Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/D6MFELU9rFkHyUrOEwd7sTdVdH0.roa
File:                     D6MFELU9rFkHyUrOEwd7sTdVdH0.roa (raw, json)
Hash identifier:          Z/NdNrVkwBehExNj088UP8XGyBq4PF5v+v70qM6eRbQ=
Subject key identifier:   0F:A3:05:10:B5:3D:AC:59:07:C9:4A:CE:13:07:7B:B1:37:55:74:7D
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       9E
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/D6MFELU9rFkHyUrOEwd7sTdVdH0.roa
Signing time:             Mon 01 Aug 2022 01:28:50 +0000
ROA not before:           Mon 01 Aug 2022 01:28:50 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        110.232.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:50 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=0FA30510B53DAC5907C94ACE13077BB13755747D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:ae:0e:42:c8:02:86:3e:d9:52:ed:d4:13:
                    ce:53:e7:a3:d4:68:91:a2:e0:a0:4a:80:a2:cd:dd:
                    f3:42:d4:f6:ac:c0:0c:71:dd:69:cf:a9:31:2c:72:
                    60:e4:ac:e6:1f:26:72:65:e9:bc:9c:ff:88:a0:25:
                    56:5d:ee:c3:a8:ca:cb:e7:71:9e:9e:af:74:c5:bf:
                    24:d0:21:74:53:b1:db:17:1e:f2:da:c2:23:21:05:
                    3e:a7:c5:ff:68:95:46:a3:1f:51:44:f0:b6:dc:06:
                    3b:a7:fb:e5:45:c4:d0:84:c3:1a:05:66:74:ec:c7:
                    64:53:5d:4e:6a:45:18:d8:21:31:e6:e0:83:f6:a8:
                    bb:68:b9:3c:80:70:b8:df:29:99:54:98:23:47:4d:
                    19:7b:ff:fa:6b:26:d7:ab:e9:e4:4e:c7:16:05:8e:
                    b5:26:ca:fa:87:a0:f7:ca:62:18:f1:cd:fa:4e:48:
                    09:0f:fb:32:bb:6d:c1:cb:21:45:e1:8b:a0:81:32:
                    c8:cd:d4:3f:30:e0:7b:36:a3:28:a3:c1:6e:c5:c9:
                    b0:b1:2a:9d:7e:6f:d4:7f:34:24:5d:b7:e5:06:7d:
                    2d:dc:2f:64:df:c3:4e:ca:98:8b:6f:7e:39:1c:21:
                    86:9e:f6:27:e3:bb:d0:ba:a9:47:01:19:95:64:06:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A3:05:10:B5:3D:AC:59:07:C9:4A:CE:13:07:7B:B1:37:55:74:7D
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/D6MFELU9rFkHyUrOEwd7sTdVdH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:47:a6:6a:2d:ec:a9:bf:7c:60:ce:f5:4d:b2:2d:b6:88:57:
         50:af:c2:fd:cd:50:78:3a:03:68:9b:dc:ca:a3:06:84:01:8b:
         22:11:9b:4e:6e:3f:4d:0c:cc:f6:b3:b9:4c:d3:bd:72:d3:b1:
         0f:b1:f8:04:14:46:7b:42:de:ea:be:cd:0f:f0:01:86:cd:a2:
         f0:36:6d:47:23:3f:4c:fa:33:01:7e:37:1c:50:12:f5:17:e7:
         c9:94:0d:93:4d:c1:51:62:6f:1a:a0:e1:10:19:cf:21:7e:71:
         ec:bf:52:1a:06:d6:ac:83:68:ed:96:94:8a:29:33:0f:47:74:
         3e:ea:47:4a:2b:0c:26:11:7d:10:d7:8e:d4:6c:2e:1b:91:13:
         c4:43:f4:bf:ba:f0:61:85:3f:80:50:69:78:0c:9e:a6:5d:df:
         30:0e:4a:e0:c7:f7:bf:54:bc:ab:57:96:b5:b6:54:5d:44:9b:
         21:3e:10:2f:15:88:92:bf:dc:ce:1c:db:16:23:81:a8:ec:61:
         06:8f:0a:22:7c:29:63:7c:cc:59:ec:4c:aa:08:b1:07:ae:1a:
         4b:60:c7:08:f1:55:63:9b:d7:23:05:01:eb:7b:bb:25:fc:a6:
         00:68:8b:a8:5f:29:42:47:be:67:4f:f1:10:f9:7b:c5:7b:dc:
         59:6c:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org