Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/6Zz1Ha7zs_ItncMwK0cW1wmu9cA.roa
File:                     6Zz1Ha7zs_ItncMwK0cW1wmu9cA.roa (raw, json)
Hash identifier:          gT4Uv/2pHILNQ7QADGDTwoqm59cZYtDsP1PZ6Pz8SD4=
Subject key identifier:   E9:9C:F5:1D:AE:F3:B3:F2:2D:9D:C3:30:2B:47:16:D7:09:AE:F5:C0
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       BA
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/6Zz1Ha7zs_ItncMwK0cW1wmu9cA.roa
Signing time:             Thu 13 Apr 2023 09:53:01 +0000
ROA not before:           Thu 13 Apr 2023 09:53:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        211.14.10.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:53:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E99CF51DAEF3B3F22D9DC3302B4716D709AEF5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:81:82:6e:e8:f6:5e:cc:1c:4d:92:20:cb:
                    fe:3a:16:5d:55:2b:3a:5e:b5:5a:b7:3c:1a:ab:ac:
                    66:9f:87:c1:34:34:39:b4:c6:45:0f:d1:06:d8:ae:
                    56:84:a3:4c:90:29:1c:40:fe:c3:17:a6:b4:21:6f:
                    94:ce:60:e9:a0:f0:05:52:51:1d:f5:06:37:9a:14:
                    1f:f9:d6:02:fe:d6:94:25:ab:e5:2f:17:bf:46:88:
                    87:6d:16:1f:27:b4:5e:2d:63:9f:97:55:fe:df:88:
                    43:c6:81:8b:7c:7d:b9:c4:72:25:14:75:62:9a:42:
                    f7:59:6b:f1:ae:fe:ab:60:71:06:b0:57:1b:7a:d5:
                    94:7b:51:d1:f9:f7:4f:f1:14:56:00:d9:b2:e1:36:
                    5b:77:b0:9f:c8:ee:2e:a1:a7:fd:95:8b:77:cb:a9:
                    69:40:4b:2a:bb:60:35:ea:14:62:11:f3:ba:41:9a:
                    65:d9:e9:cd:bd:7a:d2:f1:0f:d0:51:0b:67:56:64:
                    9d:d5:b8:f6:3a:09:e1:2d:85:90:24:26:d1:34:09:
                    52:76:b3:3c:34:8b:57:9a:26:6b:71:e0:dc:5e:5b:
                    a0:fe:25:bd:b7:7d:84:c8:87:ca:0e:89:6a:85:d3:
                    ff:09:ed:92:b4:26:62:b9:97:8d:5c:1e:43:f0:c5:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:F5:1D:AE:F3:B3:F2:2D:9D:C3:30:2B:47:16:D7:09:AE:F5:C0
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/6Zz1Ha7zs_ItncMwK0cW1wmu9cA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:ab:d9:25:9d:08:08:5d:24:49:0c:d8:7c:66:7e:a6:73:
         d3:c8:96:6e:17:17:56:bd:87:e7:c9:3e:0b:19:9c:01:df:4d:
         ba:18:cb:9d:89:20:27:29:7a:77:65:75:6c:a0:51:19:e1:18:
         a2:ee:96:b6:61:59:43:c2:53:a7:03:74:2e:1e:a8:56:48:91:
         03:e9:7d:3b:ff:ca:f8:97:42:53:7d:a7:9e:bd:0b:94:7e:39:
         40:eb:4a:d5:ce:7a:e1:38:e4:f1:6d:32:de:cf:f4:dc:37:63:
         11:ee:1c:af:80:7a:a8:85:b5:f1:eb:71:3b:a9:75:34:c2:7e:
         1e:6d:e2:e7:94:ad:a3:aa:16:5e:f4:54:ab:b2:9f:1f:18:64:
         50:bb:55:b1:b0:c5:89:61:63:49:11:82:7f:58:a2:c8:e3:6c:
         b9:4f:7e:d6:a4:a8:8b:05:00:fd:45:fe:17:34:33:c6:79:b5:
         81:69:4e:88:6e:2a:51:f8:30:b6:bd:20:8e:28:bf:8c:15:22:
         6d:56:d1:d7:12:cc:cb:36:1a:68:78:88:f5:d3:5e:00:e1:3c:
         9a:c8:50:6d:67:c3:7d:8d:b5:20:1c:18:0f:9c:63:aa:92:d1:
         09:4b:11:ce:f0:88:bb:f0:82:82:21:f9:12:2a:6c:36:fc:75:
         fc:7d:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org