Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/MopP4EKqt430HT-131LaSEvMrp0.roa
File:                     MopP4EKqt430HT-131LaSEvMrp0.roa (raw, json)
Hash identifier:          qGEHBWro1yfDq3ge101eLmhQa1+eBskZpEKcysLsh6U=
Subject key identifier:   32:8A:4F:E0:42:AA:B7:8D:F4:1D:3F:B5:DF:52:DA:48:4B:CC:AE:9D
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       30
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/MopP4EKqt430HT-131LaSEvMrp0.roa
Signing time:             Thu 01 Sep 2022 01:28:53 +0000
ROA not before:           Thu 01 Sep 2022 01:28:53 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     24296
IP address blocks:        210.229.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Sep  1 01:28:53 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=328A4FE042AAB78DF41D3FB5DF52DA484BCCAE9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:e8:07:af:30:57:a6:6b:89:1f:a3:b3:98:
                    04:55:2b:6e:75:9d:79:58:19:30:82:77:32:1b:ee:
                    fe:dd:da:8f:14:5c:2e:b1:1c:2c:40:7e:46:be:55:
                    1f:12:e7:f5:56:91:8c:ce:38:f1:bd:05:7c:2d:0e:
                    14:89:71:64:d8:9b:1f:1b:d1:e4:0d:38:aa:ae:12:
                    0e:2e:0e:dd:ae:7b:c7:fe:1e:52:50:6a:81:aa:83:
                    bc:7d:1b:da:32:37:40:c6:1c:e2:75:8c:35:b4:e4:
                    46:9b:1a:43:38:1b:9a:77:c1:5c:77:c8:11:24:83:
                    89:9d:f8:1b:dc:31:ae:a1:da:c2:a1:8d:ad:0a:aa:
                    46:ef:49:d5:ca:78:2d:e5:39:25:59:5b:cb:11:4f:
                    b1:48:12:34:dd:55:f2:81:e1:1e:10:ee:67:30:aa:
                    86:6a:68:7d:73:1d:38:c1:5d:a8:47:a4:18:24:1b:
                    de:08:45:06:cc:77:51:87:5d:f8:db:ef:e7:42:78:
                    63:36:ad:00:87:e1:49:f5:6c:9d:dc:f9:ad:c4:38:
                    3b:fc:dd:ad:5b:75:7f:7b:87:e6:b1:c4:4a:a4:69:
                    ac:17:24:cd:49:5d:99:85:df:c6:7e:4c:b6:83:93:
                    51:f3:0e:19:6a:14:cf:82:d7:39:1f:70:c0:13:5b:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8A:4F:E0:42:AA:B7:8D:F4:1D:3F:B5:DF:52:DA:48:4B:CC:AE:9D
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/MopP4EKqt430HT-131LaSEvMrp0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:73:ef:b9:fd:ee:b7:e8:8f:ec:ec:a8:01:9c:3c:5c:f4:5e:
         a1:19:38:6d:ed:e2:09:bc:ee:eb:a3:2a:78:c0:f3:21:5f:55:
         17:98:f1:9c:a2:13:24:8f:b7:6d:a7:8e:a2:4e:e4:72:d1:e6:
         de:e7:53:d8:aa:ad:6c:fb:8a:09:3d:10:2b:a0:7c:3f:dd:d5:
         c3:7a:da:6e:b7:0f:63:5d:4d:a4:16:da:7b:45:34:ee:63:3d:
         65:bb:5f:09:87:f0:8f:33:c6:74:54:07:34:51:9c:c0:b8:2f:
         c5:e6:98:9c:05:b2:15:b5:2c:77:a6:b3:13:8a:2a:0d:ba:5a:
         ac:98:8c:7d:ca:5d:50:a7:2e:e0:f2:d9:f8:98:d3:ad:b6:20:
         69:e1:8f:74:eb:e3:53:b4:23:b3:a5:e9:25:22:7a:0d:3e:9f:
         32:7c:a9:e7:3f:10:6c:a5:32:1d:9c:ba:f9:91:37:a2:1f:cf:
         22:c7:83:51:7b:3c:c3:9e:ed:94:9f:96:ce:cb:9e:c2:a5:e7:
         86:74:78:b4:07:cf:4e:8f:6e:55:a3:2f:15:92:fb:0b:1f:d3:
         12:45:ef:ce:46:d1:34:c3:0f:7e:7f:0d:45:49:4b:f8:16:3d:
         cb:71:32:30:66:89:07:8b:f1:aa:ec:10:8d:2d:bc:21:41:43:
         6b:9d:d4:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org