Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/305ePWabdjSQTBKZ3Bz2cZZLmEM.roa
File:                     305ePWabdjSQTBKZ3Bz2cZZLmEM.roa (raw, json)
Hash identifier:          vbE0r1SWFRMv0ibaTzMa3SF9gJk/Hq1YKppn3cdIkEg=
Subject key identifier:   DF:4E:5E:3D:66:9B:76:34:90:4C:12:99:DC:1C:F6:71:96:4B:98:43
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       60
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/305ePWabdjSQTBKZ3Bz2cZZLmEM.roa
Signing time:             Wed 01 Feb 2023 01:30:05 +0000
ROA not before:           Wed 01 Feb 2023 01:30:05 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        27.113.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:30:05 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=DF4E5E3D669B7634904C1299DC1CF671964B9843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:c4:ec:2e:c1:88:2d:cd:c2:52:a8:74:a9:
                    35:6c:97:56:ac:c9:d8:22:af:aa:51:4f:09:67:f3:
                    43:37:c1:25:0c:4c:20:d0:6d:6f:80:b7:17:14:83:
                    1b:b2:79:e9:8d:77:3f:e5:74:eb:b1:9d:2f:5c:ad:
                    a7:51:29:bd:4e:02:2d:af:a0:a1:e5:b0:77:e4:26:
                    96:ed:a9:d6:17:85:cb:89:28:9f:14:65:23:e0:55:
                    64:c5:f5:5b:8d:ae:72:04:a9:a9:0c:11:e4:a0:46:
                    3d:ce:10:72:de:9e:37:05:ba:e5:57:a8:f5:32:1d:
                    9c:27:b4:db:b5:57:80:27:8c:32:9f:ce:8f:32:4f:
                    9d:ac:f5:40:2c:68:e8:bd:83:e9:90:85:e5:d3:01:
                    e2:c2:ba:86:21:b3:a2:bc:b1:bd:96:ad:cf:71:55:
                    e7:2a:be:0f:1c:06:cb:bb:93:8f:c1:f8:b1:74:1c:
                    4d:45:41:15:0a:75:a0:81:bb:93:3e:f5:21:51:43:
                    4f:d2:9e:f4:88:6f:77:5c:ca:8b:42:89:4a:b5:b8:
                    15:17:3e:16:e1:ed:23:1e:cf:a0:81:a9:6d:bd:98:
                    39:23:08:dd:3e:85:cd:35:0c:1d:ed:f1:e4:22:01:
                    af:e8:06:d5:ea:15:c8:b1:bd:a5:89:91:2f:e2:66:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:5E:3D:66:9B:76:34:90:4C:12:99:DC:1C:F6:71:96:4B:98:43
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/305ePWabdjSQTBKZ3Bz2cZZLmEM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:27:c3:92:22:e3:9d:ba:df:20:0a:84:8f:47:93:b5:de:
         eb:58:65:16:23:41:86:ee:7f:ff:12:c1:b2:14:23:00:d7:f4:
         62:fa:ec:e7:82:c7:4d:df:25:2d:04:08:2a:f3:a9:0d:fa:08:
         f7:ab:95:fe:df:bb:b8:35:a8:90:13:e5:d6:15:5f:09:26:ac:
         71:59:f3:a0:2d:30:1a:31:8a:5f:2e:54:48:2c:f9:22:b2:4c:
         c0:0a:33:b2:c2:0d:c7:95:2f:79:98:89:2e:a1:7c:30:8a:ab:
         6c:a1:40:e8:09:d3:05:9e:fc:06:71:1b:01:b4:16:53:37:59:
         23:fd:b5:ee:db:de:4f:49:c7:d0:42:41:6d:5c:5a:89:45:08:
         99:ea:39:51:87:15:95:19:1a:62:bc:3a:3c:a6:4f:c6:75:86:
         71:1a:35:a6:4d:25:eb:73:cc:ce:5d:fe:13:0d:ba:21:57:82:
         c9:86:80:f5:7c:f7:3c:5f:69:3e:55:07:e3:d1:86:db:07:89:
         6c:32:1e:9d:35:3f:0b:e5:19:a0:59:7d:a6:8e:88:c0:00:d3:
         3e:7b:d3:3d:3d:03:41:7c:a6:f8:53:b5:8f:b2:0e:8c:af:ea:
         89:b3:2a:cf:08:f3:45:fb:67:cd:70:b6:82:5d:75:43:f6:cd:
         70:e2:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org