Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/Pn64FJ0v_GLbZmS2--ZpOHanPTo.roa
File:                     Pn64FJ0v_GLbZmS2--ZpOHanPTo.roa (raw, json)
Hash identifier:          0JtSO1HCJESplr9d6Dc8VsMKDCUu/sJLCTw1RByWivw=
Subject key identifier:   3E:7E:B8:14:9D:2F:FC:62:DB:66:64:B6:FB:E6:69:38:76:A7:3D:3A
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       22
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Pn64FJ0v_GLbZmS2--ZpOHanPTo.roa
Signing time:             Tue 24 May 2022 04:54:24 +0000
ROA not before:           Tue 24 May 2022 04:54:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10019
IP address blocks:        202.91.144.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:54:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3E7EB8149D2FFC62DB6664B6FBE6693876A73D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:c1:14:06:54:de:7d:7b:89:0b:93:d9:85:
                    bf:f9:f2:a2:0a:e1:03:f6:c2:85:3f:85:74:5d:3c:
                    c1:82:67:f8:f9:cf:8c:2a:18:ac:45:ca:fe:76:ba:
                    f8:20:1c:67:2c:b4:a2:30:38:09:30:23:88:3e:ea:
                    55:da:7a:a7:e9:05:73:2c:a3:cb:62:0a:88:98:21:
                    be:44:8c:d9:98:fa:cf:82:f0:b0:aa:dd:92:c5:72:
                    9e:f2:16:06:c7:de:b6:77:ef:a4:4b:df:a2:1d:e0:
                    f4:ef:c6:89:57:67:bb:f7:06:22:68:4a:1d:5e:c0:
                    4e:a6:f0:40:9c:26:aa:af:e0:6f:5f:c1:8d:7c:e4:
                    86:a6:06:29:13:9d:67:73:20:5e:f0:7c:4b:03:23:
                    06:e9:c8:bb:54:88:0d:49:0f:27:18:ff:ab:e8:03:
                    af:b8:15:f6:a5:35:26:d4:d8:1e:c4:e1:8f:1f:0e:
                    bd:b6:7b:db:66:68:19:b1:57:9b:a0:68:66:c9:96:
                    21:06:cf:3e:20:ec:a5:f7:75:f3:fa:0f:33:d4:4b:
                    e7:ad:77:21:ab:5f:2b:4e:ea:51:f0:ae:7c:0d:56:
                    65:dd:0a:53:1d:a2:32:6e:7b:4c:18:b8:53:3d:05:
                    e1:91:9e:d7:4c:f1:0f:20:1e:09:ac:d4:67:26:b2:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7E:B8:14:9D:2F:FC:62:DB:66:64:B6:FB:E6:69:38:76:A7:3D:3A
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Pn64FJ0v_GLbZmS2--ZpOHanPTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:c9:97:57:3f:5d:23:28:eb:9b:1b:cd:be:c2:d4:c8:ba:86:
         1b:ac:86:10:c4:4e:d9:02:cc:0a:10:c9:2a:ad:83:3b:ea:10:
         61:58:8c:64:96:1a:8d:d0:6c:15:bb:db:5f:ef:8f:e0:63:43:
         5e:0c:5b:08:ed:1a:4a:9a:18:56:fd:64:e5:44:ba:24:1c:de:
         00:90:89:bf:b6:76:2a:f7:fe:e7:12:9f:83:4c:3d:86:8b:b2:
         b2:a3:da:df:a3:6e:11:92:c7:f5:e7:df:b0:3d:99:3e:c5:52:
         88:ee:07:d5:ad:ea:5f:99:73:fd:d9:12:74:b8:57:e2:37:f3:
         3f:72:6d:41:f4:7d:d1:30:60:ed:89:8a:1a:7d:58:75:2a:1b:
         a9:e5:c5:5a:32:0c:bb:74:84:44:2b:11:03:ce:9a:cb:48:d1:
         1f:cf:78:29:56:89:d1:42:a6:05:e1:b0:a5:dc:a5:e0:a4:94:
         dd:00:1d:5b:48:ae:3a:7c:dc:4e:cc:a8:e5:b0:0b:95:b0:1e:
         58:11:53:66:56:87:c9:0c:31:3a:8d:6b:f9:3f:93:83:da:7b:
         c0:00:e3:4a:94:c3:a5:76:c1:b0:3b:4d:64:2b:87:9a:d1:b0:
         3a:3d:9c:d2:e5:4b:b3:9f:c0:10:ec:dc:f4:01:3f:fb:c7:43:
         06:41:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org