Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/t3r_zRiR-ltv1QZ0Pf9xX86PesA.roa
File:                     t3r_zRiR-ltv1QZ0Pf9xX86PesA.roa (raw, json)
Hash identifier:          mmtmCb50xH9sDSS290jtDa2/2FCrH3/t8G7aY1d2b1E=
Subject key identifier:   B7:7A:FF:CD:18:91:FA:5B:6F:D5:06:74:3D:FF:71:5F:CE:8F:7A:C0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       8A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/t3r_zRiR-ltv1QZ0Pf9xX86PesA.roa
Signing time:             Fri 22 Jul 2022 06:23:39 +0000
ROA not before:           Fri 22 Jul 2022 06:23:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        110.2.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:23:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=B77AFFCD1891FA5B6FD506743DFF715FCE8F7AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:68:f5:1a:d4:08:07:95:ce:6e:09:2e:77:
                    44:3e:17:e9:4a:1f:fa:d3:2a:ad:99:25:6b:b3:e9:
                    0e:40:17:27:0e:73:66:a6:5e:7c:16:ff:05:6f:40:
                    40:b7:ce:5b:3d:0d:ad:cf:22:cc:48:a8:11:41:b2:
                    1c:c2:c6:20:4b:54:eb:ea:0f:06:43:65:d4:dc:16:
                    eb:2b:96:39:a3:b2:1b:5d:11:6f:d9:6d:b2:3f:05:
                    ae:dc:5b:6c:3d:b6:2d:8b:9d:f2:4e:67:2f:15:cc:
                    55:40:e2:5e:f1:c3:8d:67:1c:28:73:76:8b:58:ae:
                    0d:e2:75:14:ae:e2:67:55:13:be:35:5d:f0:cd:6e:
                    d6:62:f4:64:98:b0:51:f5:8d:05:11:c3:c7:f3:5b:
                    ab:d4:11:c6:6f:a5:a7:2c:28:af:43:6f:fa:2c:54:
                    2e:f5:e6:1d:a2:9e:f7:5f:43:98:a2:c0:73:58:fe:
                    62:cd:67:b3:31:6e:69:d0:ae:37:88:84:ce:d4:68:
                    88:67:9b:96:5a:f0:b4:fe:65:f2:0a:6e:24:3e:42:
                    ba:32:30:3c:0b:45:33:7e:4a:d9:bb:b3:a0:92:c2:
                    c2:56:7a:d9:d4:7d:20:49:9d:58:93:32:ae:74:9e:
                    44:98:cf:82:8e:b1:26:0f:30:d1:83:bd:cf:a4:c6:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7A:FF:CD:18:91:FA:5B:6F:D5:06:74:3D:FF:71:5F:CE:8F:7A:C0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/t3r_zRiR-ltv1QZ0Pf9xX86PesA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         33:27:31:d1:9b:5c:ec:67:cf:e1:6e:b2:bf:5d:e4:b1:9c:62:
         ce:f2:3e:ec:c3:c7:5e:00:24:ff:cd:1f:3f:45:e8:41:bb:66:
         7f:60:2c:8d:9c:35:66:02:9b:3b:ff:77:8c:c1:f1:3b:cd:64:
         b2:5a:55:0b:08:a1:0c:5e:7d:9c:be:2e:f6:85:27:eb:24:dc:
         1c:f3:ee:cb:61:0e:aa:03:20:95:40:46:86:8c:71:f8:dd:e6:
         35:dd:67:90:45:09:a3:d5:e9:67:c8:be:8f:8c:c9:85:56:a8:
         78:6e:4f:4e:0b:27:93:38:7e:0d:73:45:53:c1:53:4b:b4:1c:
         9d:c5:14:ee:45:a9:91:6b:f9:bc:50:29:8d:35:2e:db:19:e6:
         3f:75:cd:0a:bb:96:5f:33:ce:f9:e8:86:26:50:e4:88:52:30:
         06:00:c0:68:58:9f:f3:32:52:a3:c2:67:4b:f3:d2:92:d2:3f:
         1b:dc:ea:7a:2b:b3:97:d1:2d:1d:54:9c:40:04:92:01:e5:4d:
         5e:a3:cf:60:cf:e9:f1:24:9b:2e:6f:a4:f0:0d:8a:56:02:55:
         8f:ea:bd:34:50:93:a4:04:fe:76:71:f5:fd:4d:42:d5:dd:88:
         1a:af:c1:19:8d:73:9b:11:73:8f:09:54:cb:dd:7c:2d:58:f9:
         f3:44:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org