Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/31CyiqfMmE_JiF0uAOf8qNpa4RQ.roa
File:                     31CyiqfMmE_JiF0uAOf8qNpa4RQ.roa (raw, json)
Hash identifier:          ZGIZDbOtUZ9hUEUSgVoXDD/a64NSNhDJERkfiGxbye0=
Subject key identifier:   DF:50:B2:8A:A7:CC:98:4F:C9:88:5D:2E:00:E7:FC:A8:DA:5A:E1:14
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       98
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/31CyiqfMmE_JiF0uAOf8qNpa4RQ.roa
Signing time:             Thu 13 Apr 2023 09:53:15 +0000
ROA not before:           Thu 13 Apr 2023 09:53:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        202.41.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=DF50B28AA7CC984FC9885D2E00E7FCA8DA5AE114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:28:c5:0c:e6:9e:de:e9:b8:6e:47:98:1d:
                    27:f5:25:e6:fc:83:22:00:cb:85:59:9c:21:21:dd:
                    16:5a:a4:32:e3:20:9b:a3:6b:af:5a:6f:99:9a:19:
                    6f:82:d2:9f:c3:d9:54:dc:41:76:21:fd:48:05:a3:
                    0e:a0:e2:e0:c2:8b:a1:5e:73:3c:05:99:0c:63:1a:
                    0f:13:5a:87:e1:30:21:15:b9:ce:d7:62:99:44:f1:
                    b4:3e:bf:f5:dc:3e:67:f0:09:f6:35:cf:04:78:e1:
                    85:68:08:29:c3:18:2b:16:f2:a9:0e:af:f3:8a:1d:
                    97:66:3e:ed:fd:5c:e0:71:49:3f:03:c7:25:d8:62:
                    e3:c9:be:fb:8c:9b:78:e3:43:bb:bd:44:63:77:34:
                    15:72:87:bb:0a:9f:ec:75:ae:eb:8b:5d:3b:df:ae:
                    33:c5:4b:9a:7f:fd:4f:7e:e3:b6:d2:e6:0f:b6:7f:
                    13:b8:e9:5b:a4:7b:66:2c:de:fc:77:1d:b6:72:00:
                    72:e9:cc:8e:2b:8e:58:47:8e:ff:ce:c7:43:4f:65:
                    32:e3:21:0c:32:ae:1e:b5:ed:14:77:44:05:b5:2d:
                    87:0e:ad:96:41:11:0d:bd:b6:7e:56:e4:25:1a:14:
                    c7:5e:23:b7:bb:10:c3:d5:71:5f:3b:0b:fc:f6:68:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:B2:8A:A7:CC:98:4F:C9:88:5D:2E:00:E7:FC:A8:DA:5A:E1:14
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/31CyiqfMmE_JiF0uAOf8qNpa4RQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.41.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:22:aa:e5:05:04:ca:97:d2:86:aa:66:3a:a3:3f:4f:07:a3:
         a4:5f:6b:b5:de:2b:fc:f1:a9:c0:06:19:ef:1b:ac:03:91:ee:
         e1:43:4b:cb:fb:bc:61:3e:d7:96:b9:8c:3d:56:dd:c6:06:34:
         31:4c:a3:7b:7d:35:02:64:7e:65:fb:1d:58:13:66:53:98:b9:
         87:e0:9f:34:1c:ec:83:e3:25:4a:30:c4:5f:06:9c:21:6b:83:
         87:1c:e3:fe:7b:de:4e:47:4e:b3:4f:8f:96:6f:07:89:1f:26:
         4a:ef:e6:ee:b0:71:0c:00:95:45:36:80:b9:2a:b3:fe:3a:20:
         b6:86:86:74:b0:b5:76:f3:4b:f8:53:09:44:9d:f9:90:71:8c:
         66:52:e0:09:4c:32:cb:dd:03:07:ee:b5:90:fc:fd:75:40:33:
         71:10:19:bc:61:cc:a7:38:d6:e0:1b:39:ad:60:ed:8f:17:53:
         5a:83:3a:09:d2:cd:1c:ef:53:50:2c:ae:58:18:33:9d:69:b5:
         49:33:f8:b9:3d:9c:7e:96:e4:2b:5f:43:55:05:7d:c2:54:5a:
         cc:9e:39:7e:66:1f:ea:c8:00:d1:e6:01:2a:02:6c:63:3a:b1:
         04:76:49:97:b5:52:3a:c7:96:ab:da:20:e9:e2:3b:d8:20:f1:
         da:0f:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org