Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/DpTUXY7yBmg2BWjkcvPpJSCDuhQ.roa
File:                     DpTUXY7yBmg2BWjkcvPpJSCDuhQ.roa (raw, json)
Hash identifier:          XNYTjgsxt5NacNVKUUaAiL1IplPEvKsvZ7qwJCyZqx8=
Subject key identifier:   0E:94:D4:5D:8E:F2:06:68:36:05:68:E4:72:F3:E9:25:20:83:BA:14
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       D8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DpTUXY7yBmg2BWjkcvPpJSCDuhQ.roa
Signing time:             Sun 01 Jan 2023 01:30:59 +0000
ROA not before:           Sun 01 Jan 2023 01:30:59 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        210.132.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:30:59 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=0E94D45D8EF20668360568E472F3E9252083BA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:fe:59:8b:4d:54:1d:d0:d9:7d:b1:97:97:
                    bf:b3:c0:74:8d:77:ac:0e:c3:ba:b6:18:4c:59:14:
                    d2:0a:95:a7:4f:ff:f3:c8:3e:8f:2d:0a:aa:8f:69:
                    f3:15:46:e0:21:a9:c4:ff:24:3d:a3:72:49:ce:c6:
                    61:af:cc:e5:a7:8b:24:ca:e1:aa:05:7b:ed:9d:7e:
                    af:31:f0:f7:d7:f4:9c:e1:2a:8c:5b:3f:6e:90:47:
                    d5:12:cf:93:15:41:b3:9b:c4:65:6f:1e:68:b8:b5:
                    e0:20:7f:9a:eb:e2:e8:4e:16:43:fa:d7:f6:08:80:
                    38:bf:fe:9b:52:76:68:5c:36:e0:b0:be:85:31:1b:
                    0f:43:15:a8:95:74:9f:8f:35:e4:39:ee:fa:1f:6d:
                    77:74:83:1a:ad:07:54:2b:c5:d4:ad:ba:c0:90:32:
                    8d:05:a3:1b:f8:82:46:e7:52:f2:7a:41:dd:94:54:
                    c4:63:44:06:a5:d7:89:b9:fc:7b:b1:e8:85:a0:cf:
                    57:ae:e3:1b:00:05:e0:c6:a7:d1:57:12:e3:3e:97:
                    1e:b5:b9:0d:e6:07:3a:78:2c:32:ab:8c:f3:0b:cf:
                    64:90:02:a5:eb:9a:ac:8d:44:53:60:4c:19:a4:28:
                    8a:32:54:ab:60:03:de:fd:83:a6:91:cd:b9:1b:8e:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:D4:5D:8E:F2:06:68:36:05:68:E4:72:F3:E9:25:20:83:BA:14
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DpTUXY7yBmg2BWjkcvPpJSCDuhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:a7:3a:01:21:86:2c:c7:f3:1b:11:63:b1:5b:50:5f:19:
         d4:44:c3:4d:f2:f8:c6:9a:36:4f:bb:00:f9:a6:c3:c9:b1:aa:
         24:5c:08:94:dc:32:7f:ff:0d:be:7f:24:15:38:92:80:76:a0:
         73:e6:61:12:51:20:b6:5e:14:89:55:73:f1:b5:8c:5b:d9:97:
         26:4a:be:6a:0a:ec:d2:35:e1:e5:34:e9:a5:42:23:b4:ca:43:
         f3:42:e5:1f:c1:22:aa:6e:0c:52:a4:9e:2a:b9:48:76:0c:42:
         71:24:92:bd:f9:1d:05:d8:01:b9:5a:a2:66:ec:d5:cb:0b:a7:
         a1:ff:70:1a:4e:7c:e9:2e:19:53:13:d7:b6:d0:f5:f7:a2:b1:
         81:49:84:c5:1c:2d:cb:05:cd:44:57:f9:cf:01:e4:35:4a:e0:
         d7:f9:9d:6d:08:b9:3b:e0:2a:4b:c3:fc:9e:37:d0:f6:5a:b2:
         96:db:c2:02:47:c9:84:eb:0c:67:3d:88:74:f5:08:00:d2:49:
         0a:ce:f6:f7:25:72:70:9d:c0:78:03:82:f3:e7:97:02:6b:f9:
         5b:f9:65:d2:5c:f6:77:fd:6f:5d:88:7c:c0:dd:8e:8c:0e:b0:
         3b:03:b6:64:8c:32:86:48:92:fb:8d:8d:e7:67:fc:f4:f3:1c:
         09:5f:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org