Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/j5E581CObRj4y4J03awmpDXiV4U.roa
File:                     j5E581CObRj4y4J03awmpDXiV4U.roa (raw, json)
Hash identifier:          qprrO5MTveuh9/fA/m0yYkBfUJ3rk8MjVvYCZLoiyQo=
Subject key identifier:   8F:91:39:F3:50:8E:6D:18:F8:CB:82:74:DD:AC:26:A4:35:E2:57:85
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       42
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/j5E581CObRj4y4J03awmpDXiV4U.roa
Signing time:             Sun 01 May 2022 01:29:50 +0000
ROA not before:           Sun 01 May 2022 01:29:50 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     131078
IP address blocks:        202.255.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: May  1 01:29:50 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8F9139F3508E6D18F8CB8274DDAC26A435E25785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:90:3e:b1:7f:5f:0e:11:22:e6:c8:af:90:
                    86:df:55:60:72:0a:46:30:ff:ea:ce:39:3e:ed:5d:
                    92:d3:c9:0c:4d:f1:23:d1:d6:6a:55:a1:e4:ce:fe:
                    dc:cf:26:55:dd:10:08:81:c2:0f:68:82:2b:98:09:
                    8d:62:b9:6f:4b:8e:1a:4f:55:b6:20:09:bb:fc:35:
                    d0:2e:04:e8:15:c6:a5:95:09:7b:db:e1:ec:54:a4:
                    1f:92:6d:1f:f1:e5:c0:c7:9d:2a:b3:e0:2e:2d:dd:
                    db:e7:02:d2:d7:5d:5a:80:03:69:67:95:aa:bd:61:
                    bc:18:bd:1f:22:61:15:52:83:14:1e:91:53:d7:2e:
                    8e:72:7d:c8:b8:c9:5e:fe:f3:94:26:6e:05:1d:1c:
                    56:1c:00:9a:f8:c6:33:a5:2a:b6:9e:71:0f:7a:c3:
                    00:81:3b:04:98:8f:4b:02:8a:f7:d5:2c:cc:36:7b:
                    59:f2:7a:33:38:52:c6:3a:9b:27:61:ae:20:a6:2d:
                    3b:90:8f:25:b5:09:8e:2a:54:3c:33:14:50:f6:8b:
                    c8:95:7a:b1:c9:d9:11:7d:0c:1c:d2:b5:7d:69:71:
                    b2:72:02:e0:98:f9:af:0a:8e:b4:53:a9:71:de:13:
                    6b:70:8a:cb:68:85:22:25:c8:57:0d:1c:b5:7f:30:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:91:39:F3:50:8E:6D:18:F8:CB:82:74:DD:AC:26:A4:35:E2:57:85
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/j5E581CObRj4y4J03awmpDXiV4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:19:a1:c6:99:f7:c0:da:d0:bd:09:6b:26:37:0a:79:98:ca:
         c0:e3:19:62:50:2f:d7:23:9a:18:cf:bd:75:5a:a3:50:4b:5f:
         f9:99:b3:f4:24:19:22:0d:2a:e7:19:ec:3a:41:72:50:6c:d7:
         90:b5:6c:e3:09:a1:79:c4:1e:ca:16:69:ba:91:37:e1:cf:b5:
         da:d2:40:a9:05:7e:c2:27:b8:de:6d:41:4e:b3:21:1c:b8:05:
         a6:91:a3:37:a3:6d:c4:4f:bf:19:03:a2:3e:64:08:fc:84:3f:
         e7:2e:2e:f7:3d:28:af:74:8f:ab:7e:90:82:a7:d7:ec:81:6d:
         08:53:e1:89:02:67:fe:c8:ff:fa:39:65:41:9f:89:b7:9a:89:
         13:00:e4:07:5b:47:a2:b5:38:1d:77:ce:e5:51:80:6b:ab:3a:
         fa:1c:e8:4d:ba:60:b5:9a:d5:34:a4:51:8a:2e:a6:98:11:64:
         33:e3:79:39:17:dc:3f:b5:07:69:a1:08:83:e2:73:7d:ef:88:
         2f:21:bf:55:01:78:fd:10:d9:0a:c8:3f:b0:c4:6f:eb:84:c7:
         a0:95:57:cb:ab:ba:e3:0a:70:fc:2c:b2:b1:99:b2:3e:7f:4d:
         a0:56:20:98:9d:e0:be:b1:37:4e:ad:c5:5a:66:c1:5f:b4:3a:
         8f:d7:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org