Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/DzjeHUVhZC_vBkRHeqT-Rv4I4dI.roa
File:                     DzjeHUVhZC_vBkRHeqT-Rv4I4dI.roa (raw, json)
Hash identifier:          THPEp48vz9bf5QT+faQJNqdN8qN9N2j6weM0QSwSQGw=
Subject key identifier:   0F:38:DE:1D:45:61:64:2F:EF:06:44:47:7A:A4:FE:46:FE:08:E1:D2
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       8A
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DzjeHUVhZC_vBkRHeqT-Rv4I4dI.roa
Signing time:             Thu 01 Sep 2022 01:28:18 +0000
ROA not before:           Thu 01 Sep 2022 01:28:18 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     19905
IP address blocks:        203.129.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Sep  1 01:28:18 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=0F38DE1D4561642FEF0644477AA4FE46FE08E1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:b4:0e:c8:54:99:3c:38:cb:f2:69:e5:f6:
                    5c:45:cf:8a:94:2c:6f:23:bb:cb:c1:63:fe:2f:b6:
                    fc:d7:e7:13:b4:ff:d7:f0:79:23:b9:63:95:0d:57:
                    f0:d5:c0:cb:18:62:41:7a:4a:c5:a9:af:38:0f:bd:
                    df:ec:30:59:3b:92:b0:5c:6d:1f:5f:db:a2:95:d7:
                    57:f6:d4:76:a7:37:1e:3b:27:34:d0:73:1f:16:03:
                    88:3a:ca:16:29:b1:64:50:2e:7c:e2:cb:d2:55:3b:
                    4c:9e:a0:cb:ee:84:1d:94:eb:af:6b:2d:1d:b8:f3:
                    e9:43:1f:84:31:b2:ee:65:93:bc:bf:e8:67:26:50:
                    a2:a4:3c:cb:37:6c:72:a7:c6:5a:5d:ec:39:84:31:
                    1d:67:59:ba:e0:e5:3c:2a:cd:67:e9:c4:23:6e:9b:
                    7f:17:64:72:38:53:72:30:c0:a1:f6:9f:7d:16:c7:
                    47:72:c7:a0:0e:21:e8:64:ea:6c:11:ff:f6:f8:de:
                    9a:2c:0d:55:be:0e:e1:b1:ea:ff:6d:ca:97:a4:f7:
                    74:b1:33:a5:cd:85:03:50:54:9e:6b:17:15:64:19:
                    c6:4a:64:d3:fd:42:4f:26:34:e9:c0:f0:cb:2e:d5:
                    cb:fd:9c:4a:f2:ac:d0:d6:42:a9:ec:12:1b:b0:87:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:38:DE:1D:45:61:64:2F:EF:06:44:47:7A:A4:FE:46:FE:08:E1:D2
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DzjeHUVhZC_vBkRHeqT-Rv4I4dI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:ea:13:dd:89:31:c6:cf:a5:9a:da:71:e5:f2:58:a0:2b:
         a8:01:ee:bf:66:89:e2:17:38:2e:81:cd:da:f3:72:2a:53:3c:
         f0:5d:4f:8a:f8:df:f0:9e:93:e5:d8:f0:cf:c1:90:6f:e4:2e:
         9f:33:3e:6b:bb:a3:42:40:b9:95:1e:22:2e:4b:44:45:57:8b:
         09:da:22:e7:a4:48:09:e9:fc:03:65:28:85:12:db:b2:c8:83:
         9e:f6:53:11:3d:01:35:98:d3:06:e3:2d:47:68:fc:2c:b6:f0:
         a1:78:84:28:a8:3b:1c:13:33:a0:d7:84:41:61:35:3c:01:e4:
         1f:45:27:f3:d1:84:58:46:da:35:5d:b5:98:b8:c3:32:dc:59:
         60:21:47:f6:7b:cd:ef:2b:b1:aa:79:39:c0:90:c1:b5:1b:72:
         ec:07:ff:02:12:db:b8:bd:e1:71:b9:d7:1f:06:d6:c7:6a:86:
         bd:0c:e5:f9:3b:84:d5:77:f7:58:c3:8a:48:13:56:8d:cd:f1:
         20:c3:f6:f8:d9:60:1b:dc:11:9c:37:1b:1e:e4:61:f6:41:07:
         77:c1:c2:da:da:81:cb:b0:8a:73:92:7b:8f:21:a7:58:32:0a:
         fe:cc:f4:74:9d:02:9f:0d:85:ad:a8:ec:83:f7:ed:1a:95:51:
         16:a8:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org