Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/yQzHdRSx1jmGPszzSDaR7scSAM4.roa
File:                     yQzHdRSx1jmGPszzSDaR7scSAM4.roa (raw, json)
Hash identifier:          KD0yW0xoJmnevQkfMZwY1WkdNN8H1IVB6GEfbBAzJF4=
Subject key identifier:   C9:0C:C7:75:14:B1:D6:39:86:3E:CC:F3:48:36:91:EE:C7:12:00:CE
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       34
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/yQzHdRSx1jmGPszzSDaR7scSAM4.roa
Signing time:             Mon 01 Aug 2022 01:28:55 +0000
ROA not before:           Mon 01 Aug 2022 01:28:55 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     17675
IP address blocks:        219.113.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug  1 01:28:55 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=C90CC77514B1D639863ECCF3483691EEC71200CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:69:f2:b4:20:36:3d:28:76:91:b2:27:98:
                    e0:5e:5a:79:68:78:a7:bc:7b:de:0a:53:d1:4f:ae:
                    c6:0e:97:23:10:ac:8a:6e:84:f6:71:27:ff:d1:41:
                    b1:03:c1:c7:13:4f:af:e1:66:38:91:ee:00:5b:1c:
                    a9:f4:90:f3:7a:4c:b3:9a:3c:ae:60:eb:ed:7a:c4:
                    6e:49:e3:70:44:e2:ea:42:0b:a6:73:4a:f0:ca:91:
                    4c:27:08:c1:f9:2c:fe:a8:56:04:81:5e:33:3f:d3:
                    77:d0:6a:91:f8:57:d9:3b:25:1c:8d:a1:a6:db:a8:
                    bc:5c:73:8a:2d:f9:85:97:32:55:bd:08:1f:db:15:
                    ee:db:a0:6a:8c:0c:78:7b:3a:36:c1:d4:22:a5:44:
                    5b:75:64:82:12:62:d5:5b:93:b7:9f:99:18:67:a9:
                    9b:9f:60:34:b5:3f:b9:55:1d:2d:a7:e2:7d:07:66:
                    84:fe:69:0a:d6:3f:d7:49:f5:4a:bf:5f:0f:a5:02:
                    73:88:86:1e:9f:de:63:2e:9b:43:2f:d0:c8:17:6b:
                    7d:67:4a:d8:1b:3f:6e:2a:aa:d3:c2:c6:18:d6:e3:
                    ca:be:3b:5d:78:b4:52:0a:09:96:86:df:fc:07:6d:
                    59:f4:a5:40:7d:6c:1a:49:41:e5:ad:32:58:a2:28:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:C7:75:14:B1:D6:39:86:3E:CC:F3:48:36:91:EE:C7:12:00:CE
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/yQzHdRSx1jmGPszzSDaR7scSAM4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:87:a8:72:a7:a0:c2:20:d9:95:a6:3a:ee:96:ca:34:7c:2e:
         04:e7:9b:f2:20:15:02:9f:d2:43:93:bd:85:45:6a:6b:9a:5f:
         96:16:06:42:5c:77:87:bb:e1:42:ef:55:d1:53:e2:97:03:1f:
         d8:c5:50:39:8f:b6:5f:44:92:bc:c3:8d:15:19:ff:a7:1b:4d:
         cb:8a:d2:d0:f0:2d:46:22:29:8a:cf:8a:66:3c:54:b1:1b:86:
         af:8d:81:af:6d:51:f0:7f:62:44:c4:ec:0e:df:76:33:4c:d1:
         7a:83:c8:19:26:4c:e4:97:0c:b8:a9:84:ee:56:3f:35:3a:ce:
         3c:10:f8:05:74:71:ab:3b:7d:e4:1f:92:14:54:22:1d:7e:66:
         0f:fa:58:b5:28:b0:30:3a:4e:85:eb:f4:c9:9c:73:91:81:58:
         6f:6f:94:8c:92:24:ee:f5:9f:6e:3f:ea:0d:1f:b1:49:41:72:
         fe:08:da:e1:56:1d:43:57:a9:f0:b9:32:f3:3e:c7:99:3f:59:
         36:31:4a:53:88:9c:24:d1:f6:bb:22:52:6b:0b:0c:04:25:91:
         de:27:1d:dd:a2:12:75:11:65:b6:b2:36:df:cb:07:9d:f5:12:
         3a:76:60:e8:3a:94:2b:ba:b6:e3:97:b7:38:1b:c9:b8:73:8b:
         6e:f9:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org