Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/7dTCgfHioeSZH21o61oTd3s6jZc.roa
File:                     7dTCgfHioeSZH21o61oTd3s6jZc.roa (raw, json)
Hash identifier:          1ZUaMgqeYe1sbXnf/QfTHS2FBmCHivfsdEzOFcJFW6s=
Subject key identifier:   ED:D4:C2:81:F1:E2:A1:E4:99:1F:6D:68:EB:5A:13:77:7B:3A:8D:97
Certificate issuer:       /CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
Certificate serial:       13
Authority key identifier: DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/7dTCgfHioeSZH21o61oTd3s6jZc.roa
Signing time:             Wed 15 Mar 2023 07:22:03 +0000
ROA not before:           Wed 15 Mar 2023 07:22:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     17530
IP address blocks:        64.63.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
        Validity
            Not Before: Mar 15 07:22:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EDD4C281F1E2A1E4991F6D68EB5A13777B3A8D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:c9:4b:85:b0:f2:c8:6f:77:4a:49:93:f4:
                    c0:ed:9e:de:b4:cf:0c:fb:3b:62:f4:33:be:a9:77:
                    a1:fd:5b:ab:8d:4a:ff:f3:a9:9b:5b:f1:ba:05:54:
                    80:60:81:f6:39:ce:c3:82:4d:7a:5f:d2:7a:a7:57:
                    11:81:13:f9:72:81:19:e1:6c:d8:3e:0e:40:d4:25:
                    e3:d3:e6:f9:83:1d:ff:b9:3e:34:ca:b5:72:82:09:
                    03:54:aa:64:79:6c:b2:64:24:d2:ee:55:94:ef:28:
                    67:d6:9a:f8:37:97:b5:1a:32:bc:58:f6:fd:40:b2:
                    1f:da:38:a8:c6:7f:49:2a:5a:dc:09:c4:29:72:26:
                    62:a2:56:5d:86:38:19:5a:5f:39:29:1d:ae:26:8f:
                    c3:ed:74:48:47:3f:3e:ec:6b:b1:f1:91:f1:31:ff:
                    a7:76:7a:ee:1f:a2:a0:15:5a:6b:6d:90:a0:55:db:
                    22:2a:46:e6:79:1f:c3:08:78:86:06:30:c9:95:59:
                    32:33:0c:80:3c:46:53:d4:70:d8:9d:de:63:3a:2f:
                    eb:b6:9a:76:cc:64:54:b2:7c:59:d9:3a:ca:4c:3f:
                    3b:5d:1f:4a:33:30:d5:40:87:e7:55:ce:db:d1:3c:
                    cc:29:53:b5:3f:d3:0b:60:f5:f5:ad:f7:04:e5:35:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:C2:81:F1:E2:A1:E4:99:1F:6D:68:EB:5A:13:77:7B:3A:8D:97
            X509v3 Authority Key Identifier:
                keyid:DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/7dTCgfHioeSZH21o61oTd3s6jZc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:0b:fb:f9:b0:27:70:b2:7d:d8:04:40:b1:59:5c:b7:92:
         68:bb:5f:54:af:5b:38:a9:d5:04:70:f0:a0:b0:b0:22:a4:00:
         6e:28:3a:64:7a:cb:8c:e6:c2:d8:c8:26:63:f3:5f:c5:11:f0:
         06:2a:7c:5b:11:75:c8:2a:d8:ce:a9:5d:3f:41:1c:f6:d3:cd:
         66:c6:6b:11:bd:52:d5:af:4f:9c:ea:af:46:cf:ec:52:00:73:
         8c:6e:1b:dd:46:45:fa:38:9d:40:19:27:2b:3c:d3:8c:de:a9:
         92:2e:f4:a9:92:6c:43:68:6d:98:b4:a7:88:6e:8f:0c:26:31:
         b3:fb:07:0f:ca:82:a0:d3:9f:5e:79:fe:7d:84:59:e6:f9:58:
         3b:db:d3:89:65:60:29:24:18:81:22:65:3b:d2:9a:22:fd:d7:
         c2:04:ee:e7:e4:d8:95:db:7c:3e:35:38:7c:9b:e0:08:52:8b:
         6c:8a:76:05:dc:00:3c:ed:53:3d:7b:5a:26:2c:84:cb:1f:ee:
         8d:3c:ab:b5:0a:53:88:14:b9:74:72:d8:a7:60:28:4d:0f:7b:
         f3:7e:2c:b7:61:26:cb:14:69:16:93:47:fc:0e:43:e8:50:5d:
         d1:19:5f:07:d6:d3:c1:a0:81:05:94:26:9f:81:de:e6:3d:06:
         68:f9:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org