Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/6z3TsIYCzT38Gfucil4F42lt3bw.roa
File:                     6z3TsIYCzT38Gfucil4F42lt3bw.roa (raw, json)
Hash identifier:          hOHGcKsxLZFZvt51OmRnD94R41VI0RnD9gSvdUHeRzQ=
Subject key identifier:   EB:3D:D3:B0:86:02:CD:3D:FC:19:FB:9C:8A:5E:05:E3:69:6D:DD:BC
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       02
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/6z3TsIYCzT38Gfucil4F42lt3bw.roa
Signing time:             Mon 13 Jun 2022 06:21:00 +0000
ROA not before:           Mon 13 Jun 2022 06:21:00 +0000
ROA not after:            Tue 13 Jun 2023 06:06:17 +0000
asID:                     17958
IP address blocks:        103.2.96.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Jun 13 06:21:00 2022 GMT
            Not After : Jun 13 06:06:17 2023 GMT
        Subject: CN=EB3DD3B08602CD3DFC19FB9C8A5E05E3696DDDBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:0d:a8:dd:26:90:a6:8e:71:3c:5a:a6:fe:
                    b1:2e:79:ce:73:1e:73:93:90:39:b1:d2:c7:5b:b1:
                    2d:14:9d:3e:90:57:96:ca:da:8a:7f:96:88:16:e3:
                    9b:33:90:3a:1c:e5:ea:14:f8:38:df:8f:cd:93:c7:
                    35:0c:e5:25:15:3e:fd:30:e3:8b:a4:29:bc:e4:d4:
                    20:d4:7b:ff:05:14:fc:3e:c7:8c:81:00:71:a6:3b:
                    2b:cb:c4:18:43:ef:f4:8c:84:e4:71:11:a6:e2:70:
                    07:39:1f:fe:c4:48:8f:c9:eb:20:49:ae:db:f1:19:
                    62:3d:04:9c:78:5b:6b:bf:b1:2a:79:c5:77:ee:59:
                    76:12:d0:88:45:84:c4:5b:a0:c9:56:3a:e6:9c:25:
                    73:a2:dc:9e:9b:a3:66:0b:48:e8:db:1d:78:f0:3a:
                    3f:58:82:f1:af:4c:9c:80:dc:43:6f:c5:16:6e:be:
                    dc:61:21:c7:b6:7d:8d:f5:c0:67:b0:06:77:de:76:
                    c5:9a:3e:72:03:69:dd:44:fe:ba:0c:62:3a:6f:fb:
                    f1:0a:b1:42:f2:7d:1f:34:46:96:8f:b7:38:bb:3a:
                    a3:bf:ed:13:05:04:82:70:be:b2:81:be:af:a0:53:
                    67:ea:2d:0a:bb:1c:93:75:93:51:7d:2b:82:a6:bd:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3D:D3:B0:86:02:CD:3D:FC:19:FB:9C:8A:5E:05:E3:69:6D:DD:BC
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/6z3TsIYCzT38Gfucil4F42lt3bw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:d0:01:79:13:51:b3:ea:32:dd:f8:fe:42:75:f2:6a:2f:18:
         89:19:88:b1:d5:16:43:7f:c3:ed:31:fd:5c:5e:1b:54:cb:42:
         3c:cf:af:e8:a6:70:19:af:fc:c3:3d:09:7d:8d:f6:d9:ae:ba:
         c2:d4:99:df:e1:c6:53:77:9b:8c:19:19:cd:d7:1c:9c:37:30:
         b3:28:61:2f:97:2d:94:36:f2:69:a9:c2:41:65:b7:d6:00:67:
         5c:56:0c:ca:0e:a0:b6:83:ff:05:b0:22:84:5d:88:28:a8:00:
         71:48:13:f7:73:57:b2:64:a6:f2:b4:03:c1:c8:8e:ae:64:fd:
         a2:56:74:59:2c:ed:54:a5:c6:40:ac:ad:b2:23:20:98:9e:5d:
         e7:83:a6:4a:bd:97:7d:23:df:d8:9b:8c:90:9b:d7:cc:aa:17:
         06:b5:52:59:ef:23:13:27:a2:76:06:a4:7a:a7:10:2b:4d:7a:
         ed:6f:4c:e0:0b:c4:dd:0f:a0:9f:01:07:e6:3d:ea:70:fc:91:
         84:5d:09:c0:dd:a5:ea:22:53:d7:1b:0f:f2:33:9d:e8:98:79:
         0f:c7:94:5b:34:4d:8a:31:c5:44:72:93:ce:ea:03:92:78:b1:
         f1:df:8f:35:66:0a:1e:9c:b6:84:51:35:b0:f7:8a:81:4a:86:
         ad:a2:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org