Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/XDNVH4pLOv5sDHAE8wh8KoB2QrY.roa
File:                     XDNVH4pLOv5sDHAE8wh8KoB2QrY.roa (raw, json)
Hash identifier:          rMcDPTcZZUvesQmkYG6D/tJ5hd9J2TXHzbLszj2q5xE=
Subject key identifier:   5C:33:55:1F:8A:4B:3A:FE:6C:0C:70:04:F3:08:7C:2A:80:76:42:B6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       18
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/XDNVH4pLOv5sDHAE8wh8KoB2QrY.roa
Signing time:             Tue 07 Jun 2022 00:39:12 +0000
ROA not before:           Tue 07 Jun 2022 00:39:12 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4694
IP address blocks:        211.133.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun  7 00:39:12 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=5C33551F8A4B3AFE6C0C7004F3087C2A807642B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:33:6f:93:73:93:2d:7b:0e:4d:ba:67:c5:
                    14:c8:ec:fb:1d:c2:13:bf:73:5d:17:4e:53:9c:16:
                    d4:a4:2f:c5:99:b7:7d:63:06:27:be:a9:15:9e:b7:
                    64:b3:ba:ad:6c:21:85:54:bd:22:84:42:43:8f:8a:
                    5c:21:84:98:80:be:90:70:3c:5e:e9:8c:98:00:36:
                    ec:f1:cf:9d:9b:16:b2:00:9a:24:c0:0d:16:3e:12:
                    76:76:b8:f2:f2:2c:bb:0f:8e:14:60:d6:0f:fd:ec:
                    d1:b0:b8:99:36:71:62:d3:33:9a:54:41:e6:1e:43:
                    aa:c1:11:78:4c:63:1a:85:2a:6c:eb:1f:cd:ad:d6:
                    d5:7f:62:ea:05:dc:53:02:81:1c:b4:35:d7:c9:57:
                    2e:2d:64:b3:c1:fd:80:69:09:69:9e:65:75:8a:ea:
                    26:e2:4d:e2:52:6a:1c:c6:77:f4:04:9c:04:19:6b:
                    0d:e8:72:bd:5a:5d:86:7b:00:65:90:91:3a:c1:6a:
                    d2:fa:ae:80:3d:a7:90:81:5b:51:f3:56:ab:3c:27:
                    29:19:de:ff:f6:c2:ef:66:a1:5d:bc:c7:f9:eb:32:
                    1b:00:33:37:d4:0b:93:d6:ac:58:85:6f:93:a2:13:
                    43:77:94:c7:6f:8a:e4:15:15:6e:14:4a:2f:38:c8:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:55:1F:8A:4B:3A:FE:6C:0C:70:04:F3:08:7C:2A:80:76:42:B6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/XDNVH4pLOv5sDHAE8wh8KoB2QrY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:dc:74:38:6a:c1:6d:8b:a2:c2:3b:4d:8c:61:07:c3:81:1f:
         c0:a9:a9:68:a0:76:9a:c3:7e:a9:0a:32:18:bd:5e:ec:d0:28:
         e4:b6:b0:9a:38:d5:2e:ca:c0:a6:50:e4:8f:ab:4a:da:25:c8:
         8a:02:5b:0f:5a:c5:93:ea:9f:16:b9:e1:54:8d:c8:08:65:80:
         0c:b9:8f:f4:25:4a:d8:0b:41:69:51:10:b5:16:5d:74:5a:0f:
         9d:b8:07:fa:2b:48:41:3a:43:04:84:28:56:38:97:fd:96:a4:
         0b:6c:6c:dc:74:82:5a:8a:e5:24:27:cb:00:45:0e:3a:48:4d:
         d8:a8:7e:52:de:a5:40:58:3a:42:0c:67:47:d5:a7:7c:8b:27:
         28:bf:f3:88:01:33:89:00:2d:ee:f6:6f:63:e4:2f:67:50:85:
         a0:78:95:b8:c7:59:21:04:05:39:fe:ce:d2:71:09:b9:d9:b1:
         bf:4d:cb:8d:67:5f:7c:d5:75:4b:2d:fc:d7:af:31:ad:38:99:
         91:d6:7a:20:15:05:71:fd:1a:49:94:aa:eb:e2:a6:9d:27:1d:
         4c:93:33:56:07:59:b3:b4:aa:fe:f4:f6:c6:c9:21:83:46:86:
         e6:60:79:c8:e0:05:90:41:7f:66:37:9d:b5:ff:7a:be:62:ae:
         13:37:e4:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org