Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mzA1YfmpTFEZOFiqFa4eb9ZaZBU.roa
File:                     mzA1YfmpTFEZOFiqFa4eb9ZaZBU.roa (raw, json)
Hash identifier:          H9gnJz940kGLTQeZl3qDKN3B+k/QG4c6oGLQDh7bm5s=
Subject key identifier:   9B:30:35:61:F9:A9:4C:51:19:38:58:AA:15:AE:1E:6F:D6:5A:64:15
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       F6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mzA1YfmpTFEZOFiqFa4eb9ZaZBU.roa
Signing time:             Wed 24 Aug 2022 07:40:30 +0000
ROA not before:           Wed 24 Aug 2022 07:40:30 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     10013
IP address blocks:        124.255.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug 24 07:40:30 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=9B303561F9A94C51193858AA15AE1E6FD65A6415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:fb:1a:a7:4f:94:2b:36:1c:36:de:9d:8d:
                    e8:ee:38:9c:3e:00:63:0f:3a:c5:a6:ba:02:ac:09:
                    58:d6:a3:5c:fc:2d:8c:b2:73:5c:fe:f1:b8:35:bc:
                    1b:83:35:9e:b5:d2:96:b1:da:a7:28:3a:c1:ef:fb:
                    a4:fb:3d:92:d5:92:d9:96:89:f9:8e:86:3e:38:4d:
                    6e:22:75:9d:ff:e1:27:a5:89:d8:87:46:1f:2a:dd:
                    ed:9d:51:75:e1:9e:4c:82:4d:53:58:16:82:82:ee:
                    43:62:44:07:6c:84:45:b8:f2:26:24:f2:01:05:32:
                    44:86:c0:11:8c:b2:a8:80:ce:dc:2f:a7:f2:b5:18:
                    31:de:34:44:ed:fb:39:65:d0:02:36:d7:1c:bb:f5:
                    1e:5f:b8:10:12:31:7a:77:63:43:0a:92:a9:73:d3:
                    fa:ea:fe:f0:4e:1e:bb:7a:83:fb:2d:95:0e:9e:d6:
                    d9:dc:16:28:7d:87:8c:9b:39:01:83:6f:db:6b:60:
                    4e:ea:0d:2f:48:b3:95:1e:40:63:83:7f:2b:87:8b:
                    9f:44:96:30:e7:de:ab:f6:13:5c:79:1a:f8:d0:75:
                    a3:18:72:dd:0f:a9:dc:aa:d6:db:f3:c4:7f:93:ab:
                    5c:5e:22:e9:b9:2d:00:6d:90:2b:a8:90:0e:97:69:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:30:35:61:F9:A9:4C:51:19:38:58:AA:15:AE:1E:6F:D6:5A:64:15
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mzA1YfmpTFEZOFiqFa4eb9ZaZBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:8e:3d:d6:92:ce:2c:0a:ed:6e:1e:b3:83:8b:27:4d:eb:
         4c:cc:99:1e:01:18:b9:9b:83:27:5a:f9:eb:19:37:c1:dd:c5:
         70:e1:62:d1:02:4e:26:3f:ea:54:5a:dc:93:56:5e:46:89:38:
         12:0c:f3:a4:19:34:6b:3f:9f:57:d3:7f:22:90:6e:da:1c:7e:
         d3:3c:02:6e:f7:d7:3f:e9:d0:42:d3:ab:aa:17:f5:12:dc:07:
         68:3d:01:91:01:87:e4:ac:a3:ab:ff:00:5e:44:57:b4:10:63:
         7e:2f:52:68:a3:23:01:60:b7:dc:9b:72:d9:76:8f:2f:87:24:
         23:48:f5:c4:9d:39:71:80:10:d0:6e:fd:59:16:bf:10:67:7c:
         96:3b:80:23:01:2e:c9:14:9b:ca:3d:a3:ee:62:fd:3b:f2:14:
         08:6a:21:68:37:d2:ef:f5:be:fa:6c:95:c9:ad:25:88:9f:e1:
         fd:b4:9a:c3:db:55:d4:31:93:e2:20:8a:f8:df:71:07:b8:5a:
         af:63:49:63:cd:47:bf:da:96:19:7e:b3:fb:63:62:df:65:76:
         5b:a3:5b:20:56:24:7a:5d:38:92:db:6f:d1:12:ac:27:f9:46:
         89:46:9f:16:f2:a0:ae:17:40:20:8a:6e:bb:67:46:7c:d4:fa:
         35:69:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org