Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/eOfLxqP3WGEdvFmRSExwLGEtsrk.roa
File:                     eOfLxqP3WGEdvFmRSExwLGEtsrk.roa (raw, json)
Hash identifier:          v+lGmPhLxETfnjV5wCG8ce3FGerZLkmjTtRdKjQzDwM=
Subject key identifier:   78:E7:CB:C6:A3:F7:58:61:1D:BC:59:91:48:4C:70:2C:61:2D:B2:B9
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       94
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/eOfLxqP3WGEdvFmRSExwLGEtsrk.roa
Signing time:             Mon 01 Aug 2022 01:28:48 +0000
ROA not before:           Mon 01 Aug 2022 01:28:48 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        202.242.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:48 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=78E7CBC6A3F758611DBC5991484C702C612DB2B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:21:d7:b5:62:d4:2c:84:04:95:98:86:f7:
                    0c:80:70:1f:1c:3b:c6:56:f7:e0:35:9d:78:66:8e:
                    57:c3:19:b4:57:47:22:f6:bf:48:72:51:f4:1a:57:
                    ec:d5:f0:df:34:73:80:ad:26:be:f3:e4:82:ef:0f:
                    6a:83:e1:a4:5f:db:ba:ae:d5:a8:d6:cb:b0:75:a5:
                    55:79:9a:69:38:64:89:24:34:61:be:74:ea:7c:6d:
                    9a:5a:f3:54:64:05:dc:3f:ff:d8:5d:60:4e:83:ba:
                    6d:bc:7a:61:5c:e5:f2:5d:c9:be:10:76:5e:18:9d:
                    c7:98:fc:d8:fd:af:d6:77:59:a4:6b:34:09:cb:af:
                    e0:83:e7:3a:4e:aa:3d:e6:5d:27:c9:e8:64:fe:e4:
                    e3:50:fd:5a:93:25:15:bc:38:0d:11:0e:ee:fe:c4:
                    81:74:43:fc:c8:c2:b1:4c:ca:91:94:3f:5e:ed:b2:
                    e5:0c:f2:ae:bc:8a:e6:d3:8d:f6:3e:7a:3d:02:a2:
                    6c:8d:bb:e8:11:6c:ee:9f:94:5c:65:2b:4c:c7:41:
                    56:f0:02:40:a8:93:34:c3:d8:95:18:01:85:0a:f1:
                    1f:b6:07:20:0f:0c:a3:3b:f5:11:c3:05:2c:1a:21:
                    b6:f3:88:7f:be:cc:b1:f8:72:78:b2:77:87:30:99:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E7:CB:C6:A3:F7:58:61:1D:BC:59:91:48:4C:70:2C:61:2D:B2:B9
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/eOfLxqP3WGEdvFmRSExwLGEtsrk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.242.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:b1:26:ab:77:97:31:cb:b1:2f:c8:64:46:8e:31:16:e7:
         5b:84:f1:92:76:3e:cc:ed:b6:5e:b9:78:6f:56:5a:29:65:3f:
         62:b9:7b:95:d6:d0:66:bc:07:64:c5:ef:c3:ff:9f:b7:0f:85:
         12:59:53:df:a1:f0:3b:58:b9:cd:f0:7d:dd:44:84:77:69:be:
         37:23:ca:be:6f:20:2e:81:c0:a5:8a:29:33:5b:5f:33:58:de:
         69:7d:d6:a1:13:27:ed:ef:a8:f3:e3:e4:bf:46:16:ac:3c:be:
         d8:25:2b:aa:95:51:15:45:cf:f4:40:e8:1f:23:cf:61:3c:85:
         0d:1d:3c:03:36:d2:22:55:c7:1f:eb:a8:3b:da:78:57:ea:ae:
         d1:c5:8d:6f:f2:98:f7:a7:1e:43:a0:a1:cc:56:96:19:6a:64:
         78:b0:ba:75:c7:70:5a:31:e7:cd:a7:82:8e:39:26:09:3c:a3:
         9c:16:a8:7e:22:9d:6a:f8:d7:97:b7:e6:0e:6f:84:2f:ee:de:
         52:aa:1e:f4:29:ab:0c:71:fd:44:8c:4f:a1:bf:5b:81:90:e6:
         f4:87:65:c2:4a:6b:3c:1e:97:07:9e:c7:3b:58:c1:6e:48:90:
         a9:47:61:52:eb:3a:f0:59:8b:47:0f:1a:8f:69:3e:3b:19:28:
         0f:d8:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org