Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/rUAYAXn3l2IV3Jt-heGcLpWfXcw.roa
File:                     rUAYAXn3l2IV3Jt-heGcLpWfXcw.roa (raw, json)
Hash identifier:          HZX4L6rgthrvC/H64sFZqGbo7BiSEb1jw5degD5P4RQ=
Subject key identifier:   AD:40:18:01:79:F7:97:62:15:DC:9B:7E:85:E1:9C:2E:95:9F:5D:CC
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       10
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rUAYAXn3l2IV3Jt-heGcLpWfXcw.roa
Signing time:             Fri 25 Feb 2022 07:17:40 +0000
ROA not before:           Fri 25 Feb 2022 07:17:40 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     17676
IP address blocks:        210.143.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb 25 07:17:40 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=AD40180179F7976215DC9B7E85E19C2E959F5DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:f5:b9:ec:ea:40:cd:28:7a:61:b3:15:11:
                    51:45:f5:72:a2:cc:5b:a0:5c:f4:f7:b6:aa:57:03:
                    a4:c9:4e:ee:f7:ea:44:c7:e2:64:7b:dd:dd:47:03:
                    d2:89:34:69:e6:af:f8:9d:54:cc:e5:ff:6f:d8:4f:
                    28:96:20:02:93:e3:57:13:68:78:c0:47:db:22:9d:
                    6b:8c:27:a8:41:5a:32:0a:b0:9a:ab:05:0c:9c:6b:
                    31:f8:99:e4:c9:5b:88:13:1e:60:92:ae:52:da:93:
                    d7:4d:66:1c:96:82:f6:86:12:b9:7a:66:29:89:ed:
                    30:b4:01:f7:79:31:7d:db:f4:8d:87:80:92:0c:7c:
                    9b:10:16:06:c7:ba:87:05:c3:01:03:8d:e7:db:d4:
                    bb:47:67:11:6e:65:ad:a9:fa:24:0d:b7:1e:ab:a7:
                    ee:d7:31:19:19:9f:58:d6:d6:89:25:de:41:0c:9e:
                    93:db:79:cb:21:a5:44:7f:a8:4e:00:3b:a5:30:f4:
                    ce:f7:39:e1:da:7c:38:a7:52:0b:61:40:2a:c5:d9:
                    91:5c:e2:30:af:12:46:9f:d8:d2:c0:0e:06:01:04:
                    65:da:dc:ce:7b:31:a5:0f:3a:ec:cd:4f:98:91:d6:
                    db:1b:98:16:1a:d9:b9:65:70:6f:f1:dd:ad:72:1e:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:40:18:01:79:F7:97:62:15:DC:9B:7E:85:E1:9C:2E:95:9F:5D:CC
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rUAYAXn3l2IV3Jt-heGcLpWfXcw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:04:67:05:85:24:22:75:72:77:63:4c:b0:87:6d:4c:bc:7a:
         fc:21:b8:31:19:a9:c8:13:69:2e:03:6b:1c:b5:d3:fe:cc:59:
         53:5b:ee:ba:f4:90:bc:43:70:76:a9:a6:3e:0d:93:c5:a9:5f:
         d2:01:93:d1:7a:f5:1d:50:19:fc:03:17:94:ff:f4:24:11:ed:
         ec:ea:9f:cb:6d:ef:e1:06:f2:b5:a6:f9:19:33:a2:fd:ca:89:
         d3:b9:db:20:c2:f4:43:de:56:fb:da:ef:30:fc:c6:e1:4d:3b:
         f6:a0:07:ed:f2:a7:18:da:bc:82:cb:6a:e4:76:bc:ff:51:06:
         f6:37:58:94:01:c4:de:a1:4a:90:8f:3e:a5:3d:78:38:63:0e:
         10:d9:ac:c1:6c:73:c3:f1:95:65:14:de:56:94:fa:df:13:d4:
         5a:85:3d:9a:fa:d3:59:3a:3a:47:2c:ae:b0:64:88:ac:db:cc:
         a6:a1:3f:e1:c4:02:d8:8b:9a:fd:10:e9:23:30:ac:26:71:56:
         fb:30:43:7e:60:fc:36:14:e7:60:8f:a5:71:4e:51:98:ed:97:
         21:b4:51:0c:09:54:e5:6f:07:20:8f:c7:80:f3:5e:5a:9b:8f:
         ca:b2:80:1e:fa:f5:ec:de:07:46:32:24:bf:43:78:5c:24:6b:
         a9:9a:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org