Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QO5Ajc8wW89nepBjGJeAXkTHWZs.roa
File:                     QO5Ajc8wW89nepBjGJeAXkTHWZs.roa (raw, json)
Hash identifier:          4JHQwVFpcODAaWI7PylrJUtdaPv+/XnScbHuk+GzTvg=
Subject key identifier:   40:EE:40:8D:CF:30:5B:CF:67:7A:90:63:18:97:80:5E:44:C7:59:9B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QO5Ajc8wW89nepBjGJeAXkTHWZs.roa
Signing time:             Thu 28 Jul 2022 05:51:42 +0000
ROA not before:           Thu 28 Jul 2022 05:51:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        218.225.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:51:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=40EE408DCF305BCF677A90631897805E44C7599B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:85:dd:b1:f5:85:ef:36:f5:f3:d9:43:70:
                    52:1b:35:f7:a8:38:fc:6a:e6:f7:af:ca:28:2c:5c:
                    0d:e8:4b:22:50:b0:04:18:f3:ca:37:ce:17:2b:6d:
                    09:89:74:1b:43:55:38:a5:04:cc:7a:d2:0e:c7:8c:
                    6b:9e:53:0e:0a:eb:ad:2e:b6:86:1d:6c:66:c8:35:
                    fd:cf:3c:03:26:d3:75:23:ba:94:f5:c0:48:d7:37:
                    30:d7:87:06:aa:fe:42:5c:91:05:57:b3:d0:48:1f:
                    62:ae:6e:91:7e:87:23:c2:c6:04:ae:4c:78:99:01:
                    a5:bd:7c:cd:8a:7c:84:67:69:a6:7c:19:80:59:b0:
                    d6:80:51:3b:85:7e:52:90:9b:3b:a7:62:13:fe:86:
                    15:f1:06:c9:3e:95:16:be:43:91:cf:13:ac:e9:e8:
                    5b:fc:db:df:ac:83:35:4c:90:f9:c3:62:31:5b:79:
                    2b:13:87:3d:5a:6f:a0:7b:35:4b:ef:b8:fd:e9:39:
                    21:b7:1e:1b:95:37:8b:46:0d:42:1b:78:24:02:c1:
                    a7:44:1a:a5:3e:0b:a6:cb:08:15:40:ff:61:c8:a7:
                    aa:1b:30:6c:1d:f7:af:6d:6b:d8:4f:bf:35:c1:bc:
                    60:44:1f:c7:ff:88:04:ea:7d:1f:fa:08:75:2d:cc:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EE:40:8D:CF:30:5B:CF:67:7A:90:63:18:97:80:5E:44:C7:59:9B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QO5Ajc8wW89nepBjGJeAXkTHWZs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:c2:c6:06:3b:16:10:7f:74:d6:65:84:a8:de:fb:e2:c1:
         c0:e0:4b:db:b6:99:02:c2:e2:91:a5:17:ad:c9:dc:6f:c6:71:
         60:e7:da:5a:8b:89:c7:89:a2:38:44:40:c3:f6:8b:26:a4:72:
         19:2a:6e:00:5a:b9:62:ca:d6:65:d5:06:c9:48:2c:e1:86:aa:
         b3:04:9a:f4:60:7d:71:f0:f1:0f:08:05:40:23:49:84:19:51:
         b5:22:4b:77:8c:f4:7f:8c:a9:c3:d6:bf:fe:b6:db:47:50:a6:
         01:26:64:8e:2d:c1:e6:c8:be:50:82:af:9f:71:07:f6:83:5b:
         bb:6e:f6:b6:c5:ae:d3:45:87:5e:eb:3f:ae:6f:5e:91:0a:04:
         f4:5e:b7:8a:77:5b:70:7f:51:79:1f:7d:fe:fb:a7:20:a6:1b:
         7d:aa:f2:5d:50:42:2f:0b:a3:cd:e2:2c:8c:10:1e:ea:c6:14:
         4f:e4:c6:f3:c1:f5:a0:a5:b1:51:e6:1d:ec:2a:cd:90:f1:65:
         bb:ef:ce:e7:cb:6f:fe:d6:26:b8:8c:87:9c:f3:f6:91:42:35:
         15:e3:69:96:7e:b4:a2:62:af:f1:08:c4:9e:3a:da:ab:e3:b7:
         20:25:0d:19:43:19:32:9d:b6:e4:68:be:9c:70:8c:8b:41:47:
         a5:01:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org