Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/yb3DyO01ZaxV_ncx8hsYnvg_m6U.roa
File:                     yb3DyO01ZaxV_ncx8hsYnvg_m6U.roa (raw, json)
Hash identifier:          cC2T26J5VhxHWOi6QzvBnSb9S/VsP0ZJEO6HWI/Y5EM=
Subject key identifier:   C9:BD:C3:C8:ED:35:65:AC:55:FE:77:31:F2:1B:18:9E:F8:3F:9B:A5
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       85
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/yb3DyO01ZaxV_ncx8hsYnvg_m6U.roa
Signing time:             Sun 01 May 2022 01:30:17 +0000
ROA not before:           Sun 01 May 2022 01:30:17 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        211.14.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:17 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C9BDC3C8ED3565AC55FE7731F21B189EF83F9BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:f7:c7:7b:fa:ba:3e:94:96:b0:a3:19:c7:
                    bc:fc:28:f8:1f:9f:58:68:6d:cb:dd:e7:27:93:c9:
                    bc:76:cd:da:aa:b8:55:d9:8d:7d:c6:a2:73:d1:3d:
                    4f:3d:d0:51:a6:6e:22:e9:58:d2:db:0a:93:ee:0a:
                    f7:64:de:01:c9:f5:72:ed:05:f5:3d:06:9c:c4:16:
                    d1:94:e0:58:d5:5c:71:c8:56:a0:c2:c5:bf:0c:bb:
                    10:27:7f:ee:9d:60:10:be:e1:22:e4:60:a9:e8:fa:
                    6f:87:61:6a:d7:aa:9f:d7:2b:37:66:7d:67:0a:e0:
                    ab:e1:39:e2:79:b2:b6:e2:1a:7e:98:49:9d:cd:cd:
                    fb:85:ca:bf:97:f9:ed:9b:60:fe:29:50:ed:10:5e:
                    31:a4:1f:0e:0c:92:07:b3:a0:2b:d5:da:69:d2:88:
                    ec:8f:0e:8e:80:57:4d:60:e4:c7:f6:2c:2f:90:e9:
                    a4:4d:df:59:9f:83:f6:59:f8:26:32:c0:af:74:52:
                    ad:f0:d1:7d:60:80:7d:2d:ce:3a:45:3e:13:54:56:
                    bb:b2:54:44:4d:6a:da:d6:c2:26:58:57:8f:20:aa:
                    b4:29:62:81:be:f3:03:70:fa:79:45:27:92:64:58:
                    06:fb:bf:5f:5d:35:d1:ef:37:fa:94:c8:d3:00:ec:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:C3:C8:ED:35:65:AC:55:FE:77:31:F2:1B:18:9E:F8:3F:9B:A5
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/yb3DyO01ZaxV_ncx8hsYnvg_m6U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:43:5b:f6:c7:e5:da:9c:c7:41:9d:09:a0:84:14:34:40:a0:
         bd:ce:33:e0:c1:22:0c:82:db:ef:dc:05:f4:05:d2:88:2e:0f:
         15:a7:df:5e:bf:a3:53:14:09:57:5c:8f:3b:e0:8b:66:28:bd:
         f1:31:ad:a4:82:89:fa:e4:35:ce:b2:c3:b6:b8:84:29:ac:11:
         d6:2d:5f:1a:b9:23:ee:40:8f:b2:4f:46:73:43:7d:6b:fc:68:
         2a:fe:80:11:9a:3f:68:27:8d:4e:d0:b0:a5:50:0a:5a:8c:42:
         59:e9:0c:00:85:d4:5b:31:81:9a:a8:4b:24:ab:79:d0:22:48:
         b9:68:28:4b:71:51:a2:1a:e7:ba:bd:21:0a:5d:fa:e5:0c:1f:
         af:7e:8f:3f:44:61:cf:3b:1b:10:ec:41:f3:ee:15:25:08:72:
         c8:ac:e5:d2:78:8b:df:9a:3f:d0:64:08:8c:49:21:f7:bb:7c:
         36:d8:05:2f:1a:f1:64:89:f0:ff:19:da:85:89:2e:39:d2:8f:
         e0:94:ca:25:68:d4:94:c6:f6:ee:ba:67:8e:35:1c:32:bd:09:
         93:c9:bd:90:66:1c:a0:9d:3a:cd:b9:e8:41:7d:5a:57:38:b5:
         be:94:4c:21:f7:3b:d3:75:64:2f:97:ce:b0:aa:e9:a8:d3:17:
         f0:7f:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org