Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/30_lkWJXo5KvoyUrn7eqD7Bp0mc.roa
File:                     30_lkWJXo5KvoyUrn7eqD7Bp0mc.roa (raw, json)
Hash identifier:          EcGO6zh3w9p+B2s+XsuEITUGQxyf3rVisK+2OdyKXhM=
Subject key identifier:   DF:4F:E5:91:62:57:A3:92:AF:A3:25:2B:9F:B7:AA:0F:B0:69:D2:67
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       53
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/30_lkWJXo5KvoyUrn7eqD7Bp0mc.roa
Signing time:             Fri 22 Jul 2022 02:08:16 +0000
ROA not before:           Fri 22 Jul 2022 02:08:16 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.205.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:08:16 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=DF4FE5916257A392AFA3252B9FB7AA0FB069D267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:1c:e5:1d:8e:65:c5:e8:23:d8:b4:f5:41:
                    a7:5a:6e:c6:3c:e4:d0:6d:e1:5e:66:62:05:3e:4b:
                    50:4a:d6:c6:37:4b:97:34:dc:1c:70:cb:27:b1:3f:
                    4b:50:9c:e8:d0:5f:8c:79:b1:f4:e3:9b:f1:65:60:
                    03:10:01:61:fb:e7:1b:40:9c:d1:26:e0:09:ec:a8:
                    0f:ab:96:ef:6e:a6:53:28:67:5a:5a:4a:91:9f:05:
                    e6:86:c9:64:1c:48:41:94:d9:24:5c:a1:0b:98:ce:
                    05:5d:56:7b:ca:ed:fe:c6:e2:51:56:38:bd:ce:b9:
                    0d:3c:b6:4b:ff:6e:eb:1d:1c:52:b9:54:34:85:4b:
                    22:6d:17:6a:fd:10:41:65:b6:a7:b1:c0:9e:fa:ae:
                    01:69:33:88:e5:3f:2d:94:6f:99:ff:f4:14:c1:ba:
                    bb:99:43:50:ea:cb:aa:41:d8:ef:f0:4c:af:de:2f:
                    b8:70:9d:80:ca:9d:2e:4b:ce:9b:cb:3b:3f:ad:e1:
                    11:76:e2:e5:29:b5:c7:ce:eb:cf:18:5c:66:d6:d7:
                    3e:27:36:38:8d:d5:fe:f4:83:9e:22:7b:a5:20:2f:
                    6f:24:7e:f4:bc:36:dd:03:ed:29:42:04:99:48:61:
                    b7:8d:84:b9:56:43:13:c8:49:22:9f:11:a1:35:2c:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4F:E5:91:62:57:A3:92:AF:A3:25:2B:9F:B7:AA:0F:B0:69:D2:67
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/30_lkWJXo5KvoyUrn7eqD7Bp0mc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:42:11:40:c1:70:4a:a3:6d:0c:84:63:65:dc:c7:20:93:
         5c:0e:98:2e:a2:7c:d1:dc:45:1c:25:b7:58:73:cd:aa:0b:e6:
         a8:0a:95:49:ba:e8:64:bf:dc:12:6b:ff:3c:ac:27:f9:8c:9a:
         bd:00:b9:b1:ab:86:1f:e2:a0:b9:8c:f5:dd:24:3b:47:71:a2:
         72:10:13:ac:2c:f9:61:42:d6:51:ff:c8:3c:60:ac:aa:05:9b:
         42:e0:29:3b:87:77:12:c3:e4:47:08:bc:64:0f:db:b4:44:f9:
         89:13:00:f0:9e:2c:d8:1b:6a:8b:15:8c:61:f9:70:2c:f8:8b:
         72:02:da:23:98:8f:37:42:dc:74:c5:a0:ce:e1:a9:4d:91:95:
         11:2e:6e:3b:24:fa:e7:96:14:ad:79:be:68:06:5c:62:41:05:
         6e:3a:d8:2d:df:95:3f:93:95:83:ab:70:42:f0:c3:d1:11:35:
         95:ea:cf:7a:59:7f:47:8f:e9:84:ba:e7:99:eb:02:42:f3:f5:
         d8:0a:ad:50:8c:c9:e8:8a:2c:96:17:37:2b:07:56:fa:23:70:
         a2:92:09:72:df:21:f3:e4:5d:3c:50:cd:91:ed:e9:64:99:3d:
         4f:f1:79:84:a0:83:a4:8b:7a:e3:e7:2a:97:52:d1:e9:90:60:
         98:49:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org