Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Y1_2SZAfvez6w4UxOQSDG9KBojE.roa
File:                     Y1_2SZAfvez6w4UxOQSDG9KBojE.roa (raw, json)
Hash identifier:          cazsNmH3rEz/fF0yKVokKpVQ6f3YLEwaJbZ18etHJk4=
Subject key identifier:   63:5F:F6:49:90:1F:BD:EC:FA:C3:85:31:39:04:83:1B:D2:81:A2:31
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       11
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Y1_2SZAfvez6w4UxOQSDG9KBojE.roa
Signing time:             Thu 13 Oct 2022 06:54:09 +0000
ROA not before:           Thu 13 Oct 2022 06:54:09 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        219.100.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:54:09 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=635FF649901FBDECFAC385313904831BD281A231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:da:fa:a1:cd:f5:5c:59:c3:13:c7:2a:24:
                    65:6c:c4:4e:20:9d:0f:f2:00:3f:70:bb:c3:44:68:
                    93:9d:53:f7:69:a6:e3:da:f9:aa:30:b8:38:df:1f:
                    16:8a:19:79:a7:46:39:86:08:5a:4d:9c:23:fd:85:
                    e4:3a:0b:9b:e3:88:ee:e9:cd:d3:cf:00:2a:75:cc:
                    8c:5f:4a:b7:a0:05:fa:e1:3f:3f:ea:4e:b7:09:c4:
                    96:53:01:03:cc:43:47:bc:1a:68:29:d8:57:9b:e2:
                    69:ad:f1:51:92:b0:0b:8f:da:ff:18:f0:7b:2b:dd:
                    8b:ab:95:d5:73:af:02:23:49:77:2d:c0:ae:99:91:
                    e7:29:f9:30:67:5f:46:1f:0d:2c:e1:45:83:b7:87:
                    33:ac:f3:66:6d:7f:ad:b6:54:81:72:69:59:3d:32:
                    df:0a:1a:86:45:2f:16:6a:d3:24:16:56:e5:78:c9:
                    e7:3a:54:b3:6b:7d:a7:a2:03:45:9a:e1:b9:55:e6:
                    07:a6:df:37:d3:dd:cb:40:be:34:6f:36:7e:c4:ca:
                    d9:68:55:2a:96:43:50:7f:78:bc:e0:90:df:ea:23:
                    e4:54:ba:06:2d:8b:38:e9:9b:d5:b6:99:ef:0b:db:
                    b3:4e:14:59:e1:00:1d:84:b1:a8:22:95:82:4d:c1:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:F6:49:90:1F:BD:EC:FA:C3:85:31:39:04:83:1B:D2:81:A2:31
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Y1_2SZAfvez6w4UxOQSDG9KBojE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:43:6e:4b:59:d1:e4:72:bd:8e:85:7f:67:e7:00:31:82:9b:
         17:57:8c:82:eb:3d:81:b3:98:d5:2e:6d:05:10:f7:6e:d0:54:
         05:1f:24:93:e5:87:84:5d:36:8c:a7:3d:fb:41:8e:42:39:dc:
         c9:f3:49:51:f4:56:6c:fd:cb:ae:32:85:82:bb:b7:a6:f9:dd:
         9b:89:90:9a:39:fa:e6:71:70:5e:e1:24:a6:5e:35:83:39:85:
         44:7a:52:9a:19:3e:d8:ba:55:5e:6e:14:d0:1f:f1:95:32:1f:
         c2:ef:fd:31:90:64:98:7d:7d:9e:1f:48:54:c6:a6:3c:85:36:
         25:23:37:96:d6:e9:03:5c:a5:08:0b:0d:65:5b:20:17:41:17:
         24:17:10:db:4f:8b:04:97:a7:21:9b:a0:86:6a:f0:dc:49:2e:
         0c:ff:e7:a4:4c:cf:11:4e:2e:b2:74:27:6a:b9:a3:2c:f5:9d:
         79:87:c7:35:27:ab:e4:b2:10:e2:18:b0:0b:f5:38:7a:d6:a2:
         d7:86:bb:15:7e:b5:ef:ed:51:4d:c8:82:27:1a:c9:23:aa:77:
         12:de:61:46:71:0e:4b:4e:b5:a7:4d:e0:df:7f:83:28:4e:7c:
         25:af:43:a6:50:78:d7:6a:0c:5e:54:38:11:6f:bd:bf:5f:eb:
         a3:db:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org