Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wTg4-OG44yhmzPjFza24dzWm5vQ.roa
File:                     wTg4-OG44yhmzPjFza24dzWm5vQ.roa (raw, json)
Hash identifier:          keQVwJuDbt+XuDkwithUoegJdRAa6fxa7UWLIxUaCB4=
Subject key identifier:   C1:38:38:F8:E1:B8:E3:28:66:CC:F8:C5:CD:AD:B8:77:35:A6:E6:F4
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       F8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wTg4-OG44yhmzPjFza24dzWm5vQ.roa
Signing time:             Thu 08 Jun 2023 09:39:23 +0000
ROA not before:           Thu 08 Jun 2023 09:39:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        122.223.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jun  8 09:39:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C13838F8E1B8E32866CCF8C5CDADB87735A6E6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:84:e2:02:3e:cb:2e:53:dc:45:de:9f:bd:
                    80:c5:2d:45:16:a0:2f:fe:a5:c5:56:07:7d:4b:5f:
                    60:64:9e:80:fe:63:53:53:f8:8e:e4:5d:0b:59:38:
                    62:3f:7e:12:68:5c:9c:ef:64:fc:b3:ce:4e:ba:69:
                    e2:cb:c9:87:b7:ae:5a:cf:23:e7:86:6a:68:a8:73:
                    5f:5a:b1:79:89:a0:41:00:39:25:e0:5b:88:3f:47:
                    e6:4e:3f:c3:f9:b5:f4:20:ee:ec:c0:26:0b:89:bb:
                    c8:e1:2a:51:c0:56:f3:08:6a:92:6e:10:29:7b:8e:
                    2f:e7:aa:7a:9b:e4:f9:0f:68:7e:f4:ae:78:e8:e8:
                    02:8c:fd:f8:dc:04:d8:c0:b1:2c:e2:7d:62:2a:dd:
                    58:45:ac:d9:c3:e1:f7:7c:4b:16:38:60:2e:f7:92:
                    3f:0a:d2:06:4b:07:37:2c:cc:d6:cb:29:2a:34:6b:
                    c1:05:eb:f1:56:4d:4c:97:98:32:7c:28:35:f1:d5:
                    3c:76:23:53:d7:a5:4c:73:43:23:af:fb:9c:85:14:
                    8b:54:fd:b8:da:f4:d0:8a:f5:e5:45:15:04:b7:71:
                    74:bc:bb:c3:3c:c6:b5:ea:c2:4f:28:90:94:f5:cd:
                    08:54:05:a8:9c:43:7a:5f:1b:a2:e4:ec:d2:08:c0:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:38:F8:E1:B8:E3:28:66:CC:F8:C5:CD:AD:B8:77:35:A6:E6:F4
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wTg4-OG44yhmzPjFza24dzWm5vQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:cb:98:53:36:f1:da:c1:bf:44:4d:b5:ae:28:3c:0b:39:
         bd:4f:47:75:e2:09:e1:7c:17:e2:51:9a:a0:6a:eb:68:4d:0e:
         47:79:78:a3:92:2f:62:29:02:ba:20:b7:ac:14:84:76:aa:50:
         90:9a:95:fd:cc:00:9f:7a:6a:9e:e8:b4:8d:75:8b:4b:c4:68:
         1e:9f:bc:58:02:54:f3:62:c2:22:f7:4c:bf:5e:d0:9a:9e:7e:
         65:ec:6a:5b:26:2e:03:9c:31:15:20:dd:67:cd:47:03:7f:15:
         89:9c:54:2c:05:23:45:72:20:09:39:0f:78:54:b0:06:a9:52:
         75:0c:53:8d:f4:86:00:b7:4f:49:27:2f:ef:5e:ea:39:c8:cd:
         87:8c:9e:9a:95:05:a9:c2:4c:e1:88:1e:3b:96:be:c6:fc:28:
         2c:b1:9c:e5:9e:36:7d:12:89:4c:2d:a8:82:50:27:0b:ff:ec:
         8a:6e:68:28:a9:1a:e6:86:6e:17:b3:90:ea:6c:2a:68:f0:98:
         ac:33:b7:95:c1:54:ad:2f:e1:c4:33:52:7c:3a:75:3f:06:eb:
         77:d8:40:57:5f:80:95:3f:60:69:eb:91:5c:b4:ea:e5:64:65:
         eb:a1:f9:fe:f8:bb:e8:35:32:f8:a8:ae:07:3c:54:56:7f:6e:
         a2:27:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org