Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/wczEtCz9o1xlLe4iqC9NGBQMOzs.roa
File:                     wczEtCz9o1xlLe4iqC9NGBQMOzs.roa (raw, json)
Hash identifier:          l7hnCsGlov3+RTIfXjvqoO6Qq9FYYlbptSEPc7Plg7g=
Subject key identifier:   C1:CC:C4:B4:2C:FD:A3:5C:65:2D:EE:22:A8:2F:4D:18:14:0C:3B:3B
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       7B
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/wczEtCz9o1xlLe4iqC9NGBQMOzs.roa
Signing time:             Sun 01 May 2022 01:30:30 +0000
ROA not before:           Sun 01 May 2022 01:30:30 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        203.129.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:30 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C1CCC4B42CFDA35C652DEE22A82F4D18140C3B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b4:fb:20:c0:8b:ec:23:63:5e:bd:be:87:10:
                    cd:5f:48:53:95:e0:80:19:f6:5c:30:5f:12:99:99:
                    2f:5b:15:47:9e:c6:e5:ed:34:da:01:61:3d:42:7e:
                    78:58:67:94:30:e7:cc:b3:a4:bf:4e:6d:fe:63:26:
                    12:a4:76:1f:f8:ff:56:83:1e:11:77:7a:54:3c:67:
                    9a:80:ac:78:88:32:7c:2c:0f:58:b2:3f:ea:17:09:
                    6d:12:ec:d9:ea:be:4b:20:0c:25:98:ee:c1:be:1c:
                    3c:0d:ab:dc:25:b3:99:f3:77:ad:58:66:0a:8a:5f:
                    76:4e:74:41:cb:44:cd:38:f5:25:f5:c8:20:75:ee:
                    83:db:61:c9:03:f5:07:a9:da:d9:69:6e:64:0f:5c:
                    db:ed:0b:fc:02:c5:20:29:a3:cd:17:81:94:a3:ce:
                    68:57:73:82:ab:7f:2e:e1:45:82:7d:08:5f:dc:ae:
                    0d:f9:16:da:31:d5:1d:dc:c5:ac:ca:5f:01:cc:fd:
                    bf:5c:a2:49:83:bf:61:69:85:d4:ea:97:ae:f3:23:
                    78:6b:04:8b:de:37:b9:5b:2b:fd:dd:be:40:fe:49:
                    10:91:c4:b9:69:90:b5:fc:f3:a2:0f:e5:0b:5e:10:
                    a5:d9:09:ef:dd:19:a4:1b:fb:62:05:98:49:cb:1c:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CC:C4:B4:2C:FD:A3:5C:65:2D:EE:22:A8:2F:4D:18:14:0C:3B:3B
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/wczEtCz9o1xlLe4iqC9NGBQMOzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:89:87:54:21:cf:f8:a9:32:6c:34:f0:ef:be:55:7f:86:
         bb:fa:2e:5c:f6:9f:73:4a:f9:81:88:3e:fb:0e:f4:28:e9:2a:
         d2:e8:dc:19:b2:17:96:26:04:32:09:be:7f:a0:f9:6a:6f:29:
         2f:5f:d7:de:e4:c3:50:58:5b:c1:cc:79:49:f4:9d:30:82:fe:
         58:7f:b3:00:26:99:58:73:16:83:6d:bf:76:0b:b0:c3:a0:31:
         32:46:ca:c0:42:9e:71:19:f7:0f:03:3c:9b:35:3b:bb:70:8a:
         d6:88:b8:38:f7:c1:ff:d2:e1:65:50:3b:f3:2c:57:08:1f:ec:
         51:f4:97:dc:1b:f9:e9:af:2b:cd:2f:66:17:23:39:e0:e1:ad:
         30:7f:8a:30:7a:b2:46:51:10:16:78:b0:a1:09:c3:28:64:29:
         16:b2:2e:b4:8f:59:0e:f5:5c:02:a5:1f:d8:37:4a:e3:27:17:
         13:8c:66:4d:0a:ea:6f:82:a7:90:7e:fc:68:00:18:1b:f1:32:
         c9:90:3c:45:6b:cb:db:35:f0:d9:8d:4e:18:0d:49:29:7c:28:
         ce:f1:53:4b:20:f7:30:9a:ea:d6:cd:1e:74:22:b7:5e:ca:64:
         e0:60:4e:ac:28:6c:d9:f0:36:fe:27:86:90:4c:0f:9a:d5:94:
         cb:3e:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org