Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/x38Pxlcr0jzrdHexaljjCBCWkOQ.roa
File:                     x38Pxlcr0jzrdHexaljjCBCWkOQ.roa (raw, json)
Hash identifier:          GSzpjZxBnnhtWGXmlWH33DLQdsaIcFqRsvUzlhBBIhE=
Subject key identifier:   C7:7F:0F:C6:57:2B:D2:3C:EB:74:77:B1:6A:58:E3:08:10:96:90:E4
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       9D
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/x38Pxlcr0jzrdHexaljjCBCWkOQ.roa
Signing time:             Thu 13 Apr 2023 09:53:19 +0000
ROA not before:           Thu 13 Apr 2023 09:53:19 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        202.124.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:19 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C77F0FC6572BD23CEB7477B16A58E308109690E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:2e:57:5e:76:d6:42:39:e4:f7:6a:ba:f7:
                    d5:39:bd:cf:b8:ba:86:cb:c3:09:76:46:6b:a7:6b:
                    ce:d1:3e:40:e3:77:8f:78:d9:cb:33:25:2f:3f:10:
                    03:3a:20:e3:a8:12:4f:a9:0d:3d:62:bf:15:27:a6:
                    0a:39:80:f7:79:4c:67:26:13:5a:ce:04:46:30:ba:
                    7c:db:08:45:55:b9:9b:bf:a8:4d:73:8a:39:c2:36:
                    e0:45:0d:47:27:4a:ff:27:62:5e:a0:37:3d:41:54:
                    77:d7:63:ea:ec:ba:75:05:53:41:f1:2b:60:f0:bd:
                    8c:ff:84:e8:13:5c:30:58:9d:21:be:de:c7:55:ca:
                    2e:7c:d7:dc:36:31:50:28:74:99:f8:91:ea:a2:d8:
                    71:9d:fc:6d:d2:f4:c6:82:13:b7:35:33:50:7a:9b:
                    9b:86:e1:22:cc:0d:aa:fa:ba:ca:bb:87:b7:fe:59:
                    48:10:9d:87:93:66:50:53:ab:1e:90:98:ac:10:ee:
                    af:ad:3c:6f:b5:41:2a:8e:1a:e9:4f:c9:17:c8:e8:
                    13:7f:17:44:29:2c:8a:dd:06:77:a4:84:30:18:b0:
                    fe:29:d2:14:49:26:48:ce:60:62:dd:8d:1c:30:5f:
                    10:ba:9d:2e:63:71:76:2c:eb:b0:a1:cb:6a:c7:69:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:0F:C6:57:2B:D2:3C:EB:74:77:B1:6A:58:E3:08:10:96:90:E4
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/x38Pxlcr0jzrdHexaljjCBCWkOQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:19:f8:4c:80:e8:b6:d6:98:3a:a5:3f:5e:f6:a1:56:04:a8:
         af:f8:f5:0b:8d:5f:02:da:2f:22:88:21:d8:92:f1:0a:1a:88:
         24:da:7c:9d:c4:ac:ad:56:91:4f:77:fd:af:b5:03:03:ce:ad:
         97:bc:60:ff:e9:40:eb:0f:d9:43:bd:46:56:41:15:bf:3d:e9:
         8c:00:6e:bd:69:24:5e:77:66:8f:9e:89:bc:d2:e9:b4:19:43:
         1a:de:56:7e:db:19:45:88:1a:d8:23:01:aa:2a:a6:23:1a:d8:
         9b:2e:7e:cb:ce:47:b1:6b:3c:60:c5:e9:93:73:d5:be:52:49:
         7a:ba:e7:a3:99:af:4f:8c:c2:66:f9:bb:b7:2b:c1:51:44:e1:
         01:a5:3e:36:95:63:89:97:6a:37:1d:13:e9:78:04:df:56:24:
         6c:8c:17:c1:da:9b:4d:9f:21:1b:68:58:47:35:ea:4f:42:4a:
         61:56:2f:04:b7:11:f2:fb:53:2f:e9:63:8c:24:9f:52:0e:74:
         61:83:d8:6f:56:83:15:19:87:07:e7:50:1f:d2:cb:f6:22:c1:
         60:9d:1a:1b:1c:96:59:d1:3d:79:8a:3a:37:a3:95:a3:e9:97:
         18:8b:80:7b:4d:df:44:66:cd:6f:0b:cd:ad:95:aa:7f:62:78:
         61:a6:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org