Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Iwjb2XUp6scoKmsgyo21LiFQ1F0.roa
File:                     Iwjb2XUp6scoKmsgyo21LiFQ1F0.roa (raw, json)
Hash identifier:          +An4wcYIFX8YXzSInH/QyBPcsx+4OCIgJnW+GqcsnUA=
Subject key identifier:   23:08:DB:D9:75:29:EA:C7:28:2A:6B:20:CA:8D:B5:2E:21:50:D4:5D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       EC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Iwjb2XUp6scoKmsgyo21LiFQ1F0.roa
Signing time:             Thu 28 Jul 2022 06:27:54 +0000
ROA not before:           Thu 28 Jul 2022 06:27:54 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        153.120.224.0/19 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 06:27:54 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=2308DBD97529EAC7282A6B20CA8DB52E2150D45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:97:13:4c:c7:f0:e7:45:2d:e0:82:3b:a2:
                    97:3c:5a:b2:37:45:5d:0d:37:58:c7:db:58:46:d1:
                    6d:f1:f1:85:fc:24:6e:d3:8d:ac:01:f0:8f:3f:ed:
                    05:8f:3f:84:88:a8:41:3c:04:96:de:6e:0c:6e:29:
                    a1:05:23:d4:72:6c:ad:26:7a:62:86:f8:e7:b2:01:
                    2c:87:64:49:c5:b7:f4:c2:99:25:e2:f6:7a:79:e8:
                    3e:54:9f:e1:e9:c8:5f:72:36:e4:98:f2:a8:c4:d4:
                    64:1f:7a:7b:5d:1a:38:b2:b4:ab:e0:5e:b9:b1:e6:
                    c3:b7:81:1b:51:14:d5:71:a1:a6:2a:39:39:1b:23:
                    dc:62:a7:d0:09:42:ca:ad:14:b1:cb:2f:3f:10:d0:
                    6d:01:51:47:e0:1a:9b:89:28:14:a5:53:35:b1:44:
                    0b:84:c0:25:13:df:3b:b9:8e:cb:40:b5:9c:49:fb:
                    8b:09:ea:b4:e5:92:0d:ed:dd:d1:2e:c2:10:ca:e3:
                    ad:5a:31:c2:d9:ad:f4:99:68:5c:05:de:9f:a1:a3:
                    82:e5:41:38:14:91:04:34:6f:45:c6:15:40:dc:02:
                    97:97:b8:42:6f:d7:60:37:dc:20:c3:50:89:3f:65:
                    51:e9:9f:90:da:87:a5:b9:4a:52:01:54:f1:92:a0:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:DB:D9:75:29:EA:C7:28:2A:6B:20:CA:8D:B5:2E:21:50:D4:5D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Iwjb2XUp6scoKmsgyo21LiFQ1F0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:61:39:a7:11:b6:42:91:59:50:75:9d:44:af:98:7d:4b:18:
         73:07:99:59:5f:bd:29:b9:19:f2:ae:6d:b8:49:f0:fd:97:7d:
         86:a2:a5:18:e6:a4:d4:e6:1c:0a:91:5f:4c:ce:0a:11:7c:31:
         15:2b:91:20:14:13:88:4c:0f:b4:68:40:97:f8:bf:7d:42:ee:
         57:66:99:36:81:2f:de:b7:12:26:27:09:df:7f:11:f6:6e:9b:
         3c:d7:58:ad:cf:da:aa:54:a0:38:f9:d1:6c:d8:45:86:cc:d4:
         b5:63:08:5a:2d:b1:83:b6:35:b2:4f:9d:3d:ba:4e:22:9a:0c:
         db:15:9b:e4:76:23:bd:4e:04:33:0e:8e:8b:11:49:05:b5:cb:
         80:55:35:d0:c4:64:a7:01:6c:5a:0f:b7:0e:a8:58:cc:2d:e9:
         fd:72:89:1d:78:45:a6:b2:dc:fa:45:25:b5:3a:80:4b:44:a9:
         cb:b2:1d:65:df:4d:62:6e:ec:d4:69:e3:80:f6:90:fa:d6:af:
         69:b8:52:57:e4:54:c1:19:b9:1c:7d:3d:ae:e9:17:6a:8a:6e:
         a7:0c:50:3b:62:ea:c4:f8:70:b0:6d:67:a0:36:55:a4:56:16:
         78:b9:f4:3a:53:cd:6a:d4:e4:7d:78:e6:a8:76:33:20:c3:89:
         7c:ec:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org