Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pVBBqxxItyab5-_jTVBCKOjqLUs.roa
File:                     pVBBqxxItyab5-_jTVBCKOjqLUs.roa (raw, json)
Hash identifier:          JP2nszvDQU1gSKD542vNZcvH6mJiS8J5N0PlBoaZEZ8=
Subject key identifier:   A5:50:41:AB:1C:48:B7:26:9B:E7:EF:E3:4D:50:42:28:E8:EA:2D:4B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       8E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pVBBqxxItyab5-_jTVBCKOjqLUs.roa
Signing time:             Fri 22 Jul 2022 06:23:41 +0000
ROA not before:           Fri 22 Jul 2022 06:23:41 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        110.3.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:23:41 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=A55041AB1C48B7269BE7EFE34D504228E8EA2D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:74:4a:95:42:c4:cb:3c:ec:43:de:01:d0:
                    44:e3:08:00:13:19:64:af:15:a4:73:0a:df:05:99:
                    10:e9:d6:61:41:78:35:25:7d:84:93:20:de:74:e4:
                    3e:be:6b:1b:27:6d:6b:64:43:bd:87:4a:31:96:c6:
                    1a:a5:a8:ca:25:9e:2a:7b:06:66:64:e7:82:88:2e:
                    11:2e:0a:65:6f:af:d2:d7:4f:9d:16:ff:a5:67:4d:
                    61:bb:37:38:6b:40:2d:c8:dc:61:9c:e8:bc:a8:37:
                    8a:96:12:92:ee:38:34:1b:df:6e:48:ee:a2:ff:ef:
                    9d:5a:bd:63:82:ca:c5:86:50:f2:e4:59:a4:ae:f3:
                    48:65:b1:3f:e8:95:55:ab:ec:ad:87:9e:bf:06:cd:
                    ae:70:2e:f8:31:52:98:aa:1f:3e:66:31:b9:ff:23:
                    a0:73:7f:03:78:a5:10:0b:c4:0a:6e:c6:db:e6:9f:
                    14:38:da:3c:d6:f3:e6:ea:80:07:b4:34:b5:68:f4:
                    31:72:97:f2:27:a0:df:f9:33:d5:cf:c3:18:c7:21:
                    ef:68:b0:6d:64:51:dd:8b:a1:41:ad:b5:ec:90:c7:
                    cb:b1:fc:3c:a5:f0:c5:cc:3c:f9:71:c9:24:7a:cb:
                    42:ec:96:bc:b8:4d:d7:4a:d2:0e:d5:fd:bd:c1:cc:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:41:AB:1C:48:B7:26:9B:E7:EF:E3:4D:50:42:28:E8:EA:2D:4B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pVBBqxxItyab5-_jTVBCKOjqLUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:c1:3e:17:e0:eb:7f:e5:17:a3:14:50:f9:59:a6:ae:61:
         fe:93:a9:5e:75:24:9e:05:95:5a:89:d0:99:ba:62:a9:8a:df:
         14:3f:8a:e2:6f:f6:07:13:d8:05:82:0d:7f:82:57:e4:b2:5a:
         2a:1e:01:40:29:21:1d:31:3c:33:82:cc:e2:35:95:da:9e:66:
         a0:86:6a:c9:5b:03:3d:bc:15:cf:1e:21:a7:33:a8:54:8c:d6:
         ea:28:3f:0f:c1:73:80:45:58:66:52:dd:f4:7c:ff:ba:8b:09:
         b7:e4:5c:1f:1a:1b:6d:62:19:4b:80:1e:8d:4d:cb:f2:dd:4f:
         7f:bd:6f:51:7c:e7:3a:3b:7f:fa:03:7b:0c:30:df:31:db:76:
         07:14:09:cd:28:d3:5d:6a:57:f5:f8:4f:7d:b3:93:94:db:5c:
         7c:46:9e:e7:8d:22:c5:32:08:34:19:81:c7:04:6c:19:64:f6:
         ff:54:a7:20:64:38:2c:e6:65:c4:40:ed:0f:d7:85:26:5c:da:
         b4:56:15:ec:1b:84:29:e5:d4:57:15:d8:91:69:19:3e:77:66:
         a3:26:4c:99:ff:78:f7:10:5c:eb:32:e3:5d:d7:92:a3:84:d0:
         3b:bc:aa:21:86:71:37:1d:0a:90:90:05:52:51:d8:b6:fa:56:
         b7:3a:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org