Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OGgiFfOnFZVA2I-8YIHvDAkm8_U.roa
File:                     OGgiFfOnFZVA2I-8YIHvDAkm8_U.roa (raw, json)
Hash identifier:          bWtHOKo91Yc5Co7cOX1Y3qAHHKxzS+w/qM916kfN7Zw=
Subject key identifier:   38:68:22:15:F3:A7:15:95:40:D8:8F:BC:60:81:EF:0C:09:26:F3:F5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       3F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OGgiFfOnFZVA2I-8YIHvDAkm8_U.roa
Signing time:             Fri 22 Jul 2022 01:20:30 +0000
ROA not before:           Fri 22 Jul 2022 01:20:30 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.135.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:20:30 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=38682215F3A7159540D88FBC6081EF0C0926F3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:b1:c5:8d:33:88:3a:d4:c4:3a:ff:b0:d6:
                    bf:50:97:d8:55:58:b7:0b:b3:e9:f9:58:77:26:3b:
                    94:08:75:de:46:fd:69:17:4b:5f:bc:5a:80:2b:ac:
                    d1:2f:26:00:6c:d1:a5:85:90:d5:bd:f4:77:55:6b:
                    82:de:d8:ea:b9:70:7d:21:8b:d8:52:db:07:ed:17:
                    4f:34:53:f0:b6:00:96:9d:98:3d:89:cf:db:91:d6:
                    12:36:03:06:ad:7d:ba:e9:22:ea:bf:ad:03:43:5f:
                    74:a4:61:42:a3:48:c2:38:d5:73:9e:89:5c:0b:28:
                    ec:1b:c5:96:f8:f5:05:ba:9b:67:44:fb:16:59:13:
                    aa:c4:17:7b:2f:9a:9d:5a:37:0d:aa:2a:e5:b3:33:
                    85:88:e0:af:b0:4d:fe:d5:9d:15:dc:ef:ed:a9:6d:
                    be:22:09:6f:dd:95:48:e8:27:7c:18:3f:4c:b2:41:
                    0a:12:6d:08:90:48:e4:fc:fa:4e:5e:7f:ec:31:0d:
                    e6:c8:82:93:19:89:2f:65:57:03:6a:51:65:89:d0:
                    c8:cb:32:06:8d:86:2f:78:58:23:48:f0:d1:23:2c:
                    50:48:4e:55:b7:d3:00:c8:26:99:e3:03:2c:9e:37:
                    26:95:98:ee:2c:96:7d:03:5d:61:08:30:ce:8b:bb:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:22:15:F3:A7:15:95:40:D8:8F:BC:60:81:EF:0C:09:26:F3:F5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OGgiFfOnFZVA2I-8YIHvDAkm8_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:47:fb:f6:85:66:2b:ad:bb:b8:12:c8:dd:95:53:43:52:3b:
         18:b1:23:b4:3a:77:9b:0c:18:e6:04:35:28:2e:7b:20:5c:7a:
         56:d7:f6:05:12:4f:92:58:05:3a:b7:84:62:89:c8:d8:4c:1d:
         cb:28:7c:ba:cc:f2:be:b5:37:b4:3b:e0:b7:4b:ff:e7:98:c9:
         05:61:5a:ae:0b:19:38:f7:d5:fe:21:7c:56:ad:90:ba:0e:b9:
         e0:fb:36:7b:df:37:34:08:1b:1e:5a:24:69:81:98:81:e6:7a:
         67:8e:93:93:03:5d:80:fd:7c:02:14:87:99:2b:20:17:27:21:
         ab:d2:3b:90:3a:cf:cb:25:5c:6f:22:d9:63:cd:6f:58:16:90:
         b8:11:cf:eb:35:2b:c2:13:2b:d0:ce:ef:3e:06:f0:b1:cf:2b:
         5a:8d:d6:00:11:f8:43:f4:db:cf:00:87:8a:a5:ae:25:af:f9:
         f2:b3:54:7d:16:f3:2d:6c:60:f9:26:26:9c:11:fa:b1:62:39:
         ae:df:9b:be:0b:ee:68:76:03:24:9c:3f:34:29:6f:2f:56:7d:
         91:30:31:99:fd:24:5a:c4:02:1d:e8:34:98:b7:ca:ef:a2:78:
         3e:5c:b0:55:cc:ad:c3:37:37:27:3e:a9:27:fd:4e:91:8b:36:
         90:35:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org