c:8a:02:68:42:
                    02:ba:5d:de:f6:0d:6a:73:6c:b2:71:c2:e5:01:58:
                    66:7a:57:82:7d:82:d8:6b:7e:1c:55:b1:da:8f:17:
                    19:2b:db:1d:00:85:4d:3d:77:e3:f9:74:33:85:16:
                    c9:15:db:52:ac:af:ab:34:02:bc:ec:5e:15:a4:20:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CD:73:0E:0A:13:91:E0:EA:90:62:C0:91:82:E5:A9:A6:CB:97:58
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Kc1zDgoTkeDqkGLAkYLlqabLl1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:b2:5f:7c:3d:4e:15:69:2b:b5:42:32:b1:7a:1b:e8:a0:
         85:76:ae:1b:4d:52:14:83:2e:8e:36:90:f9:a8:47:3f:f5:f6:
         83:ce:93:ca:d4:31:55:5f:72:74:a8:14:86:97:c3:63:32:b6:
         bf:e3:2e:a2:a9:a7:ef:cb:54:66:ee:de:b1:ee:16:69:3d:b2:
         84:c0:75:e5:d4:7a:eb:f8:6f:63:c8:6b:35:6f:04:48:ac:da:
         df:d2:ca:c3:02:34:b9:5e:38:d3:1e:a2:ad:ce:38:91:ae:de:
         0f:82:10:6c:3a:bf:72:ab:76:a6:ad:09:2f:0f:e3:82:cc:24:
         dd:97:9f:6d:39:ea:fe:c9:02:5f:f3:af:6b:2e:ca:02:fc:72:
         ac:10:ae:e2:55:27:1e:9a:b3:98:72:7b:16:45:34:41:72:52:
         bc:92:47:cd:a8:d1:02:95:4a:4b:86:f7:9d:19:cb:73:5c:df:
         21:0c:9a:db:ba:ca:e1:fa:88:35:ef:ff:2f:79:2a:a1:34:b3:
         cb:d0:e4:b1:2a:9c:05:fd:52:c5:a2:c0:b4:58:14:e3:3f:48:
         38:74:54:b2:4e:12:84:a9:90:e6:ba:87:d3:22:c5:45:95:90:
         b5:60:09:25:96:8c:57:e5:b1:bd:47:86:1f:a0:bc:27:98:51:
         33:1a:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org