Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JC11iYHzBHob69JxMFsZS8REQ4s.roa
File:                     JC11iYHzBHob69JxMFsZS8REQ4s.roa (raw, json)
Hash identifier:          kFPkhk8sk49bb4SxejznEb2P+D3MHiy1u80amAMuiqI=
Subject key identifier:   24:2D:75:89:81:F3:04:7A:1B:EB:D2:71:30:5B:19:4B:C4:44:43:8B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       3D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JC11iYHzBHob69JxMFsZS8REQ4s.roa
Signing time:             Fri 22 Jul 2022 01:12:03 +0000
ROA not before:           Fri 22 Jul 2022 01:12:03 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:12:03 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=242D758981F3047A1BEBD271305B194BC444438B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:f9:d5:47:e6:bd:b3:d5:e8:29:05:4e:c2:
                    78:6b:6c:8c:34:63:9c:06:6c:6c:cb:cc:81:31:00:
                    19:a0:54:e3:f9:b5:3a:a9:f1:ef:6a:f6:b5:1b:15:
                    0a:8d:b2:98:56:33:35:59:cf:18:59:04:02:57:5d:
                    56:0a:39:20:c2:5a:11:6e:86:93:0d:a8:03:3b:d1:
                    c9:38:56:1b:6c:ca:85:4e:6d:fa:1a:8f:46:db:b1:
                    14:3f:48:fb:f9:99:bb:90:b6:4a:f7:f3:c8:91:ee:
                    16:15:ae:9c:9b:85:d7:41:ab:b1:ef:30:40:44:45:
                    e2:60:68:60:9c:6c:c2:fe:cb:e9:2e:0a:cd:39:be:
                    5d:82:6f:83:12:6d:0a:e3:6b:ca:c9:20:a6:77:ae:
                    48:51:4d:46:ba:b9:21:d2:50:65:8a:3d:07:6b:84:
                    e7:2d:03:c0:97:2f:3d:b9:06:b4:2f:5e:5b:01:8d:
                    1a:1b:0f:2c:7a:72:2a:3d:f7:61:32:b9:18:e3:e8:
                    7e:01:ec:40:5e:4f:38:57:d3:52:c8:14:90:49:12:
                    75:de:5a:2c:b6:e8:f3:a0:80:65:72:2a:b6:34:e8:
                    8d:ad:52:52:e3:fa:6c:f1:a9:fe:11:f4:66:83:b4:
                    3b:28:e5:40:9c:77:d9:9f:68:ed:d1:01:14:6c:8b:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:75:89:81:F3:04:7A:1B:EB:D2:71:30:5B:19:4B:C4:44:43:8B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JC11iYHzBHob69JxMFsZS8REQ4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:74:10:66:14:bc:db:4a:25:52:3e:65:95:3f:03:8e:c5:
         04:54:94:a9:8f:74:e9:19:ba:8b:b5:33:a6:8c:e7:ff:0b:d3:
         e2:36:88:41:89:c6:a7:d9:aa:61:0a:05:82:95:20:2b:ca:2c:
         82:ae:dc:39:8f:3a:77:1a:a5:0f:ca:ed:c4:ea:e0:f4:68:b7:
         01:65:6a:42:4e:65:e5:d3:a2:1d:19:8a:30:ad:56:2f:6f:b4:
         ae:b5:ad:58:32:8d:cb:ac:85:67:3c:c1:1f:81:a5:0a:a9:9c:
         7f:cd:0a:9f:44:62:ce:30:06:4b:3f:b9:01:de:d8:8a:23:be:
         a0:09:0a:9f:ec:4f:86:3c:37:0e:1c:07:84:45:5e:2d:db:e8:
         f0:7f:78:3b:32:35:8f:20:50:f5:b5:96:47:62:9c:59:20:b5:
         c9:2d:ec:28:0d:76:be:92:c0:16:4c:9b:c4:6e:37:c0:67:e8:
         3b:74:f4:81:6f:ba:9b:e3:79:f6:96:71:b0:08:31:1a:7f:28:
         0a:39:4a:fc:29:be:f8:93:38:f2:0d:b4:4f:81:26:9d:03:8c:
         1d:4e:67:cf:b7:72:09:ce:cf:03:74:ff:e1:f5:cd:85:2e:6c:
         20:ff:93:68:e5:01:7d:92:30:68:e5:2b:49:bc:e6:87:ca:db:
         11:0e:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org