Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/7TwCrcwZmdYtr60UcZcw2I6N5z8.roa
File:                     7TwCrcwZmdYtr60UcZcw2I6N5z8.roa (raw, json)
Hash identifier:          MY0abBzlqnwlWXYv8odZCUT5LdKtDWPII2YzR0cNXN4=
Subject key identifier:   ED:3C:02:AD:CC:19:99:D6:2D:AF:AD:14:71:97:30:D8:8E:8D:E7:3F
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       A1
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/7TwCrcwZmdYtr60UcZcw2I6N5z8.roa
Signing time:             Mon 01 Aug 2022 01:28:52 +0000
ROA not before:           Mon 01 Aug 2022 01:28:52 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        122.202.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:52 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=ED3C02ADCC1999D62DAFAD14719730D88E8DE73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:a2:15:37:9c:d4:0b:2d:59:cd:27:7f:cf:
                    d8:ca:bb:7d:78:f0:42:7d:4d:ad:11:98:7e:98:d8:
                    38:f5:24:10:11:5e:2a:7b:8e:0b:0d:1a:07:87:e0:
                    01:a1:65:f9:98:b4:e5:e8:41:91:bb:b7:0c:9b:d4:
                    60:7b:90:4d:59:4a:a3:a4:cc:a7:cd:4d:9b:aa:bd:
                    9e:d0:38:6c:8b:54:16:49:4f:f9:c2:36:97:bc:fa:
                    23:65:2d:65:ec:41:0c:2a:d9:f6:6f:fd:2d:7f:f7:
                    1c:3f:58:3f:3b:dd:6a:d1:4d:60:43:b4:e6:00:94:
                    cb:2e:a4:86:d1:1f:ca:cb:9e:8e:9c:c3:d0:26:52:
                    f7:6f:b7:8b:f4:db:e2:b7:01:2f:11:93:17:47:d2:
                    e9:82:82:ac:c6:69:1a:8f:97:9f:c3:0b:4d:53:24:
                    98:08:71:25:82:b4:0c:82:6b:fd:43:02:60:75:b9:
                    2f:b0:3d:f3:08:3c:4a:3c:40:9a:e0:7b:c3:9b:b9:
                    4e:3d:e8:b3:c1:95:92:fd:19:65:e1:8e:dd:a8:fe:
                    44:50:d7:f8:b1:8e:34:95:9f:c7:43:d2:88:14:26:
                    7c:be:16:22:ca:dc:66:69:75:60:56:55:ee:28:ec:
                    f2:74:3e:54:37:e7:f0:f7:6d:32:eb:d4:d2:cd:5d:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:02:AD:CC:19:99:D6:2D:AF:AD:14:71:97:30:D8:8E:8D:E7:3F
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/7TwCrcwZmdYtr60UcZcw2I6N5z8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.202.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:0c:ec:f6:0b:cc:25:fa:8d:39:d9:bd:4f:20:79:5e:60:f7:
         8e:7c:73:e5:2c:fd:9c:b6:bf:e3:98:75:ff:3b:ed:54:fb:03:
         25:75:12:2a:f0:be:f7:d4:77:66:5d:00:07:19:ce:7f:38:a2:
         6c:29:3e:e7:14:c6:15:f9:13:0d:b2:f0:2a:e8:27:68:6b:a3:
         b0:a3:38:55:28:03:73:00:0f:ec:c6:2b:66:f7:6a:42:03:bb:
         50:21:3e:a7:be:e7:8c:7f:27:d9:5a:cd:18:d8:eb:7e:50:bc:
         d9:38:59:f2:cc:8e:2a:a7:18:42:b2:43:43:85:d3:11:21:e8:
         42:f1:39:cb:44:55:67:1c:11:66:8c:d7:fc:b7:42:f4:1b:71:
         ec:83:a4:59:59:34:86:01:17:40:76:41:0c:87:cb:dc:99:a6:
         58:de:8d:c7:b8:2d:a5:1d:3c:72:79:8d:3c:0f:35:c8:af:35:
         d5:23:33:3d:68:bf:28:d3:37:9e:8e:aa:1a:61:9a:83:89:22:
         66:1e:6c:5e:31:09:44:b2:f0:f5:4a:20:1c:2d:7c:7e:63:cc:
         4f:9a:23:eb:a2:13:16:e9:77:71:29:a6:e5:77:26:8d:eb:8d:
         39:dc:7c:65:4d:97:1f:75:16:82:1e:11:93:38:71:1d:04:90:
         4d:c0:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org