Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/39GyTwTGzu2xwlqpNpjoId8GJPk.roa
File:                     39GyTwTGzu2xwlqpNpjoId8GJPk.roa (raw, json)
Hash identifier:          DtXnWjuvGMXYmhaV2vaE4rtlNfbELGAiznCvJ4AMWwQ=
Subject key identifier:   DF:D1:B2:4F:04:C6:CE:ED:B1:C2:5A:A9:36:98:E8:21:DF:06:24:F9
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       06
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/39GyTwTGzu2xwlqpNpjoId8GJPk.roa
Signing time:             Thu 13 Oct 2022 06:48:04 +0000
ROA not before:           Thu 13 Oct 2022 06:48:04 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        111.91.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:48:04 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=DFD1B24F04C6CEEDB1C25AA93698E821DF0624F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:16:5a:e8:68:5c:a1:ec:74:be:73:ed:51:
                    b0:96:0d:ac:85:d3:4c:0f:5f:3f:77:65:70:ad:b9:
                    02:7b:bc:9a:33:fd:2e:63:71:2d:81:28:6f:63:e8:
                    0e:93:bc:a6:59:a3:63:fd:66:23:6f:74:01:ee:08:
                    c6:41:12:a5:5d:0e:2d:44:15:bf:ff:9d:f5:29:2e:
                    3e:e0:fd:2e:82:ed:5f:95:cc:f7:45:bf:33:66:c7:
                    ba:ab:8f:96:2e:7b:3f:48:ad:8c:e4:63:cc:cb:bb:
                    30:47:11:2e:53:30:e4:59:22:9a:9b:4f:13:71:64:
                    fb:dc:23:a8:48:56:b8:27:4f:51:df:7d:17:e8:c9:
                    95:56:fd:90:b2:eb:88:80:19:bd:35:27:2a:a5:2f:
                    c0:83:6d:7e:b5:a9:a4:60:f1:ae:22:a6:f1:5f:e0:
                    a3:76:16:ed:0f:00:23:e3:b2:96:b5:26:f1:08:ad:
                    2d:f3:f3:7a:dd:e6:1e:6b:4c:e4:1a:ac:e8:4e:b7:
                    53:47:7d:5e:22:4a:97:aa:16:44:14:7a:92:d5:cb:
                    d7:c2:93:89:48:75:ff:b4:86:15:8f:e2:35:91:32:
                    f4:92:17:0b:9d:db:4a:85:d1:e5:93:4a:ae:5e:1b:
                    75:67:c0:53:03:c2:85:59:d5:d1:ba:a5:cb:92:6e:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:B2:4F:04:C6:CE:ED:B1:C2:5A:A9:36:98:E8:21:DF:06:24:F9
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/39GyTwTGzu2xwlqpNpjoId8GJPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.91.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:7d:4a:be:73:b4:43:63:30:70:08:e4:a5:2b:e3:50:71:fa:
         94:e7:bd:0d:22:60:48:a9:b9:86:31:e1:f0:9c:9c:7b:0b:51:
         0f:95:26:97:03:56:13:c6:c9:b2:3d:c5:4a:1f:85:3b:7e:37:
         72:a6:f9:fb:bb:20:6a:38:f5:1c:7b:25:01:25:39:1f:21:f6:
         a3:e3:96:89:0a:64:1d:ce:71:28:e3:d1:21:d5:e5:d1:27:d1:
         e9:27:71:83:9e:e1:a5:82:22:68:a8:20:4d:7e:da:7c:98:d0:
         e0:91:05:ed:6e:1a:ee:ae:d2:48:76:d2:d1:ee:8a:9d:8c:33:
         53:de:27:e7:6a:bf:c2:78:30:9a:ff:3c:77:1e:95:41:4e:e0:
         cf:c0:a0:43:d2:9a:d4:1e:5c:99:eb:22:8b:69:93:31:68:30:
         45:80:f8:d6:ab:a4:11:60:29:57:4b:57:55:b9:5d:cb:dd:2a:
         13:d0:ab:01:a3:b4:14:03:19:d0:e8:a0:3a:78:10:91:27:fd:
         94:6e:25:e8:88:b2:bb:a8:1a:62:3d:03:f4:a5:54:92:49:97:
         c4:6b:63:ff:66:c1:de:38:a6:2e:fc:18:cf:0f:2d:df:2f:b2:
         15:97:e7:78:fb:81:32:43:99:ae:56:1a:81:83:d1:4b:40:52:
         44:89:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org