Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZYPA-y_iUed1cioF_3JpibPRHt8.roa
File:                     ZYPA-y_iUed1cioF_3JpibPRHt8.roa (raw, json)
Hash identifier:          PkdfJLne6bNDk959CU1PU9uGijR9zkFaHpGedjcm4CM=
Subject key identifier:   65:83:C0:FB:2F:E2:51:E7:75:72:2A:05:FF:72:69:89:B3:D1:1E:DF
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       44
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZYPA-y_iUed1cioF_3JpibPRHt8.roa
Signing time:             Sun 01 May 2022 01:29:51 +0000
ROA not before:           Sun 01 May 2022 01:29:51 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     131078
IP address blocks:        202.255.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: May  1 01:29:51 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=6583C0FB2FE251E775722A05FF726989B3D11EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:7b:00:d5:5c:85:ec:2a:00:0a:4e:d0:15:
                    a7:a2:96:4a:1c:ad:c5:5b:84:e6:b7:f8:b6:c5:ba:
                    9b:e7:f2:65:b8:67:93:bb:7a:44:90:ae:96:88:76:
                    97:4b:50:2a:a3:f5:ed:c4:20:61:b3:f7:e3:3f:98:
                    cf:c5:ad:67:6a:b1:02:8e:d5:20:c6:17:6b:50:2e:
                    a6:87:82:ef:8a:f2:51:e4:03:e9:7d:84:e6:5b:7a:
                    a3:0f:a9:f8:64:74:1d:6c:9c:6a:4e:79:8f:6c:96:
                    bb:b2:33:a3:fa:fb:a9:08:b2:8c:9d:b4:96:4c:16:
                    18:5c:27:a2:a4:a6:ef:06:ea:90:e4:44:36:e1:7f:
                    23:91:55:46:11:b0:a9:78:b3:57:e3:f0:9e:d3:67:
                    32:84:87:c0:62:51:66:ed:26:69:63:3e:98:99:3e:
                    0d:12:d6:27:a8:75:cb:ad:39:81:78:cd:a0:b8:f4:
                    fb:e6:a0:2a:6b:77:87:b6:f3:0d:d4:34:d2:1c:13:
                    47:31:09:5a:20:16:0d:cc:1a:54:26:41:ca:de:99:
                    1d:b4:b5:c4:9e:95:56:56:a6:7e:55:09:ef:d2:7e:
                    8c:ef:d4:43:60:0f:35:7f:de:89:9d:0e:98:5a:14:
                    17:b9:1e:bb:1b:c6:36:8c:c7:2f:fd:33:08:aa:d1:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:83:C0:FB:2F:E2:51:E7:75:72:2A:05:FF:72:69:89:B3:D1:1E:DF
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZYPA-y_iUed1cioF_3JpibPRHt8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:06:e9:e8:07:68:3a:ae:92:79:d8:e3:55:de:98:75:22:2a:
         6e:1b:51:74:d9:86:4d:a6:11:4a:4c:0a:09:63:68:70:ef:c5:
         c9:dd:68:e4:b7:7f:53:dd:ab:d4:a2:d5:50:7b:1c:13:c7:9b:
         8a:75:93:ee:35:95:40:58:40:6b:4b:b0:03:6a:cc:30:69:8c:
         7d:fa:03:71:d8:0c:24:0e:f0:52:f7:20:6d:96:06:cf:7a:aa:
         fb:f0:4b:f0:7d:56:34:95:1b:d6:af:a2:2b:2e:e8:9f:d3:95:
         44:26:19:88:85:8c:10:ae:0e:2b:1f:31:5e:bd:35:91:6e:79:
         da:1a:54:70:29:64:e5:b4:37:41:54:88:ac:91:f0:67:17:ef:
         f0:4a:27:fc:17:13:c0:44:60:93:72:9e:ba:b3:8c:7b:c6:2c:
         d2:b6:7b:b7:02:22:7f:1b:6c:a0:45:6f:40:c1:f3:0a:a5:a0:
         e0:28:38:25:36:80:d2:63:53:73:b5:41:ca:40:3b:8b:16:f8:
         0e:49:ff:17:9c:26:83:73:4c:a8:b8:97:76:74:a1:f9:99:3f:
         56:4d:67:7b:29:7f:fe:9f:54:9c:61:7f:0f:84:57:f7:f9:9a:
         1f:d2:39:e6:d2:a0:0a:a8:34:5f:21:92:73:63:e7:ff:06:6b:
         03:a9:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org