Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/qbyPZ-Z5mS4NArvE0VrOQJDupIk.roa
File:                     qbyPZ-Z5mS4NArvE0VrOQJDupIk.roa (raw, json)
Hash identifier:          0JUjDtljXuhBGyDLZd4D90iuxptBtXOmmuyfl3Me/iU=
Subject key identifier:   A9:BC:8F:67:E6:79:99:2E:0D:02:BB:C4:D1:5A:CE:40:90:EE:A4:89
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       BA
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/qbyPZ-Z5mS4NArvE0VrOQJDupIk.roa
Signing time:             Sat 01 Oct 2022 01:29:21 +0000
ROA not before:           Sat 01 Oct 2022 01:29:21 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        218.42.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:21 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=A9BC8F67E679992E0D02BBC4D15ACE4090EEA489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:7d:6b:a5:c9:3f:01:92:64:92:71:79:c6:
                    de:48:8f:2f:ed:35:ee:2f:60:c6:7e:7f:88:46:6a:
                    ff:01:39:5f:80:73:f9:58:24:42:df:30:ee:6b:33:
                    12:d1:47:b5:f0:87:37:42:ce:94:ca:cd:75:48:ab:
                    64:45:89:1b:85:57:8b:30:43:2f:0f:1f:b7:47:27:
                    ac:c5:d0:32:19:04:e9:dc:77:e8:a0:f7:b6:36:c3:
                    59:89:c4:32:fc:f3:8a:46:19:93:cb:ba:89:a7:ac:
                    26:49:be:53:33:2f:c1:d2:18:2f:0c:8e:56:3b:fb:
                    33:74:47:4d:c0:33:57:f9:d8:7b:1e:25:10:8e:95:
                    75:53:46:79:eb:6c:b1:ce:30:b6:bb:0d:60:98:91:
                    69:c4:f6:5c:43:e1:76:50:bb:04:92:7a:4f:be:49:
                    64:0e:54:96:f7:e0:b0:be:14:24:62:59:bc:3c:6a:
                    83:f1:b8:f8:44:9b:f1:11:45:8e:a4:de:f9:bf:f3:
                    07:0e:b6:2f:0c:c2:5b:c5:9d:41:21:e4:9f:ea:16:
                    77:a9:fb:14:4c:e0:56:ff:a2:68:7e:a3:53:9b:21:
                    82:89:6d:51:22:76:43:b9:05:4c:b0:9d:a0:ea:5e:
                    2c:7c:68:76:76:8f:97:e0:d0:bf:69:67:1c:5b:6a:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BC:8F:67:E6:79:99:2E:0D:02:BB:C4:D1:5A:CE:40:90:EE:A4:89
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/qbyPZ-Z5mS4NArvE0VrOQJDupIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.42.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:e7:60:43:f9:7d:0b:2a:4a:f6:65:0f:02:4c:9a:0e:09:e8:
         3a:77:fa:74:1b:57:a4:07:fe:b4:e3:b4:f4:3d:a0:67:81:de:
         f7:1c:ae:65:76:15:b2:7c:9e:85:4c:f9:59:8b:78:b0:68:8c:
         db:b7:92:c1:d7:b3:7e:8a:21:27:c9:b2:c5:21:79:90:dd:f0:
         39:fb:b7:a9:8e:00:ae:75:17:17:d2:81:be:64:55:f1:4b:09:
         6c:92:13:3b:7b:a9:53:7a:18:77:b4:9d:2e:aa:47:85:f5:f9:
         dd:e2:21:82:60:2a:a6:bc:41:91:f6:9f:3a:e4:11:e9:b0:45:
         a2:7d:39:5e:b9:2d:a2:08:09:de:3c:93:ea:7a:bb:f9:36:9d:
         a4:f8:43:65:1c:14:12:ec:ac:97:f0:f0:ad:60:d7:2e:61:a1:
         2d:ce:45:b5:ef:35:87:a8:ae:68:1c:48:fc:d4:f0:75:48:86:
         f7:99:f8:90:5f:da:e2:65:f4:6b:c5:e7:cb:87:ec:67:2d:d1:
         30:3d:35:96:c3:9c:97:75:bd:82:4f:4b:e3:f4:c5:9f:1e:7e:
         17:36:d0:12:66:73:4e:cd:bb:1f:e7:7d:27:e0:64:65:5f:17:
         14:30:e9:2b:cb:c7:93:7f:4e:9f:19:5f:e2:7b:0e:d9:23:42:
         0a:39:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org