Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/-B7AsKkC90IBN3rXLGiMWj70-5A.roa
File:                     -B7AsKkC90IBN3rXLGiMWj70-5A.roa (raw, json)
Hash identifier:          YnhiIcmV1FiCTghjL7mnogm9ZkZwP66C+s5kECFHb5E=
Subject key identifier:   F8:1E:C0:B0:A9:02:F7:42:01:37:7A:D7:2C:68:8C:5A:3E:F4:FB:90
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       18
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/-B7AsKkC90IBN3rXLGiMWj70-5A.roa
Signing time:             Wed 01 Jun 2022 01:29:02 +0000
ROA not before:           Wed 01 Jun 2022 01:29:02 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24277
IP address blocks:        122.128.112.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun  1 01:29:02 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=F81EC0B0A902F74201377AD72C688C5A3EF4FB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:74:a6:df:a8:b8:be:0d:00:b8:df:cc:73:
                    39:a3:2e:22:cf:4f:92:a0:8c:7f:97:84:08:94:20:
                    e7:dc:6c:92:16:c4:cc:b0:4e:2e:e8:7e:8f:47:89:
                    3f:e4:11:c5:5c:f2:d1:7c:fc:52:37:8f:b9:33:3e:
                    37:56:26:0b:72:d6:02:ca:73:88:c6:18:ea:47:b2:
                    c6:18:9a:87:1e:35:90:6d:ed:84:d9:96:34:4e:11:
                    b6:c4:7b:cb:0d:27:32:a7:34:df:2a:2f:78:41:27:
                    47:db:f7:ed:75:07:e7:81:c0:87:98:32:ce:52:63:
                    49:95:de:af:51:93:87:82:8d:5a:d0:2a:64:4f:c3:
                    a3:66:6c:eb:90:e9:d3:f6:cd:76:d8:d2:af:a1:ef:
                    8e:68:fb:34:1f:fa:c1:f4:ac:bf:48:87:a6:e4:7f:
                    9b:61:3e:13:9d:cc:9e:c0:3e:57:03:ea:0d:2c:28:
                    eb:97:89:be:36:37:47:11:f1:7d:82:7f:ad:51:6e:
                    7b:4f:e1:55:9f:95:03:e6:54:d1:da:a5:f5:32:d3:
                    81:a3:99:9f:9b:23:dc:08:12:09:3f:91:6d:22:71:
                    80:1a:7a:4d:6c:dc:81:60:98:8a:c9:69:03:d8:df:
                    a2:c8:1f:3f:d5:26:e4:ff:85:91:3d:99:bf:69:1c:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1E:C0:B0:A9:02:F7:42:01:37:7A:D7:2C:68:8C:5A:3E:F4:FB:90
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/-B7AsKkC90IBN3rXLGiMWj70-5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:db:d1:43:69:7e:0d:43:89:18:8a:b0:3e:06:c0:1c:59:
         9e:e3:da:20:04:a5:b1:ac:e5:31:4f:40:e0:8a:29:5a:2c:c5:
         4f:4a:cf:f2:73:ca:55:17:2a:20:a4:9c:2e:39:59:51:56:d1:
         33:09:4d:d5:2f:bc:62:5f:37:44:59:64:50:9f:40:29:6c:94:
         50:97:2b:e0:e7:88:b8:5d:c2:5b:7e:2b:ec:b8:3c:01:99:e1:
         10:18:fb:06:8b:16:57:c3:bd:34:cc:94:b1:7c:2e:58:88:c7:
         9a:af:9d:6a:4d:28:94:74:98:08:63:b3:94:f3:0c:a8:fb:e9:
         f9:6e:98:5a:da:89:46:44:5d:4c:c2:69:75:96:2c:ef:34:79:
         be:60:e2:8e:37:0c:76:28:32:f3:fb:40:16:9b:19:59:e4:41:
         06:28:4f:23:90:b0:b3:60:43:0a:24:3c:55:69:4b:a8:2a:08:
         3e:c9:b8:93:cf:18:b0:4f:7f:c1:93:47:c9:f3:d1:53:b2:d1:
         a2:39:ec:d6:77:f2:a1:7e:54:0d:d9:e9:0b:01:d0:fc:ff:87:
         f0:97:a2:79:24:3d:9b:8b:35:f7:94:c0:42:73:b7:9d:a2:d1:
         4b:cb:99:7b:c1:9d:60:12:4a:cb:36:41:33:61:57:d8:5b:aa:
         06:56:fe:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org