Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_Q417a4CFGqSRLwU0na4ffSJzYM.roa
File:                     _Q417a4CFGqSRLwU0na4ffSJzYM.roa (raw, json)
Hash identifier:          fkm/6pOGJaBEXunRG/kbvPOGBS4CaAzEqCpQz/uX6xE=
Subject key identifier:   FD:0E:35:ED:AE:02:14:6A:92:44:BC:14:D2:76:B8:7D:F4:89:CD:83
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       4A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_Q417a4CFGqSRLwU0na4ffSJzYM.roa
Signing time:             Fri 22 Jul 2022 01:52:22 +0000
ROA not before:           Fri 22 Jul 2022 01:52:22 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.195.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:52:22 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=FD0E35EDAE02146A9244BC14D276B87DF489CD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:da:f3:57:d2:0c:57:42:94:77:15:c8:62:
                    34:36:01:4d:04:f9:46:19:33:b2:32:5c:4f:bb:32:
                    17:0e:00:db:42:10:9c:c6:92:68:2e:8c:d2:ed:51:
                    d9:9e:36:86:d0:58:cf:0e:69:77:72:1c:14:83:63:
                    99:35:2a:8d:09:c7:5b:f0:b5:3f:1c:4e:e1:02:03:
                    bc:e9:3a:64:42:91:18:dd:b1:21:ed:0b:63:10:36:
                    19:1a:57:6f:4f:44:de:17:a1:04:77:85:1c:49:9d:
                    62:8e:55:9b:e1:e9:f8:fe:b2:12:80:4e:7c:52:a8:
                    ca:41:bd:13:23:9a:71:32:66:5c:14:b4:84:5d:1e:
                    6d:4b:ab:68:04:f6:82:6b:91:fa:14:2d:c2:ba:a8:
                    29:77:fc:08:ba:83:86:42:69:f9:21:db:52:45:4d:
                    0e:64:9a:bd:f1:0e:2d:c0:0a:09:58:11:07:1c:10:
                    01:65:db:26:10:c6:9a:18:55:62:e9:71:26:bc:b5:
                    d0:15:bc:db:2f:39:95:c0:77:e9:a7:f1:e7:78:52:
                    b8:2c:18:23:96:57:3c:0b:53:8b:53:48:4c:d0:eb:
                    23:8d:20:d7:3a:f7:df:78:a6:09:9f:c5:7f:82:89:
                    a4:1f:91:9f:c5:44:f6:e2:27:68:22:2b:ad:d1:5d:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:35:ED:AE:02:14:6A:92:44:BC:14:D2:76:B8:7D:F4:89:CD:83
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_Q417a4CFGqSRLwU0na4ffSJzYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:ba:4e:90:f7:3c:ef:51:f8:f3:91:5e:fd:f7:12:7e:19:
         9e:85:4a:b1:44:af:91:c9:a3:ed:24:08:4c:ba:92:62:6f:86:
         5d:f8:82:7c:e9:9f:e4:a8:39:7b:90:4b:78:71:58:d4:04:50:
         8e:ce:fa:0c:51:55:77:ac:1d:dc:ec:ff:49:6a:62:5a:db:ce:
         03:4b:11:69:a6:b9:1c:c9:43:f2:1a:4b:3e:93:92:af:34:82:
         bc:c3:d5:4a:aa:e5:45:88:44:b2:e6:08:fa:dc:f3:97:f5:d4:
         a6:2b:c9:8d:c0:af:35:e7:1d:67:bb:d3:bf:ba:4b:fc:32:ba:
         dd:0d:87:04:f2:bb:a3:af:e4:8f:4c:25:84:fa:ad:9b:66:ba:
         43:63:56:fb:28:48:4c:64:51:42:5d:d2:14:15:c5:0a:4c:66:
         29:82:1b:0d:58:e5:ce:0a:b3:c9:2f:1c:7c:f2:f7:2a:37:f7:
         b8:ac:9a:2e:2a:f9:06:bf:16:b8:cf:02:b0:54:86:d6:90:76:
         33:db:e2:f9:97:cc:5d:ed:3e:b5:62:3f:99:02:7d:fd:48:45:
         5f:ff:f6:4a:a6:a0:89:d7:b7:bd:58:97:3a:c5:4e:6c:95:c6:
         66:ef:5e:7f:f6:f9:12:71:67:61:08:2e:25:f7:34:e3:a3:5a:
         09:fa:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org