Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zfUU0hxYx4fppANkDZ7K77MDqDc.roa
File:                     zfUU0hxYx4fppANkDZ7K77MDqDc.roa (raw, json)
Hash identifier:          XtOjfC6PdFztCjQSQ2IOtNsgTRKzXBKbi2bg2Z/FO/8=
Subject key identifier:   CD:F5:14:D2:1C:58:C7:87:E9:A4:03:64:0D:9E:CA:EF:B3:03:A8:37
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       74
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zfUU0hxYx4fppANkDZ7K77MDqDc.roa
Signing time:             Fri 22 Jul 2022 04:45:28 +0000
ROA not before:           Fri 22 Jul 2022 04:45:28 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.205.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:45:28 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=CDF514D21C58C787E9A403640D9ECAEFB303A837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:d4:05:3c:50:80:56:18:07:ca:f6:65:15:
                    d1:dc:eb:57:03:3b:ab:bd:7d:09:6d:6b:e7:94:af:
                    9f:bf:a3:7a:7c:f3:ba:a4:f5:9c:87:82:ac:94:4f:
                    a7:6c:10:bc:09:5a:15:be:28:7a:da:ce:b9:7f:16:
                    3a:51:8d:96:0e:97:54:b2:e8:e3:72:12:dd:8e:6c:
                    12:a4:e2:a6:69:93:13:ba:80:a9:77:c8:7d:d4:50:
                    85:66:62:1c:33:e8:3c:ef:c8:ad:37:43:bc:a5:da:
                    68:ce:fb:d2:20:1f:c4:50:39:66:4c:ef:d4:c1:88:
                    8e:2a:da:fc:80:44:da:8e:08:5e:18:21:84:3f:38:
                    b5:58:bf:51:6d:e6:e1:59:c6:39:6f:aa:9b:1b:4d:
                    92:34:5a:6d:c2:40:f4:99:6e:e2:f5:1b:b0:74:52:
                    63:17:7d:9e:22:bb:5b:04:09:ef:f4:35:23:0f:22:
                    80:75:45:05:b0:de:07:33:40:21:24:d3:6f:d5:68:
                    a4:03:34:95:b3:d5:5c:11:bd:c4:4c:dd:a0:b2:90:
                    1e:2b:a7:6c:f3:03:ef:b4:01:d2:39:dd:30:03:46:
                    5b:c5:0d:7d:45:81:66:ab:d8:d0:d0:87:21:55:45:
                    a7:2d:b6:15:36:14:35:04:07:cd:8e:47:bc:1c:46:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:14:D2:1C:58:C7:87:E9:A4:03:64:0D:9E:CA:EF:B3:03:A8:37
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zfUU0hxYx4fppANkDZ7K77MDqDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:62:84:2a:ec:f0:00:ae:15:9c:ad:c6:1b:f5:6c:8c:9c:
         fd:23:cb:6b:11:66:9b:4e:73:c8:0f:9a:0b:a4:0d:7a:74:65:
         5e:0e:82:b1:7e:a4:75:e4:59:22:f3:26:90:ab:3a:2c:58:28:
         74:4f:4d:c6:46:47:cb:f7:a0:b0:2b:f5:bf:21:77:c8:30:0e:
         5c:79:4a:87:d1:47:9b:30:95:f4:49:1a:b5:d5:dd:b5:b1:20:
         e6:40:19:7e:60:0d:fc:0c:1a:cf:a7:06:e7:f7:1d:d3:29:b8:
         3f:6f:b7:5c:2e:3a:41:f5:b1:ca:e7:ca:dc:f4:d4:67:83:97:
         8c:1b:d2:0a:a3:1e:f8:cc:dd:4f:fc:cc:17:f6:48:61:d6:3e:
         10:0d:b8:29:27:54:d3:f9:70:1b:7a:c4:7c:61:b6:ee:49:80:
         3b:57:26:5d:2e:d7:6a:b7:21:66:fd:bf:e0:28:e0:3e:a2:f2:
         47:6f:fc:61:06:b8:cb:b0:60:0b:48:79:32:d7:08:b9:bb:4a:
         91:d2:ae:11:1e:f5:ec:75:5e:d7:a6:b8:61:f5:dc:59:51:c2:
         30:7e:71:4e:2b:6c:13:3e:34:d8:bc:21:0a:9a:d6:56:7b:d4:
         c4:bb:1e:24:99:0d:d8:01:9e:a0:bd:0a:8c:fe:e3:51:5f:21:
         3c:07:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org