Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kRT6pYVLF1MkI8MTCF7qjnPGxws.roa
File:                     kRT6pYVLF1MkI8MTCF7qjnPGxws.roa (raw, json)
Hash identifier:          0JT/DFJxpjx5yobCOXSZf7uM2OinSu0vMnhAxKPzYjU=
Subject key identifier:   91:14:FA:A5:85:4B:17:53:24:23:C3:13:08:5E:EA:8E:73:C6:C7:0B
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       16
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kRT6pYVLF1MkI8MTCF7qjnPGxws.roa
Signing time:             Wed 01 Jun 2022 01:29:02 +0000
ROA not before:           Wed 01 Jun 2022 01:29:02 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24277
IP address blocks:        115.166.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun  1 01:29:02 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9114FAA5854B17532423C313085EEA8E73C6C70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:34:b4:63:23:8f:19:fa:74:87:14:c3:fb:
                    f0:15:2f:13:b0:6d:10:4d:1c:f1:aa:76:1d:ab:86:
                    d5:4d:88:4d:4b:b0:4c:f0:2f:97:0f:84:26:32:00:
                    47:3b:30:7d:01:60:27:60:14:ed:99:c5:5b:c2:b3:
                    71:31:56:d2:f0:cb:59:83:e5:e8:f7:e7:88:36:89:
                    a1:e0:46:d3:9c:31:27:04:1c:22:63:7b:f1:aa:fa:
                    09:53:3f:7e:3f:d9:30:24:60:c9:bb:e5:3b:9e:4f:
                    44:6d:34:13:98:fd:79:b8:f4:a5:c5:2e:11:23:30:
                    35:d3:c5:12:d5:0f:1b:86:76:aa:2a:6f:84:0e:39:
                    bd:b5:23:6c:96:8b:dd:90:ec:2f:36:2a:0d:5b:22:
                    aa:1f:94:a7:42:7c:81:62:12:8c:8e:89:41:e7:7e:
                    dd:6c:b1:12:59:38:a4:a6:b6:61:d8:30:ff:bf:30:
                    92:c0:2c:78:fc:46:84:d6:d8:89:e1:40:3c:5d:bc:
                    76:49:ca:07:10:d2:8d:a7:5a:9e:19:19:11:c9:5a:
                    a7:7f:dd:4f:1c:09:2a:04:30:af:69:3a:0b:18:4a:
                    5f:b4:06:2f:0b:4c:8e:96:ed:d5:8b:be:bb:f0:9d:
                    65:5e:ea:cd:e1:98:95:2e:17:96:2b:ab:bf:fb:ca:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:14:FA:A5:85:4B:17:53:24:23:C3:13:08:5E:EA:8E:73:C6:C7:0B
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kRT6pYVLF1MkI8MTCF7qjnPGxws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:67:ac:74:7a:4b:56:81:df:b3:da:8a:4d:24:94:ae:74:d1:
         f1:6a:c5:0a:b1:8c:14:40:83:59:5f:26:bd:cb:54:26:33:34:
         84:84:fa:3a:04:cc:de:0a:25:b7:d8:b8:6c:8f:fe:e0:27:c2:
         36:20:48:29:bd:16:06:23:91:01:ba:a9:22:d0:11:ac:5d:fc:
         6a:19:11:ff:d1:b3:a1:a4:c9:bd:0b:04:0f:f2:8c:0e:d6:0a:
         40:f2:fc:42:47:df:2e:05:cd:b9:3b:dc:a8:61:cf:3a:a2:3d:
         fa:53:b6:75:58:ac:85:b0:a4:ac:f0:7d:99:b8:ea:7e:98:fd:
         28:0d:b3:da:bb:bd:7f:b7:ce:f8:7f:09:f6:20:f7:39:9c:fc:
         f3:ca:f5:f8:9d:24:75:28:c6:98:86:7c:1b:9a:05:79:80:b6:
         be:9c:a7:88:d5:28:e8:a4:25:a2:15:9d:0f:c6:a2:c1:3b:b2:
         8d:17:32:c6:01:9e:c7:00:bc:41:19:df:7e:a8:1a:dd:5d:71:
         d2:05:5e:27:8c:ec:e0:62:95:8a:eb:b9:a8:78:e3:34:ca:5c:
         f7:1c:75:6b:41:a2:0e:3b:4d:38:62:6e:86:53:aa:28:bb:81:
         35:7c:49:51:d1:d9:eb:4e:6b:b3:73:09:a6:fc:6c:07:5c:f1:
         20:a7:38:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org