Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7zSncSa8ZmANNjtdFhJD-mpCZGY.roa
File:                     7zSncSa8ZmANNjtdFhJD-mpCZGY.roa (raw, json)
Hash identifier:          E5veChjdffm0BXNNUComEMbT+66KnxZ31G6dYWlUgy8=
Subject key identifier:   EF:34:A7:71:26:BC:66:60:0D:36:3B:5D:16:12:43:FA:6A:42:64:66
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       8E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7zSncSa8ZmANNjtdFhJD-mpCZGY.roa
Signing time:             Tue 22 Feb 2022 07:28:57 +0000
ROA not before:           Tue 22 Feb 2022 07:28:57 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        220.156.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Feb 22 07:28:57 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=EF34A77126BC66600D363B5D161243FA6A426466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:c1:95:08:48:3e:43:a6:e9:0c:2c:c9:46:
                    17:84:e3:7c:2f:9f:bd:46:9e:11:f6:0b:37:12:fe:
                    c7:fa:a7:22:d2:c0:15:9a:2d:d2:d5:07:28:06:41:
                    d3:14:99:9f:97:81:9d:72:9a:60:ca:a4:52:2a:cc:
                    3a:5f:b8:69:9c:34:14:b1:92:42:4b:61:85:b3:48:
                    8c:1f:83:04:40:a2:44:9b:4d:d4:85:22:62:27:64:
                    c5:d0:5e:47:07:a4:be:57:a2:72:72:2e:57:15:09:
                    1b:45:d7:9b:41:36:16:15:0c:55:2b:36:18:6d:62:
                    fc:ac:5f:96:88:98:2c:b5:c1:76:ee:8b:7f:02:3c:
                    c5:a8:c0:5d:00:dc:0e:f0:dc:7d:99:d6:4e:29:da:
                    14:0f:fe:1e:5f:52:59:7e:3b:7f:5c:e2:19:86:ef:
                    64:7f:e0:7f:d3:96:fb:68:db:d8:6f:20:eb:99:d4:
                    b0:24:85:01:90:86:a8:20:50:b6:d9:bc:b7:14:60:
                    28:e8:dc:66:26:2b:3c:77:84:a3:be:bc:fb:8e:7d:
                    66:0d:0b:d5:5a:cc:78:6a:18:b3:5a:07:69:bc:0a:
                    6c:ef:6b:09:e3:62:37:a0:dd:2e:4a:21:18:de:96:
                    30:2a:fe:b5:85:fc:ab:17:12:50:e2:ff:27:16:63:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:A7:71:26:BC:66:60:0D:36:3B:5D:16:12:43:FA:6A:42:64:66
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7zSncSa8ZmANNjtdFhJD-mpCZGY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:42:46:a8:90:3f:64:30:32:4d:d0:22:3c:d0:c0:fa:e7:
         1b:08:ab:2c:10:a0:14:4a:72:e5:44:09:9e:0e:49:9f:09:04:
         f7:81:ef:2f:de:a6:41:9b:8b:cb:bf:0b:38:bd:c2:29:64:82:
         46:9c:0c:fc:fd:70:8e:35:18:57:40:a5:a5:10:ef:1f:a6:63:
         30:8e:1e:8b:7f:0d:c9:61:90:8d:b5:f5:70:4a:0f:47:9c:93:
         20:f6:86:b7:56:ee:4b:49:6b:15:0b:da:ef:58:f6:95:54:ac:
         b3:d8:78:01:6c:33:c1:83:ad:01:5d:29:bb:f7:41:4e:0e:fc:
         e7:eb:a8:9b:14:4d:e9:e4:a4:26:cb:02:b1:2e:01:30:9f:65:
         43:44:b3:62:4f:21:57:9d:73:4e:5f:d6:10:eb:30:cb:77:02:
         5a:78:26:0a:e9:fb:6a:f3:42:24:cc:95:ad:86:e1:55:64:f5:
         5f:fb:81:c0:68:8c:54:30:d0:6f:cf:b9:59:79:8b:1b:c7:8d:
         c0:50:b6:8a:2d:b7:0b:91:82:48:d8:6c:35:2d:a6:e1:06:0c:
         3a:22:04:d5:5d:89:45:ca:21:95:8b:a4:76:67:62:b8:16:5f:
         6b:b0:8a:b3:2e:19:31:7c:eb:c0:08:77:49:8e:84:8c:75:9d:
         ab:e8:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org