Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/NJGD78787BauQz5IF9yUI5BY_t4.roa
File:                     NJGD78787BauQz5IF9yUI5BY_t4.roa (raw, json)
Hash identifier:          38PN1aZTguJTQujQePXKn6htplSc5jSatZ3ekrsIip0=
Subject key identifier:   34:91:83:EF:CE:FC:EC:16:AE:43:3E:48:17:DC:94:23:90:58:FE:DE
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       3C
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/NJGD78787BauQz5IF9yUI5BY_t4.roa
Signing time:             Sun 01 May 2022 01:30:05 +0000
ROA not before:           Sun 01 May 2022 01:30:05 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59105
IP address blocks:        202.226.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: May  1 01:30:05 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=349183EFCEFCEC16AE433E4817DC94239058FEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:6c:16:d5:c9:d1:99:64:71:d4:fc:43:7d:
                    c3:c7:6b:ba:fb:c9:c7:9c:a3:22:9d:a8:27:29:af:
                    63:67:37:f8:c9:27:5c:3c:1b:b3:07:6b:0a:3d:e8:
                    4f:af:2c:ec:a5:12:69:0d:62:09:2d:c6:91:7c:2d:
                    b2:36:2a:30:fa:19:5c:1e:f2:16:3f:4f:25:98:d8:
                    5e:6d:bf:a7:cf:76:92:62:28:10:d1:4c:48:73:5a:
                    8c:48:24:d3:52:2e:e9:d8:b9:dd:0e:1d:c6:c0:f8:
                    67:d5:25:02:3f:e6:96:b4:10:21:02:60:be:08:a7:
                    2b:8a:46:3a:36:42:66:57:74:c4:ac:0a:3a:3d:a0:
                    75:c7:d6:7e:ce:94:a9:1a:d7:74:1e:63:53:47:da:
                    9d:56:69:6d:de:d0:8e:dc:2a:00:77:94:fb:9c:ac:
                    c4:1d:e6:15:d1:60:bf:fd:e3:70:86:8d:92:8f:75:
                    1d:7b:9d:bf:85:2e:7f:f0:23:c5:e9:9e:9b:22:11:
                    07:6b:b8:40:0b:3c:56:e0:45:8a:7d:13:4a:2e:93:
                    a7:0c:cd:37:cd:aa:3e:ac:cb:69:36:6c:23:3b:c6:
                    e6:90:2b:7d:4f:d3:9b:a9:60:bc:59:03:ad:8a:d1:
                    1b:46:06:66:60:e9:42:20:6e:4c:f7:a1:32:10:9a:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:91:83:EF:CE:FC:EC:16:AE:43:3E:48:17:DC:94:23:90:58:FE:DE
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/NJGD78787BauQz5IF9yUI5BY_t4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:9f:f0:cb:51:38:e7:77:01:4e:c2:25:26:6e:f5:27:af:27:
         6d:49:83:5d:fc:c4:2f:1e:c2:b5:9a:6f:66:7e:2c:b8:80:63:
         83:d7:c4:30:ec:fe:53:2f:45:83:6b:fa:3c:89:db:b0:f1:36:
         58:9a:00:af:54:b4:3e:11:c5:bb:28:fc:24:3c:da:14:f3:a8:
         d7:1c:82:81:51:f2:cf:e8:07:51:46:f5:10:5c:0c:bf:bc:cf:
         d5:53:0c:f2:1c:f1:2a:af:e8:33:01:3b:ce:3e:3e:b1:b2:23:
         59:aa:11:15:93:63:e2:a7:31:7a:58:a5:e4:3d:70:6b:e7:57:
         cc:0e:99:0b:18:bf:69:59:1a:cb:23:b8:24:1a:f5:5f:b0:e3:
         6c:ba:e6:62:32:56:4b:a4:f5:3e:9b:56:ad:c3:df:75:e8:10:
         92:bd:f0:ca:14:d9:63:7b:b0:a9:3c:9e:bf:2f:f7:06:dc:41:
         f3:6e:d5:22:a4:56:45:e0:e3:92:23:35:9a:4e:ee:40:44:72:
         d9:37:37:80:93:47:ad:5c:ce:09:45:b6:55:6d:01:0b:a8:bf:
         95:ae:a2:f7:03:bf:d3:3f:b1:c5:51:b0:2e:ad:2d:7b:bd:33:
         4a:96:84:e6:28:be:cc:26:f1:ad:79:81:90:b0:aa:3b:1b:f3:
         82:be:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org