Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/VQUKmtCHRaIHzyjfrayJk7ur2sI.roa
File:                     VQUKmtCHRaIHzyjfrayJk7ur2sI.roa (raw, json)
Hash identifier:          SzgVGbjc+lUbdqDiOZg2AfC8+Du3vRO0fu6ODN+i9Hc=
Subject key identifier:   55:05:0A:9A:D0:87:45:A2:07:CF:28:DF:AD:AC:89:93:BB:AB:DA:C2
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       2A
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/VQUKmtCHRaIHzyjfrayJk7ur2sI.roa
Signing time:             Tue 19 Apr 2022 07:24:08 +0000
ROA not before:           Tue 19 Apr 2022 07:24:08 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     9622
IP address blocks:        202.52.16.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 19 07:24:08 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=55050A9AD08745A207CF28DFADAC8993BBABDAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:8e:8b:ee:bb:bf:37:52:39:c0:d7:bd:ec:
                    31:84:a0:64:bc:6a:13:27:a4:13:ca:c9:e7:bd:65:
                    b8:a6:5c:b1:fa:cb:0b:3f:45:f1:c9:eb:f4:9e:4f:
                    2e:ec:59:9b:a0:22:65:52:5c:59:1e:02:ce:b0:93:
                    04:c3:7f:b3:ff:09:e3:75:15:e9:dd:06:5f:e3:2a:
                    16:74:27:16:3e:7a:eb:d8:43:0b:a4:bf:94:33:ae:
                    1d:eb:49:36:14:f4:c6:43:94:16:92:81:f3:84:65:
                    b9:86:5c:cd:d4:c5:d2:99:20:9b:6a:b6:42:79:ce:
                    79:0e:7e:58:8f:6b:f7:d6:59:b0:c9:4f:df:b8:59:
                    3c:c1:c8:e3:01:b2:1f:9e:fc:6c:07:b3:8b:f5:20:
                    31:03:7d:c5:e6:16:78:8c:db:50:94:19:1d:61:68:
                    a9:0e:02:35:10:00:6b:cb:72:7c:3e:61:75:13:10:
                    aa:47:0d:78:b0:9d:7e:4c:ec:50:79:ae:17:71:a2:
                    31:55:a4:9a:77:15:f0:68:84:c6:03:dd:0e:48:55:
                    66:e3:59:d3:13:6d:21:23:ee:95:1c:47:a4:26:a1:
                    9d:54:d6:69:02:c2:f2:72:ee:e9:29:77:8b:53:eb:
                    a6:38:4b:cc:07:71:05:bb:1f:c0:12:56:f0:76:4e:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:0A:9A:D0:87:45:A2:07:CF:28:DF:AD:AC:89:93:BB:AB:DA:C2
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/VQUKmtCHRaIHzyjfrayJk7ur2sI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:8b:9d:5d:64:d2:64:5f:07:d1:c0:80:22:9d:dc:10:83:
         85:48:f3:e4:cb:58:f4:80:40:c6:bf:77:9c:7c:c6:dd:5b:51:
         4b:2e:c9:c7:44:57:47:c9:52:e9:92:2f:cb:b5:6b:dc:8b:e4:
         fa:63:60:25:fb:ea:ca:3c:ba:8e:bb:88:ac:b4:d5:ad:35:16:
         62:a2:80:76:52:92:aa:c6:21:9c:45:61:fc:55:7c:2c:87:57:
         74:5c:cb:4f:9b:82:44:37:ac:86:74:a2:26:e5:81:89:24:c9:
         e5:b9:9f:96:59:4b:c3:3c:48:e0:92:0e:78:e7:87:e8:a6:b2:
         a0:98:ac:ec:19:c4:f7:21:04:6a:9a:d2:ee:dd:bf:39:9a:5a:
         b5:d0:2a:53:9e:c6:38:eb:76:21:d7:3a:04:bd:4e:be:87:09:
         d1:ba:93:78:3c:35:d1:9e:db:de:3d:59:d0:49:e2:ee:31:4f:
         5e:23:90:b5:8c:73:a9:2b:08:99:22:dd:af:a9:cb:63:4a:94:
         0a:b2:e5:c9:8b:b7:3e:8a:16:7f:2e:9e:97:59:63:8e:56:71:
         68:15:cc:46:c1:13:9d:3d:d9:a7:a4:b3:0a:3b:e5:c4:11:a3:
         7f:01:7a:2e:c7:79:03:a9:ac:1c:ea:af:31:72:2c:7a:7b:c4:
         a4:b0:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org