Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/gqayLGf5aGQRSENJPOWboi2tRqM.roa
File:                     gqayLGf5aGQRSENJPOWboi2tRqM.roa (raw, json)
Hash identifier:          F32W1c7AmZnyRTWcdErtEW1NZnIlZLotMNSW6YF0VoA=
Subject key identifier:   82:A6:B2:2C:67:F9:68:64:11:48:43:49:3C:E5:9B:A2:2D:AD:46:A3
Certificate issuer:       /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial:       12
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/gqayLGf5aGQRSENJPOWboi2tRqM.roa
Signing time:             Sat 07 May 2022 02:32:47 +0000
ROA not before:           Sat 07 May 2022 02:32:47 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     16509
IP address blocks:        202.244.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
        Validity
            Not Before: May  7 02:32:47 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=82A6B22C67F96864114843493CE59BA22DAD46A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:54:1f:60:0b:9f:63:67:a2:4a:14:49:ae:
                    07:14:23:26:cc:62:6f:b5:fd:54:86:28:0d:aa:7d:
                    dc:77:df:93:d0:3a:45:d0:9c:fd:96:c1:1f:fa:b2:
                    72:20:d7:82:da:61:75:36:bf:c2:62:43:37:b8:c7:
                    4b:98:4b:8b:5b:31:cc:6b:f4:af:ca:ef:8d:ea:2a:
                    2e:5e:71:16:8e:29:21:bc:0e:83:d9:cc:ed:af:98:
                    b3:d9:45:60:75:96:9c:97:69:0c:b0:b6:26:ab:d8:
                    74:1a:aa:aa:e6:9c:44:17:f7:d1:df:e5:7c:27:89:
                    5f:5d:85:70:53:bb:14:8d:1f:4f:22:50:7a:ed:a1:
                    ef:44:e6:25:dd:ec:3d:44:e8:72:92:3b:62:cc:73:
                    fe:69:46:a8:75:18:cd:45:8b:13:83:52:87:65:aa:
                    3e:21:a9:9c:bc:b7:c3:e0:63:cb:23:18:bb:db:93:
                    2c:42:37:fe:26:89:25:6e:a2:b9:33:5f:36:21:09:
                    ae:9f:d1:0c:61:fb:9c:d3:d4:d8:0e:4c:45:ce:d4:
                    60:1b:ae:00:ad:f1:bd:57:4b:68:d6:ad:ae:ff:97:
                    d2:f0:9e:b4:a0:70:c1:1c:ad:6e:a3:a8:5c:93:45:
                    8a:dc:f8:14:1f:cc:93:2d:65:53:b4:67:cd:10:03:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:B2:2C:67:F9:68:64:11:48:43:49:3C:E5:9B:A2:2D:AD:46:A3
            X509v3 Authority Key Identifier:
                keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/gqayLGf5aGQRSENJPOWboi2tRqM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:06:f8:62:61:65:67:93:73:77:d5:27:1a:d0:bb:3b:20:
         cf:43:22:fe:0f:ca:8e:5a:59:ec:6b:21:73:67:80:5f:51:30:
         a3:44:c0:4d:db:ab:bc:86:85:d4:1d:c2:b0:1c:f0:ce:31:2a:
         8a:36:c5:d3:f0:0c:da:3e:e2:fb:71:26:4f:62:99:76:cd:79:
         2e:28:81:f7:a2:e9:d7:b5:9f:d3:e0:47:23:5e:78:2e:31:50:
         e5:5c:7f:eb:d0:c1:e0:67:03:22:20:a5:99:be:2a:13:52:51:
         12:9b:0f:9e:c3:be:0e:60:a8:ae:73:a7:dc:71:32:8b:03:dd:
         3c:b8:e7:9d:dc:3b:db:c4:36:f2:8f:34:5c:12:a2:7b:5e:54:
         c1:ad:9b:38:2e:6f:37:ac:6d:a8:da:fb:8b:13:cc:b0:1b:40:
         18:33:e7:12:ce:17:20:41:9b:37:65:42:d9:54:9e:ec:4d:ef:
         6b:78:af:e1:78:b7:73:55:0c:43:88:40:12:28:21:5e:fa:43:
         cc:9e:a7:1a:d4:23:c5:80:b3:49:15:a1:d6:3a:a8:63:03:73:
         65:1f:69:0e:7a:cf:bd:3b:b2:17:f6:fe:2d:48:ab:3f:a1:c1:
         87:d2:d1:df:8a:46:2e:2c:5a:b2:eb:b4:69:af:fb:1c:48:b9:
         aa:cd:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-fra.rpki-client.org