Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8F7pSAjwXTgY96PgCmEFrHzO1Ms.roa
File:                     8F7pSAjwXTgY96PgCmEFrHzO1Ms.roa (raw, json)
Hash identifier:          FYhj/VKCcV7XZVbRJwGPsu2S/QLvohJGYACRT361U2E=
Subject key identifier:   F0:5E:E9:48:08:F0:5D:38:18:F7:A3:E0:0A:61:05:AC:7C:CE:D4:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8F7pSAjwXTgY96PgCmEFrHzO1Ms.roa
Signing time:             Wed 24 May 2023 16:40:31 +0000
ROA not before:           Wed 24 May 2023 16:40:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.10.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F05EE94808F05D3818F7A3E00A6105AC7CCED4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:cb:c2:6f:64:df:10:14:e5:a6:4f:5e:bb:
                    99:2c:57:d0:0e:21:b6:1b:33:8c:7e:29:9b:ac:9e:
                    55:ea:1d:11:19:32:72:9f:94:69:6d:bb:38:ca:ed:
                    8c:8b:fc:d0:45:2b:64:d0:d5:43:31:1b:c1:8e:10:
                    1f:0b:63:12:16:be:ec:3b:b1:38:ab:2b:8d:b1:88:
                    98:f1:d1:8d:48:c8:1a:4c:85:47:f8:d0:af:bd:1e:
                    0e:6b:fe:ce:c0:a7:bb:a7:70:b5:f8:29:71:cd:a6:
                    a3:43:1e:ba:0f:26:46:93:8b:d3:8d:1a:eb:7a:bf:
                    87:e5:73:1b:6e:7f:15:d0:e5:04:cd:2d:f1:d1:35:
                    07:b8:2f:33:b1:69:3f:47:a3:28:c9:0f:d2:e9:a2:
                    ab:e0:da:b2:6c:5b:41:7c:3c:12:0e:83:c9:d9:87:
                    96:a8:9c:11:ef:ac:94:17:4d:f2:29:6f:d6:ba:6f:
                    de:66:90:05:1d:7d:0f:b6:16:b2:93:9a:35:9a:e3:
                    f4:17:2a:e3:f2:4b:21:5d:95:d9:d5:89:78:41:6e:
                    6c:17:e4:94:d4:ec:ea:a1:b8:2b:aa:1a:e9:b5:5e:
                    01:14:4e:20:3f:8f:93:02:33:b8:8a:90:f6:e2:c0:
                    57:1d:36:b1:c8:92:73:09:8c:1d:b3:6b:fd:e9:9e:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5E:E9:48:08:F0:5D:38:18:F7:A3:E0:0A:61:05:AC:7C:CE:D4:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8F7pSAjwXTgY96PgCmEFrHzO1Ms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:72:80:4b:d0:f9:a8:3b:95:af:af:90:76:b7:1b:90:6b:
         35:0a:63:8b:20:fb:fe:6d:49:cc:37:ad:06:3e:9d:95:0f:09:
         35:f2:14:14:9d:1c:58:b8:7a:16:3a:b8:84:8a:12:60:88:85:
         1e:b3:b0:cd:42:8c:24:1e:ed:4c:79:ff:58:61:32:54:c0:94:
         c6:3f:f5:ec:d2:6b:cb:d6:0c:4b:a1:16:8a:ac:ce:a3:3a:20:
         32:13:c5:41:cd:76:17:8e:e3:3e:04:56:ea:05:6a:cf:75:41:
         16:fe:f4:a8:cd:e5:73:29:af:17:14:11:0d:e7:29:15:ad:20:
         a2:21:2c:25:f3:85:1c:9a:b0:7b:01:06:8c:af:18:0c:1c:4e:
         61:1a:31:86:5f:c6:ab:7d:0c:10:8b:e5:45:89:b6:02:3a:b6:
         80:a8:eb:85:24:56:93:b3:f7:a8:b0:4a:e3:30:cc:49:e3:7b:
         58:ae:c1:b8:fe:fa:e8:2d:c1:37:07:ad:96:dc:1c:e1:26:20:
         01:bc:a1:cc:81:ea:0b:5b:34:a5:88:6d:70:57:be:11:ba:f1:
         54:43:8b:92:66:bd:2a:8e:45:8c:e9:70:7f:0a:a5:13:67:0a:
         0d:93:1c:24:12:8f:83:90:59:6f:79:ad:95:5d:24:a2:d1:73:
         23:82:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org