Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/8WF7Zns9HWYP_RS8wbONBhXGI1c.roa
File:                     8WF7Zns9HWYP_RS8wbONBhXGI1c.roa (raw, json)
Hash identifier:          KCtzSXQEpdwPe3GKH8tM/ic1VkRa18aLOVZ0GPX3YKk=
Subject key identifier:   F1:61:7B:66:7B:3D:1D:66:0F:FD:14:BC:C1:B3:8D:06:15:C6:23:57
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       02
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/8WF7Zns9HWYP_RS8wbONBhXGI1c.roa
Signing time:             Thu 20 Oct 2022 06:14:21 +0000
ROA not before:           Thu 20 Oct 2022 06:14:21 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        27.122.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:14:21 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=F1617B667B3D1D660FFD14BCC1B38D0615C62357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:29:5c:25:25:59:f9:33:2b:bf:2a:a2:ff:
                    f3:96:7e:b8:67:08:3e:4e:d9:aa:e4:3b:38:f4:be:
                    d2:46:ed:f2:22:f7:31:ae:3c:ee:48:f8:1d:62:d8:
                    33:4e:41:12:6a:32:5c:f1:2c:4c:18:b8:d8:5e:51:
                    ca:36:60:1b:6f:14:64:c1:97:b5:b0:26:49:2f:44:
                    0c:10:29:68:a0:07:80:88:72:31:6c:d4:31:ed:ac:
                    2d:72:05:2a:b9:65:ab:32:22:b1:3d:83:1f:29:09:
                    42:48:56:7f:36:8a:fb:30:bf:19:56:8d:24:a2:af:
                    9f:2b:7d:fa:21:64:d3:12:79:34:26:c4:5f:91:61:
                    6e:d8:66:8e:ae:36:9d:72:21:53:85:19:e5:aa:f2:
                    08:ed:cd:98:7a:e1:54:61:09:dd:c3:c7:dc:ef:44:
                    77:af:a5:ad:88:71:97:b8:2d:99:82:ea:3d:39:f1:
                    d2:8e:6f:d0:d2:48:fa:31:ae:9b:35:11:b3:2f:ec:
                    0f:24:7e:29:2b:22:ec:ae:82:9f:9e:1d:61:19:2a:
                    57:78:19:d5:c2:4d:f4:b3:70:1f:91:24:fb:a8:3e:
                    34:41:f9:b9:66:5f:47:1d:36:fd:fa:1f:01:35:52:
                    5f:c7:eb:b6:ff:41:50:49:38:11:cf:dc:b0:37:fd:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:7B:66:7B:3D:1D:66:0F:FD:14:BC:C1:B3:8D:06:15:C6:23:57
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/8WF7Zns9HWYP_RS8wbONBhXGI1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:7b:44:3c:4d:bd:92:d2:e7:3f:e5:2a:38:41:2a:7e:5d:
         1c:7b:1d:1c:f5:c1:0d:18:75:2c:87:82:cd:7e:a4:84:8d:c8:
         10:08:72:e0:7f:71:b6:34:c4:26:c1:f6:2a:6c:d7:ee:2b:33:
         22:4a:2f:e7:5c:ca:51:f2:45:ba:0b:6b:f6:fe:0d:ca:65:a2:
         cc:72:64:63:40:93:5c:3b:64:f9:85:56:05:38:b0:65:7d:c2:
         7d:d6:d8:83:01:9d:48:31:c2:f4:9f:56:60:68:9e:ba:28:94:
         38:20:df:10:ab:6e:c4:6a:2e:68:cf:c8:fe:a1:79:9e:0a:1f:
         34:65:dc:77:d3:16:05:35:60:5b:08:fa:3e:eb:1f:1a:13:20:
         9c:32:82:92:52:13:8f:32:1f:38:79:a5:15:96:0c:3f:ae:bd:
         4b:6b:ac:3c:00:0b:7d:bd:a0:b2:3e:06:78:9f:30:b4:c9:87:
         2e:83:0f:14:54:74:31:34:36:9e:3b:f0:07:dd:ee:29:51:5e:
         70:2d:10:c2:5a:a3:40:01:6b:db:60:e9:42:e9:b4:60:56:a6:
         6c:1a:e8:82:13:a9:9c:93:22:7b:89:aa:1a:a4:0b:08:85:12:
         e6:01:51:a5:38:84:49:8d:cf:b6:ec:17:95:b3:b4:b6:69:fa:
         ef:41:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org