Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cfjS3Gp92cOZK7zstzL_7IMI5fk.roa
File:                     cfjS3Gp92cOZK7zstzL_7IMI5fk.roa (raw, json)
Hash identifier:          Ch/fLP11ADIJFHSzp91bDOq/Xzr6GgtbKPYITLotLSo=
Subject key identifier:   71:F8:D2:DC:6A:7D:D9:C3:99:2B:BC:EC:B7:32:FF:EC:83:08:E5:F9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       58
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cfjS3Gp92cOZK7zstzL_7IMI5fk.roa
Signing time:             Fri 22 Jul 2022 03:41:21 +0000
ROA not before:           Fri 22 Jul 2022 03:41:21 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.133.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 03:41:21 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=71F8D2DC6A7DD9C3992BBCECB732FFEC8308E5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:a1:e2:a0:f8:a8:72:b1:d5:d3:f2:62:d6:
                    89:69:cd:65:85:80:38:2b:7c:6c:8b:25:11:b1:0c:
                    e2:bf:3f:05:6f:f4:c6:ac:a2:bc:00:5a:61:fd:d2:
                    f8:82:26:51:cf:fa:d6:78:b7:e1:e2:1d:d7:37:c3:
                    14:5f:b5:2c:00:52:ae:57:bf:b3:f2:89:ac:36:70:
                    cc:7a:df:03:a2:58:eb:b6:0f:a3:5b:d0:ac:3a:6c:
                    33:25:5c:1b:f2:47:60:de:bd:1a:ce:40:54:e7:f8:
                    03:dc:99:ea:93:88:6c:74:9f:62:dd:fb:40:b4:62:
                    99:ff:2e:16:79:38:55:a6:02:b4:df:da:fa:cd:c0:
                    93:67:10:3d:24:68:ef:4d:d4:c0:50:c1:3d:26:0d:
                    47:73:56:0f:43:e9:bf:73:38:01:13:57:f2:df:21:
                    f3:9a:c3:1b:88:c4:cf:fe:c2:77:d5:f2:9f:02:7d:
                    a7:0c:26:c3:e7:25:f2:d4:88:8c:dd:21:f8:42:f2:
                    d0:e1:6c:8c:50:35:c6:33:57:0d:d4:0f:f2:4f:97:
                    ab:08:51:e4:11:71:79:c3:41:ca:48:52:31:85:4a:
                    99:95:43:ca:a0:c2:84:9b:e3:81:e8:4a:b5:87:9c:
                    63:6c:55:55:c4:d2:bc:14:1c:be:8c:96:42:f6:e0:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F8:D2:DC:6A:7D:D9:C3:99:2B:BC:EC:B7:32:FF:EC:83:08:E5:F9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cfjS3Gp92cOZK7zstzL_7IMI5fk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:db:c8:38:f4:b5:09:11:9f:03:cb:57:c3:5c:d0:d6:4b:
         79:f7:37:c1:b1:89:66:7d:35:16:71:94:15:44:da:05:f5:9c:
         58:8b:b1:ad:91:24:08:1a:f1:fb:52:e8:1c:6e:ba:d6:e7:2c:
         94:1f:10:fd:31:43:48:a2:23:a0:59:31:9c:9e:02:b6:5c:84:
         2c:51:cb:24:01:2a:47:a1:72:8d:5a:18:29:98:b4:50:de:a2:
         90:7a:be:27:77:ec:c6:15:70:92:fe:06:cc:72:e5:8b:a4:c9:
         3b:61:4a:4b:78:95:59:bd:88:b1:5b:04:c2:e7:02:66:fb:8e:
         01:8c:45:2a:18:15:68:fa:03:e7:b3:47:11:b3:20:24:83:11:
         4d:f9:39:4e:60:1b:40:78:bb:07:c8:b9:7d:10:4f:cc:3a:5d:
         8c:0f:53:3c:dd:0e:e9:c0:dc:11:8b:84:39:35:0a:f6:8f:0c:
         10:cc:4c:f3:bb:ff:f7:f1:d8:98:a5:8c:c5:75:c2:82:3f:f8:
         ce:47:98:7f:e9:2b:4b:70:91:3e:be:b8:07:63:3f:7c:bb:f2:
         82:dd:36:9d:b9:b3:a8:19:ec:d6:e1:ce:1a:d5:57:53:ad:e8:
         2b:b8:23:1b:74:f0:a0:9d:29:18:d9:80:85:24:d5:2a:db:e5:
         70:64:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org