Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6Kjjpw76Uh5qTbxnK66yn8_msdY.roa
File:                     6Kjjpw76Uh5qTbxnK66yn8_msdY.roa (raw, json)
Hash identifier:          ANKG4XU/L2KniKyKyxR2s12a1XO2mt3YAThBQE/xtzU=
Subject key identifier:   E8:A8:E3:A7:0E:FA:52:1E:6A:4D:BC:67:2B:AE:B2:9F:CF:E6:B1:D6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       11
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6Kjjpw76Uh5qTbxnK66yn8_msdY.roa
Signing time:             Tue 07 Jun 2022 00:31:00 +0000
ROA not before:           Tue 07 Jun 2022 00:31:00 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2554
IP address blocks:        61.195.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun  7 00:31:00 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=E8A8E3A70EFA521E6A4DBC672BAEB29FCFE6B1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:e0:26:e0:cb:35:a0:46:88:ad:ce:1b:1c:
                    c8:8f:e3:5c:3f:13:d1:ce:8f:7e:3f:3f:2e:cb:21:
                    eb:bf:f7:07:44:32:25:1d:07:58:4f:eb:6c:70:44:
                    44:bb:ee:59:99:c6:09:26:2c:3d:94:15:0a:e3:11:
                    3f:f3:c9:0c:25:3e:34:6e:71:ef:b9:7c:8a:aa:c0:
                    ea:d5:bf:fd:1a:b1:23:1e:73:04:d1:de:77:69:62:
                    1d:c3:9e:05:f2:58:09:b7:ee:8f:2f:d3:0a:eb:08:
                    dd:f3:a0:47:d0:d1:95:f9:be:6f:ea:85:ed:fa:e9:
                    7d:d7:96:74:22:f3:14:37:52:26:53:c9:97:93:15:
                    0b:1e:1d:61:fc:3f:27:81:ee:68:da:68:37:19:f7:
                    11:77:69:8c:47:42:69:4b:67:90:2c:7f:3a:94:12:
                    76:e9:ff:3a:7c:02:57:f5:40:4d:28:16:0a:2c:ad:
                    9c:f9:46:a4:e4:ca:1a:3d:4f:8f:80:c1:49:d9:b5:
                    77:d3:1f:83:94:a7:fa:cc:05:b6:51:28:65:8c:e5:
                    e1:33:a6:e1:19:21:d9:ef:24:01:5c:04:5d:da:1c:
                    70:f9:86:ef:8b:8c:07:8b:33:f6:7c:7e:d0:79:b1:
                    45:9c:5a:0d:0d:2b:1c:22:fe:9f:c6:fe:e3:58:a1:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:E3:A7:0E:FA:52:1E:6A:4D:BC:67:2B:AE:B2:9F:CF:E6:B1:D6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6Kjjpw76Uh5qTbxnK66yn8_msdY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:50:1f:1a:dc:b1:1f:a8:84:a6:73:33:b3:d8:52:f3:e9:b0:
         83:44:bb:eb:e5:aa:b4:05:45:8e:06:6d:9a:31:da:56:5a:8f:
         b9:1d:e2:fd:51:44:99:c7:b0:ba:62:73:f7:e8:b4:a0:c0:01:
         de:da:fa:e2:42:0e:f9:3c:f4:3e:20:4d:f4:37:ce:9c:20:c2:
         57:83:7b:ae:2f:ca:29:8d:ec:f3:f3:b2:a0:20:89:da:8f:a6:
         5f:bd:ed:5e:2a:b4:a1:93:bc:82:49:d2:28:4d:03:fb:a7:6f:
         c7:ad:22:2c:83:26:e6:b5:18:0d:de:d4:7e:4b:ee:3f:97:4b:
         58:e1:20:48:dd:4d:53:9a:eb:82:0e:09:81:7a:c8:5f:e2:00:
         c9:c9:f4:34:a5:b1:ec:20:14:41:46:9b:bd:0e:5d:59:38:ea:
         66:0d:72:f2:49:99:89:ba:40:84:28:ee:20:09:f2:62:06:c8:
         8e:9b:b9:ee:08:4b:86:07:49:cc:57:4a:26:c9:6d:c5:0b:e6:
         ab:a1:ef:17:c5:0c:e6:5b:c8:08:e2:aa:8f:a0:77:5b:71:06:
         a6:fa:74:8b:80:a9:8a:65:50:ef:bb:54:7d:a3:af:51:35:56:
         7d:a8:63:3f:2c:8b:3e:b9:9e:64:1c:0c:d0:2a:56:e4:6d:a2:
         e4:8d:14:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org