Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/DV0hjrHN7aOLNhbaXnca6jboEt8.roa
File:                     DV0hjrHN7aOLNhbaXnca6jboEt8.roa (raw, json)
Hash identifier:          ksIaGjUV5aOm05/3yJdCmYZgy+z+G96atasht0yykP0=
Subject key identifier:   0D:5D:21:8E:B1:CD:ED:A3:8B:36:16:DA:5E:77:1A:EA:36:E8:12:DF
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       41
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/DV0hjrHN7aOLNhbaXnca6jboEt8.roa
Signing time:             Thu 30 Mar 2023 04:18:37 +0000
ROA not before:           Thu 30 Mar 2023 04:18:37 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     32787
IP address blocks:        61.211.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 30 04:18:37 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0D5D218EB1CDEDA38B3616DA5E771AEA36E812DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:2d:76:7a:50:e3:d2:14:85:6c:8b:b7:34:
                    1a:09:65:51:38:0b:8b:7c:9f:49:d8:3b:3f:c0:7d:
                    67:c1:c5:5d:0a:70:c5:ea:28:03:87:58:0d:b9:b2:
                    92:59:b7:e0:bf:8b:62:1a:4b:05:22:84:f7:b7:01:
                    5f:96:fa:82:e3:01:3f:40:48:2e:e6:e6:ef:ec:0f:
                    76:5a:c9:08:43:4d:c3:f7:fd:f7:7d:df:5a:ae:6f:
                    4d:ca:ac:2b:50:ca:9b:e5:8e:6f:d7:2a:10:49:60:
                    09:f0:53:2d:40:89:70:9d:95:c5:12:58:a5:6c:18:
                    c4:ae:13:44:81:84:60:2e:0a:c7:28:83:95:97:9f:
                    c5:8a:c3:fc:2e:7d:88:93:69:7d:ec:49:4a:25:a0:
                    b7:d3:b6:e2:ff:2f:0b:d7:57:12:6e:77:68:3d:80:
                    70:59:59:93:e1:b7:7c:00:76:a5:82:ba:8c:10:55:
                    4a:89:b3:73:bb:44:4c:fe:52:5d:e4:c9:27:89:88:
                    c4:60:15:60:2c:27:ff:c6:88:8c:00:cd:2d:84:39:
                    4f:8a:4c:8f:2c:16:34:68:f4:3d:f8:96:f9:e8:93:
                    01:50:3f:a8:f2:b1:ba:7d:d7:a1:14:f2:61:e0:a9:
                    da:9f:53:53:4c:c7:f2:b8:26:31:c0:d3:a3:87:55:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:21:8E:B1:CD:ED:A3:8B:36:16:DA:5E:77:1A:EA:36:E8:12:DF
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/DV0hjrHN7aOLNhbaXnca6jboEt8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:58:f6:33:c5:a4:ae:3f:25:b5:2a:a2:c6:2d:8b:a6:76:82:
         c0:d1:30:36:9c:68:5e:da:ea:cb:01:a0:1b:32:67:8d:16:24:
         ba:14:95:65:6d:c4:38:b2:6b:b4:b3:27:26:90:eb:72:00:48:
         10:46:56:d3:24:7d:0c:20:cb:53:dd:4c:09:c2:78:f5:c2:18:
         8c:07:d9:95:e9:8f:36:48:ce:12:7b:6a:d4:c7:96:cd:06:2a:
         c3:df:01:7b:fa:45:01:99:48:01:e5:37:7e:35:7e:11:18:a5:
         ff:e8:c6:e3:2a:73:0e:6c:56:d9:c6:95:a7:a3:be:d4:8c:17:
         12:12:44:45:84:c4:85:a2:70:f0:39:f3:6a:6e:ca:3c:7e:d4:
         4a:53:79:a7:ea:7c:b1:d4:ac:31:73:ec:76:74:de:16:b8:61:
         e4:45:56:74:0c:2d:c1:c1:6d:8b:50:c7:cf:92:fd:cb:d7:73:
         6d:30:9a:8f:d1:e6:47:e0:c7:fc:41:0a:9f:4a:8a:86:e4:9e:
         ca:be:9e:a2:1d:9f:b9:35:b2:75:cc:4e:e4:d9:e5:fe:5d:6e:
         8d:ed:62:4d:8f:d5:44:90:2a:be:62:fc:87:95:0e:5e:d1:6d:
         c7:b7:fc:27:fd:d3:46:5d:d0:c4:a4:10:ce:94:c2:7e:e6:a8:
         1c:5d:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org