Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k9EVf_yHoKkKremYdDDJy2xQqCg.roa
File:                     k9EVf_yHoKkKremYdDDJy2xQqCg.roa (raw, json)
Hash identifier:          MQ8nRH/AcUgMh223A/XAHV3MJhyB/T/uG/Gdh9WLpz4=
Subject key identifier:   93:D1:15:7F:FC:87:A0:A9:0A:AD:E9:98:74:30:C9:CB:6C:50:A8:28
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       15
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k9EVf_yHoKkKremYdDDJy2xQqCg.roa
Signing time:             Tue 07 Jun 2022 00:39:11 +0000
ROA not before:           Tue 07 Jun 2022 00:39:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4694
IP address blocks:        61.215.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun  7 00:39:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=93D1157FFC87A0A90AADE9987430C9CB6C50A828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:9b:47:21:a9:1f:de:f8:b1:97:70:b0:f5:
                    14:3e:2d:f8:e1:76:eb:47:4f:47:e1:3f:4c:5c:35:
                    75:74:29:93:87:11:49:ff:1f:65:9b:07:5b:2c:70:
                    bf:ef:65:45:01:5a:4c:a6:78:57:1b:9e:b6:ba:9e:
                    07:9f:a9:b2:42:7f:3f:82:47:39:4a:38:60:c1:6a:
                    0d:2f:6a:9a:f5:1e:c6:5d:02:bd:62:c6:85:01:9b:
                    dc:fe:6d:9e:c0:35:8e:5d:de:30:94:60:de:7a:ac:
                    74:e6:95:40:06:dd:a4:e8:a9:f9:fe:ac:86:15:85:
                    4b:b7:f3:12:a3:bd:97:b4:94:a8:7d:d2:ab:35:9d:
                    41:89:63:c7:2c:24:dd:70:66:40:70:5d:b5:6e:2f:
                    75:ad:1b:f6:4c:05:5c:ac:6a:27:b6:b1:1d:42:69:
                    68:90:46:4f:7d:e1:3a:18:4b:60:66:63:db:ea:87:
                    51:74:dc:77:ed:78:1d:c9:e1:0d:67:b7:7a:64:05:
                    17:8d:93:62:9f:b9:66:2a:ab:cb:fa:cb:19:4a:77:
                    e6:b8:96:c3:86:58:89:0e:c7:ce:91:68:4f:47:78:
                    b4:4b:5a:50:c6:a4:65:d5:15:58:88:f3:ec:7b:5c:
                    bf:f6:79:66:b1:b2:9c:88:bc:b6:3d:19:20:c2:54:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D1:15:7F:FC:87:A0:A9:0A:AD:E9:98:74:30:C9:CB:6C:50:A8:28
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k9EVf_yHoKkKremYdDDJy2xQqCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:d7:0d:a7:a4:57:41:54:59:98:30:d3:b1:4e:53:eb:de:bf:
         c7:86:e9:2a:e4:0f:ed:fa:41:46:be:b9:4b:46:9b:85:20:c1:
         22:e7:e0:e8:34:22:86:df:90:04:b5:4d:68:96:f1:17:a4:fa:
         f4:4d:db:5c:c2:67:04:fa:0f:24:b3:21:32:2f:bd:d6:f4:72:
         7e:53:df:f4:f9:56:e7:c2:fd:83:75:1b:74:51:73:59:e8:54:
         b5:7a:cc:4f:0f:46:b5:f8:7c:72:db:87:8e:ec:32:b9:6d:2f:
         3a:33:30:52:3b:98:f2:7b:f7:43:41:1a:47:45:26:b9:e4:8b:
         de:63:2a:4c:bc:63:91:81:0d:34:b8:52:14:ae:f1:b1:e7:33:
         ff:d8:20:81:9b:ad:52:53:79:e7:68:4a:b5:7d:44:2a:92:a4:
         74:d8:42:c9:9d:c8:f0:ae:06:59:9f:41:11:ca:2f:fd:6c:b1:
         07:34:3a:87:6d:c7:3d:c8:21:85:a9:b0:7f:e5:16:73:f5:60:
         30:08:e2:8b:9a:58:28:21:0e:e9:4b:29:40:ea:7a:b4:cb:72:
         b6:ed:af:c6:51:98:57:8e:0a:d6:d6:2c:27:d8:7d:74:e9:63:
         72:1d:76:0e:04:55:55:38:4c:2f:a2:c0:ae:05:99:45:41:fa:
         de:e1:30:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org