Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pUjVq4U3Ib1j_GZMhPZXA2bb6fs.roa
File:                     pUjVq4U3Ib1j_GZMhPZXA2bb6fs.roa (raw, json)
Hash identifier:          +0jLUqkgVmnZ+3fuAMTGKgq4HN41+mvRGh2rFLjfv3s=
Subject key identifier:   A5:48:D5:AB:85:37:21:BD:63:FC:66:4C:84:F6:57:03:66:DB:E9:FB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       DE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pUjVq4U3Ib1j_GZMhPZXA2bb6fs.roa
Signing time:             Thu 28 Jul 2022 05:41:55 +0000
ROA not before:           Thu 28 Jul 2022 05:41:55 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        183.181.120.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:41:55 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=A548D5AB853721BD63FC664C84F6570366DBE9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2b:3d:40:bd:2d:24:e1:c3:d6:0a:a9:79:e2:
                    30:70:50:4d:7b:44:ac:b0:75:e7:be:80:17:51:be:
                    e7:f4:aa:ce:ad:d0:dd:e6:ca:36:4f:80:a8:96:74:
                    15:b1:fe:91:18:af:bd:ad:f3:35:bf:bb:b3:41:44:
                    83:17:e7:8f:8c:91:98:bd:d1:db:ed:b0:94:a3:f5:
                    71:80:fd:b3:fa:1c:63:a3:35:57:d8:a7:47:ea:6e:
                    1f:8d:20:b6:3e:b5:3b:18:0c:bd:b0:50:92:07:3e:
                    3e:d8:c3:d8:53:90:55:a3:f3:2f:1f:7e:6d:6d:ce:
                    a3:b9:cb:eb:53:55:6c:cd:d7:fc:d6:37:6c:89:75:
                    df:49:04:7b:67:d4:4c:3d:48:df:c1:7d:a1:be:d6:
                    24:d9:d6:e3:32:f4:e2:c4:65:70:91:33:d8:a1:ed:
                    50:6e:d7:2d:f3:cf:be:03:bf:af:8c:a4:ba:9d:4e:
                    ac:03:bf:5b:ef:bd:7b:75:aa:34:db:a3:dd:be:40:
                    de:10:82:5b:0f:31:4a:19:2d:c2:b6:b6:d5:bf:42:
                    19:6a:37:08:2c:cb:6b:0d:cf:ab:d6:3d:34:2f:c2:
                    fc:fa:ab:2b:11:e3:8b:62:d7:95:db:38:89:75:58:
                    51:1e:46:6a:7d:9b:93:62:8b:47:d6:54:ca:8c:40:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:48:D5:AB:85:37:21:BD:63:FC:66:4C:84:F6:57:03:66:DB:E9:FB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pUjVq4U3Ib1j_GZMhPZXA2bb6fs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:6f:c1:3d:a0:42:45:23:5a:ee:f8:79:d2:bf:b6:90:35:
         09:5c:79:74:d3:e6:61:c2:e3:60:ad:ce:21:51:45:ed:fc:61:
         ba:14:e6:e5:49:06:76:48:3f:89:12:6e:8a:d9:96:8b:2b:40:
         78:6c:4c:b0:12:7d:7c:0d:55:8c:e0:21:06:c5:1b:45:6e:62:
         5c:f7:8b:81:d9:11:cb:44:26:e2:51:eb:a8:75:65:31:1e:d9:
         e3:e0:48:0e:c6:17:ea:d6:2b:78:cd:2f:bf:89:e8:83:fa:54:
         e0:7e:c2:2c:ae:c8:2f:fd:48:2b:7c:6e:b0:0f:2d:6b:61:d5:
         5e:96:73:75:8d:6f:1a:d8:05:59:a6:10:b7:ed:d1:dc:ee:12:
         d1:09:6d:c5:1d:76:36:01:d7:14:68:d1:03:fd:4e:f8:52:fb:
         65:99:f7:e2:ad:41:c9:7c:68:94:66:48:56:83:23:d1:56:1c:
         6b:8f:63:45:cb:e0:01:d2:aa:4d:57:28:0f:2a:b9:00:f2:7d:
         fa:63:b9:5c:ab:93:59:32:67:17:e0:b9:3d:34:9d:f1:e3:25:
         de:c2:87:3b:12:87:95:2d:77:03:27:74:7d:7b:83:bd:5f:35:
         d2:c7:0e:04:af:64:77:6c:dd:c3:5c:c7:35:1d:c1:85:8a:f7:
         f6:ff:d8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org