Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VS984ACdMDah7yoG535Fr9Vak8o.roa
File:                     VS984ACdMDah7yoG535Fr9Vak8o.roa (raw, json)
Hash identifier:          idmmhor0FaFB3iptpMmahbJOuXyGA0lWzHttnKBfCy4=
Subject key identifier:   55:2F:7C:E0:00:9D:30:36:A1:EF:2A:06:E7:7E:45:AF:D5:5A:93:CA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       9D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VS984ACdMDah7yoG535Fr9Vak8o.roa
Signing time:             Fri 22 Jul 2022 06:37:46 +0000
ROA not before:           Fri 22 Jul 2022 06:37:46 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        119.150.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:37:46 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=552F7CE0009D3036A1EF2A06E77E45AFD55A93CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:c1:4e:7f:b3:c2:4c:b8:fe:fe:c8:aa:7c:
                    8a:e2:5c:d6:c8:b3:60:03:53:50:15:9d:06:bb:d2:
                    3b:0e:81:aa:23:31:29:7e:85:76:22:00:91:bb:a1:
                    3b:7e:a3:d4:d5:9d:21:d5:49:4b:bf:4d:7e:48:78:
                    09:8a:18:2d:c0:11:11:ba:88:f6:01:d2:90:13:02:
                    59:06:e9:83:db:03:0e:7c:c8:05:b8:e4:83:87:bc:
                    32:cf:b3:b9:af:77:b9:4c:95:d4:93:89:c8:45:6f:
                    d2:6e:6c:da:71:4e:64:17:0f:b3:e4:12:42:97:9a:
                    0b:60:d0:a9:38:d7:c8:bb:89:ff:6c:3e:35:6d:4b:
                    4c:4f:c4:b4:f8:6e:61:35:e4:26:aa:91:7e:7e:f0:
                    73:b9:8e:37:fd:42:bc:f0:04:ee:78:13:92:21:0f:
                    e7:de:0a:c3:0d:44:77:b6:fa:b8:ab:e0:f6:ad:b8:
                    29:57:70:03:91:5c:95:13:fd:d8:a2:59:45:8b:3d:
                    7c:8a:77:c5:a4:12:30:28:c6:33:95:31:2d:05:9a:
                    6f:ce:08:5d:fe:d6:80:30:a5:f8:20:83:a8:1a:f0:
                    eb:8e:fd:ad:da:75:f7:aa:6a:22:0f:1e:a5:2a:f8:
                    98:35:63:e7:ed:cd:e8:28:de:c2:e3:16:67:a4:f7:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2F:7C:E0:00:9D:30:36:A1:EF:2A:06:E7:7E:45:AF:D5:5A:93:CA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VS984ACdMDah7yoG535Fr9Vak8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:62:9e:9b:b2:fb:4a:01:54:d3:4d:88:2a:43:7c:1c:1d:b1:
         ec:c0:d8:df:5d:60:9f:92:17:c6:8e:65:00:40:ad:aa:ac:48:
         9c:02:ba:dd:61:98:4f:2f:8d:6d:b3:c9:28:2f:1a:21:52:f9:
         13:bd:96:13:b4:43:c8:c9:43:e2:cf:8c:97:a3:48:70:e4:c3:
         81:d6:dc:f4:b6:76:87:69:98:0d:0b:21:86:bb:ef:93:45:a7:
         90:34:a4:32:4e:4a:8f:6d:b1:d4:aa:dd:49:15:69:a6:79:c5:
         8c:6a:74:96:54:02:a7:cd:07:3c:80:4c:69:03:d4:ce:84:67:
         56:bc:54:45:20:8d:b7:f0:0c:5e:98:ed:8a:13:78:bd:c1:88:
         eb:e7:63:ae:f4:e7:80:6d:6c:14:bb:58:1d:ac:99:f9:17:19:
         12:74:32:24:d4:f8:8c:e1:a0:fa:7a:6b:b5:79:00:7e:4e:cf:
         41:b1:d6:ea:97:7f:e9:61:1e:f2:1a:89:4d:d7:ef:1f:8f:e6:
         5f:c1:d5:14:2e:f4:a1:cd:13:0f:ee:89:00:37:16:22:b7:f8:
         0b:d6:c7:07:5c:b7:c1:17:2a:f0:f2:9a:e7:ec:61:18:b6:d9:
         7c:ef:98:c8:83:b4:78:07:91:60:85:28:49:82:0e:d0:6e:6c:
         2f:88:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org