Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xXZiALl9UYB_zu2dycO5BYZo2Us.roa
File:                     xXZiALl9UYB_zu2dycO5BYZo2Us.roa (raw, json)
Hash identifier:          uePWO0Opqqq7zHKPWWXNU2cMnP7FZd/CActHLCrFksc=
Subject key identifier:   C5:76:62:00:B9:7D:51:80:7F:CE:ED:9D:C9:C3:B9:05:86:68:D9:4B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       7E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xXZiALl9UYB_zu2dycO5BYZo2Us.roa
Signing time:             Fri 22 Jul 2022 06:09:19 +0000
ROA not before:           Fri 22 Jul 2022 06:09:19 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.44.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:09:19 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=C5766200B97D51807FCEED9DC9C3B9058668D94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:d3:23:ca:9f:cc:0b:64:8a:65:82:87:03:
                    da:7c:59:2a:e0:e4:c5:21:77:06:55:9a:b5:a2:bc:
                    38:c7:bd:54:06:4b:ec:cd:f0:fe:f9:d5:56:eb:74:
                    9a:88:79:a8:e9:f8:b5:c3:f9:9f:8b:cc:7a:a4:1c:
                    63:e3:10:4c:d6:3b:01:e6:ac:81:fe:4d:47:bd:57:
                    99:f6:de:27:6a:61:0f:06:45:2e:7c:bf:3a:58:3b:
                    c0:9c:9d:e5:88:6a:e3:f7:85:15:73:b6:57:3e:99:
                    3f:38:9f:87:c8:bd:a7:06:aa:40:d0:3f:a4:b9:18:
                    4f:26:e5:e5:9f:cd:eb:69:27:9a:e8:a3:63:66:31:
                    46:81:43:05:d1:d5:68:30:a5:a1:61:40:31:bb:5e:
                    4c:cc:39:d8:44:a5:72:52:ec:7c:33:9d:e2:bf:19:
                    08:78:ea:d2:61:db:ab:38:f3:58:a4:4f:c5:3c:c7:
                    6b:f2:35:6f:c5:70:4b:63:e7:af:5c:e5:ec:4d:e0:
                    a7:01:8b:c8:d4:54:9d:02:51:04:b2:95:64:de:8a:
                    55:26:0d:4c:45:84:e6:2d:7c:19:7b:17:58:8b:8e:
                    8e:a4:8b:18:91:44:98:7b:8d:14:45:90:6b:6c:d0:
                    0a:e9:52:51:f5:54:26:cf:69:0e:55:4f:ba:a8:4d:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:76:62:00:B9:7D:51:80:7F:CE:ED:9D:C9:C3:B9:05:86:68:D9:4B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xXZiALl9UYB_zu2dycO5BYZo2Us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:55:95:47:e3:42:20:53:f7:13:04:60:7b:18:56:dd:64:
         b8:a9:cd:ec:51:f6:39:5f:6c:2a:8f:c6:c5:49:cb:31:57:83:
         fc:0d:41:15:67:30:41:26:53:86:f4:dd:e3:ef:cf:e3:15:e9:
         8b:45:89:79:5b:37:77:02:6a:32:73:95:59:d1:61:6a:c6:74:
         27:ec:2d:8e:e4:0e:6e:68:cc:6e:b3:8e:83:d5:1c:0d:1b:4b:
         fa:30:1a:68:f1:91:9b:67:33:63:4b:ee:ab:d4:36:ae:df:a8:
         c9:ae:06:ba:3f:e6:1c:2e:96:59:04:c0:5f:04:f3:ad:2f:e7:
         ec:34:4a:27:b5:e8:03:1c:0a:a6:ee:db:73:5b:c4:00:fa:d4:
         14:88:0a:e4:62:3a:78:8b:3d:1e:bc:56:ef:e7:fa:db:04:bb:
         86:fe:88:c6:fd:cf:c6:d1:73:71:c1:3b:be:5a:1c:3b:4b:d1:
         8f:17:a9:ba:5f:19:02:96:c4:51:c6:d3:24:62:b0:fe:59:5f:
         ac:ca:96:7b:75:1d:9c:c6:e2:67:9e:5a:9f:ec:25:ce:11:e5:
         dc:4f:ec:7e:48:c6:bb:23:72:ae:35:05:3a:23:fd:21:a9:0e:
         d3:9c:77:64:5c:85:7c:49:42:0c:b5:6d:33:35:12:e7:45:2a:
         cc:1f:69:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org