Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/N9YqSn7cPcjghrPXg6WUSKiWFWo.roa
File:                     N9YqSn7cPcjghrPXg6WUSKiWFWo.roa (raw, json)
Hash identifier:          NzufShRav7xxlH8PxHsG2CVxAAXEej5PaA1oVEwNndI=
Subject key identifier:   37:D6:2A:4A:7E:DC:3D:C8:E0:86:B3:D7:83:A5:94:48:A8:96:15:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       2E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N9YqSn7cPcjghrPXg6WUSKiWFWo.roa
Signing time:             Fri 22 Jul 2022 00:19:59 +0000
ROA not before:           Fri 22 Jul 2022 00:19:59 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:19:59 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=37D62A4A7EDC3DC8E086B3D783A59448A896156A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:3f:4c:ef:8f:7d:27:04:42:30:4f:06:d7:
                    29:d1:7c:fd:52:6a:36:bc:f9:65:5a:72:ea:07:08:
                    f9:c7:8b:d2:88:46:63:8d:f9:07:83:3b:a5:43:ad:
                    f2:9d:79:66:74:9c:65:7c:26:67:c2:0f:15:bb:7f:
                    6c:53:af:64:25:ac:97:8d:59:56:1b:5f:4e:af:31:
                    57:d9:90:01:ea:e7:17:47:a0:26:91:3d:e9:94:09:
                    78:dd:d4:50:44:1b:3f:01:09:c1:96:f0:09:dd:20:
                    a4:51:59:6f:60:74:ce:87:34:5c:e4:e8:c6:8c:f2:
                    74:3a:d8:27:1c:0c:22:92:6a:30:af:5b:32:cc:0d:
                    37:50:0a:e5:a1:03:e4:15:8b:11:16:ff:c2:80:b2:
                    6c:f5:8f:5f:84:7c:ea:36:2b:2b:38:db:f3:4c:6e:
                    a4:ad:29:57:6f:37:d5:61:7e:11:7a:d3:25:61:67:
                    bd:e0:8c:4c:2a:4a:32:54:4d:53:57:8f:4f:a2:0a:
                    d1:d5:08:a4:04:55:64:68:f1:39:37:10:9c:3b:12:
                    e1:9f:d9:11:4f:b7:c3:44:a4:f8:7c:e5:59:75:31:
                    d9:ce:a5:6d:41:69:d2:57:f2:de:6c:64:80:10:34:
                    2d:d0:26:89:30:a1:5e:38:23:f8:96:a5:84:dd:3a:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:2A:4A:7E:DC:3D:C8:E0:86:B3:D7:83:A5:94:48:A8:96:15:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N9YqSn7cPcjghrPXg6WUSKiWFWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:ba:55:06:80:a4:da:0a:bd:21:3b:bb:f8:3c:1f:a0:27:
         2d:49:6e:c3:65:18:c6:ab:23:1b:41:0b:8f:eb:c3:94:af:30:
         e3:2e:80:96:24:1a:25:02:cf:41:00:77:89:16:70:54:f5:e7:
         fe:b6:05:34:4b:31:f9:3a:77:95:1d:9d:ce:9e:a9:cc:c7:31:
         3d:ab:e1:32:da:b9:56:3c:1e:d8:38:aa:13:47:7b:e4:0e:38:
         2a:5b:c7:43:b6:9a:0c:bd:3f:21:6f:c0:c2:66:50:c3:cb:49:
         af:db:d4:61:72:97:fe:a9:da:83:0c:9a:97:5c:b0:95:1d:d8:
         15:03:07:4a:21:ea:18:de:71:01:9e:0b:00:38:56:7d:c2:2c:
         7d:fa:5f:71:5e:78:03:88:80:93:c3:3c:7e:f2:d5:5b:88:ce:
         5c:7f:e9:5f:b3:e5:22:2e:11:a2:99:ec:61:6c:cb:4b:a7:57:
         67:5d:2c:d4:ae:df:ce:88:ad:cf:0b:0f:b4:e7:f4:42:42:29:
         06:75:23:27:dc:fb:d1:48:fc:ca:d7:9b:f5:44:14:73:7c:00:
         24:ad:27:3a:e3:51:8c:f7:74:f7:24:9e:5c:b0:4b:c5:01:72:
         79:94:35:5f:f4:8a:0a:09:e0:2b:b8:08:1e:af:54:52:5f:0b:
         b8:e7:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org