Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_SNQPMRJowzgcVFMuo_U1FHsxE8.roa
File:                     _SNQPMRJowzgcVFMuo_U1FHsxE8.roa (raw, json)
Hash identifier:          AjdZhjFQ6xAyAhl1CqwRfz69aMRRoMyeOTXTAW4S3Bo=
Subject key identifier:   FD:23:50:3C:C4:49:A3:0C:E0:71:51:4C:BA:8F:D4:D4:51:EC:C4:4F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       1F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_SNQPMRJowzgcVFMuo_U1FHsxE8.roa
Signing time:             Thu 21 Jul 2022 08:41:42 +0000
ROA not before:           Thu 21 Jul 2022 08:41:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        119.150.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 08:41:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=FD23503CC449A30CE071514CBA8FD4D451ECC44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:9f:14:a7:54:80:1b:e3:f9:2c:9d:27:60:
                    e6:e8:da:9e:c4:a8:78:3e:1b:f4:07:18:1c:0a:d5:
                    62:04:5d:d1:a9:92:47:e8:78:d1:70:f2:2a:53:a0:
                    26:dd:4a:7c:b7:6b:a3:63:85:e8:b7:c5:e5:46:f9:
                    86:ed:61:92:7b:0b:a7:f5:15:39:85:35:5e:a1:98:
                    b7:10:cb:33:1f:0c:d8:22:ce:96:37:0c:f7:58:c2:
                    25:92:39:a1:ef:4a:2a:f6:69:d7:f1:1d:48:29:db:
                    a8:ec:4f:c2:a7:c3:e1:cc:91:99:33:58:4f:04:df:
                    3b:37:14:52:70:26:80:f9:22:7b:54:2b:a2:33:4b:
                    de:9a:a9:eb:d2:95:56:09:14:57:e1:ba:f1:6b:2d:
                    5c:bc:a1:69:d0:4b:e0:dd:34:f0:f1:f5:15:49:66:
                    32:fc:43:1d:b3:16:b1:50:35:6a:2a:dd:8a:ad:f0:
                    c5:8f:74:91:1f:c6:9a:29:49:50:a0:e7:03:8f:dd:
                    44:38:29:ff:47:17:46:27:9a:3a:5d:50:7f:6e:fa:
                    4d:44:cf:05:ea:4c:7a:31:fe:3e:f5:bd:e7:43:a7:
                    0f:3d:10:1c:eb:37:80:90:d8:30:4d:41:f7:50:43:
                    06:a0:51:68:12:5f:e4:2c:42:a9:e9:cc:33:fd:74:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:23:50:3C:C4:49:A3:0C:E0:71:51:4C:BA:8F:D4:D4:51:EC:C4:4F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_SNQPMRJowzgcVFMuo_U1FHsxE8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:58:5a:69:4a:97:d1:32:52:7a:5d:01:e0:a3:89:33:fe:3d:
         28:42:bc:50:c7:e3:75:ce:52:9e:75:2d:95:de:66:7f:ed:9f:
         f8:8b:b8:12:7e:e0:19:ae:89:11:c5:c6:48:bc:62:e9:e5:93:
         4d:dc:e3:82:aa:2b:04:7e:78:64:2e:e4:5d:20:c1:42:76:75:
         89:97:6c:5f:5d:3b:52:03:db:d0:35:cc:3e:b8:46:7f:f2:37:
         90:c1:27:24:e7:c2:26:d1:d3:99:0f:da:45:f9:22:8b:4c:1d:
         bf:04:0a:eb:a8:2e:38:8c:32:dc:21:39:6a:74:8d:b7:5e:d8:
         84:71:5c:36:22:ae:3b:b5:3c:d1:eb:6e:b7:6e:26:aa:13:b3:
         ad:2a:ca:89:03:af:54:81:a1:83:04:c4:34:f2:90:69:f2:18:
         39:e2:55:6a:1c:95:c0:aa:e5:b0:2f:00:79:2c:99:b7:b7:c6:
         bd:cf:1a:b8:c1:ff:2e:cc:4b:a2:e6:87:e1:19:40:d7:e5:46:
         d1:9c:47:ef:91:d9:3b:ad:30:df:0a:3f:43:4e:53:3b:50:6a:
         8a:0a:4f:65:78:52:b2:a2:7c:92:52:b5:ea:ee:32:69:b8:5b:
         06:dd:38:13:f7:8e:3f:82:76:b0:fc:fb:17:2f:c8:b9:88:59:
         97:6b:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org