Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/JFHJrsFzuLn3Q73qcPYfWhDQupw.roa
File:                     JFHJrsFzuLn3Q73qcPYfWhDQupw.roa (raw, json)
Hash identifier:          EYLqLMW72dlvbFXHzFGQ+eOwYfzPYsNH68znr3YvfNQ=
Subject key identifier:   24:51:C9:AE:C1:73:B8:B9:F7:43:BD:EA:70:F6:1F:5A:10:D0:BA:9C
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       24
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/JFHJrsFzuLn3Q73qcPYfWhDQupw.roa
Signing time:             Wed 01 Feb 2023 01:30:23 +0000
ROA not before:           Wed 01 Feb 2023 01:30:23 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.215.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:23 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2451C9AEC173B8B9F743BDEA70F61F5A10D0BA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:a0:0d:12:d4:fe:f3:03:0c:62:88:31:f3:
                    ae:11:58:58:56:04:ca:57:9e:dd:89:e7:29:dc:59:
                    f6:b5:08:03:66:d7:89:ab:78:40:35:e2:a0:01:e6:
                    db:be:2e:bd:73:2d:63:93:f3:6e:f8:26:43:e6:25:
                    23:76:b4:22:1b:93:4d:7d:d0:81:b6:31:8d:39:b4:
                    ba:cf:7f:4c:f0:87:6a:04:1c:aa:88:0e:c5:c7:94:
                    2d:1a:eb:59:87:bb:5c:29:00:d4:a1:19:25:a1:a6:
                    8e:6d:0a:8d:84:f9:4e:fe:c1:a2:dd:e1:27:9d:d0:
                    56:31:79:66:da:11:1a:3b:79:74:14:44:d8:0f:92:
                    43:43:9c:e1:ed:c7:a5:07:f1:f3:98:c3:a0:ed:a8:
                    ef:17:f0:9c:ed:38:16:9e:2f:9a:d8:7a:26:b4:f9:
                    67:6f:09:b2:bd:d6:6b:42:35:de:06:ad:63:7a:2a:
                    cc:7b:e6:c2:e4:f5:a1:9d:a2:df:70:1c:37:a5:ff:
                    b0:24:bf:eb:1f:09:19:25:7c:ff:aa:8c:21:3e:f9:
                    78:b9:eb:97:f2:00:ed:f0:a3:06:d1:62:57:00:3e:
                    79:43:aa:bd:e7:34:ab:19:1e:b5:84:7b:50:8c:38:
                    5a:62:1d:cb:8f:fc:73:05:78:af:89:ce:40:6d:01:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:51:C9:AE:C1:73:B8:B9:F7:43:BD:EA:70:F6:1F:5A:10:D0:BA:9C
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/JFHJrsFzuLn3Q73qcPYfWhDQupw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:43:fe:3b:77:bd:a2:e2:40:e5:ee:a4:c6:a4:bf:5a:9e:
         d6:3e:36:c2:ff:66:ff:f8:7e:b1:17:4f:e1:19:9f:85:57:83:
         68:93:8b:52:04:2c:e8:cd:36:09:c8:c6:90:1d:25:cb:0c:d9:
         9e:bb:c5:7d:44:e6:09:cd:a0:94:c1:7e:5f:99:a1:e3:96:1f:
         46:62:46:60:bd:d3:bc:dd:30:e5:74:53:c4:59:5f:21:14:2e:
         b1:eb:85:ac:25:c1:21:4e:c3:20:9a:1f:80:ec:99:fc:9f:49:
         40:09:1c:2e:e8:d5:99:25:01:7a:d2:0e:9f:33:99:6f:4f:01:
         05:90:61:4c:de:81:53:a5:11:50:98:2b:9b:56:d1:63:b0:97:
         49:1c:b6:1a:57:43:4f:10:69:ce:5c:9d:40:4f:da:06:07:e3:
         ae:41:0c:fb:b3:b3:73:55:25:71:31:35:e3:e3:2e:73:f9:c1:
         3f:74:08:f0:62:5c:ff:27:80:62:2c:2e:12:34:37:22:27:4b:
         1a:95:90:24:5e:42:99:53:0a:81:18:ce:be:50:1a:fd:51:1c:
         a3:2a:53:3d:1f:0d:96:8f:30:16:8d:f0:2f:f9:c6:e6:c0:c5:
         f8:5d:fa:0a:bc:b5:8b:f3:33:71:9e:24:5d:7b:90:1a:b5:65:
         c2:11:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org