Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/_TqXJV12ZVxsbITV7DgKQWTLxKM.roa
File:                     _TqXJV12ZVxsbITV7DgKQWTLxKM.roa (raw, json)
Hash identifier:          RlcgmDDBlqEUWqqVuDMLtVGcbIPoQYQAXJ/XqC7H6Ko=
Subject key identifier:   FD:3A:97:25:5D:76:65:5C:6C:6C:84:D5:EC:38:0A:41:64:CB:C4:A3
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       0D
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/_TqXJV12ZVxsbITV7DgKQWTLxKM.roa
Signing time:             Tue 01 Nov 2022 06:36:00 +0000
ROA not before:           Tue 01 Nov 2022 06:36:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     17958
IP address blocks:        133.226.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Nov  1 06:36:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=FD3A97255D76655C6C6C84D5EC380A4164CBC4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:04:20:a2:78:c2:0c:cb:07:ff:65:71:7d:
                    e9:fd:8d:59:1a:50:01:f3:5d:c7:9b:5c:4c:44:50:
                    53:48:7b:99:f5:20:7a:f1:06:a5:c1:24:e8:a3:ff:
                    d4:9e:18:32:01:4b:e5:f4:54:ed:d5:28:ff:a4:17:
                    48:61:35:51:69:21:2c:93:57:22:fa:91:f1:5f:8f:
                    74:b1:2a:36:39:e3:ee:62:c2:b8:f5:4f:1a:10:4f:
                    eb:90:12:13:b3:ec:15:5c:c2:fa:cd:5c:21:eb:c1:
                    b0:5c:c5:6c:ad:79:64:e0:17:9d:69:70:53:75:15:
                    1f:df:b4:99:db:59:b3:4b:da:ab:9a:b3:d5:ce:e6:
                    14:ec:ae:1c:c9:f0:41:8a:cb:89:16:b4:35:3d:e2:
                    66:53:b2:d9:c0:74:9d:34:53:1b:8e:e3:97:4d:6f:
                    3f:be:8a:cb:dc:2d:cc:c6:b3:e1:3b:ed:7e:7a:ed:
                    9e:ac:41:11:ff:11:64:b3:b9:fe:d9:44:56:91:72:
                    8a:6b:98:97:10:68:a3:da:f3:e8:1a:a7:63:be:be:
                    c4:9d:32:f2:e0:f0:09:c2:62:80:83:80:69:19:6d:
                    d0:cb:e9:52:d1:8c:c5:5b:9e:b0:73:b8:71:c2:d9:
                    c6:d3:81:8f:56:d2:4c:46:12:37:8e:57:bd:f2:e8:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:97:25:5D:76:65:5C:6C:6C:84:D5:EC:38:0A:41:64:CB:C4:A3
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/_TqXJV12ZVxsbITV7DgKQWTLxKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:24:08:b9:ae:62:9c:08:4c:53:db:0b:45:0a:44:d8:7d:0f:
         29:99:52:1a:1c:5c:90:98:22:a5:29:7d:c8:e7:5e:03:c4:0e:
         6e:6d:35:a5:30:8b:2b:e7:26:50:c1:28:fc:7f:33:83:11:54:
         85:57:34:7b:a8:b2:4d:67:20:14:ea:f8:1b:4a:ff:f1:93:43:
         33:90:47:9f:d5:e6:a1:0d:c3:0b:25:e5:a9:79:bd:9d:07:f4:
         5e:b0:89:4d:2a:2e:df:46:f6:4c:7a:9e:c1:cb:ae:f6:04:0e:
         24:81:37:a4:58:c8:d5:2f:7e:95:ff:0e:29:6c:93:a9:6e:75:
         3f:2c:d0:8c:a5:55:9b:fb:28:c6:46:fe:f8:1e:4b:2b:4f:9c:
         d9:a8:92:d8:35:c4:6a:04:97:5f:bb:d1:1d:c4:f6:e3:39:67:
         a2:73:27:95:12:cf:4e:00:6b:b6:45:c3:b2:19:69:6a:62:ba:
         77:a9:12:78:12:8d:84:7b:13:8b:e7:f6:40:92:aa:65:68:8a:
         51:88:2b:a2:9c:ac:2e:8e:11:f0:90:de:59:de:5e:5d:d2:ae:
         0a:c4:d5:fe:5e:35:27:51:7d:88:1a:a7:cf:4e:6f:46:03:df:
         b4:5a:db:86:07:4b:8f:1c:4f:0a:ae:6b:d9:49:62:60:8d:85:
         58:ec:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org