Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/BLi9mgcz8A8g-Ps2wIrGxQRmczU.roa
File:                     BLi9mgcz8A8g-Ps2wIrGxQRmczU.roa (raw, json)
Hash identifier:          S7iEP7qTrCzNXcHeM3nPsue6wpoh1XLUHjsnqMzSKTo=
Subject key identifier:   04:B8:BD:9A:07:33:F0:0F:20:F8:FB:36:C0:8A:C6:C5:04:66:73:35
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       2B
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/BLi9mgcz8A8g-Ps2wIrGxQRmczU.roa
Signing time:             Wed 11 May 2022 01:48:26 +0000
ROA not before:           Wed 11 May 2022 01:48:26 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        220.156.192.0/18 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:48:26 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=04B8BD9A0733F00F20F8FB36C08AC6C504667335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:12:f4:51:6c:26:ef:1e:cc:9e:19:2c:1a:
                    cb:72:5d:dd:2a:e5:41:32:2e:b0:2d:5c:2b:b2:86:
                    5f:4d:c8:f3:a1:4b:90:d8:f2:ca:c5:26:06:a5:37:
                    45:f4:23:05:18:31:e8:e2:03:69:98:6e:4e:ae:2c:
                    5e:b7:b3:b7:40:57:e6:56:eb:cb:8b:0e:0e:ec:ab:
                    6e:4f:95:23:57:6e:e7:e9:88:eb:b3:96:40:c6:5e:
                    e6:14:13:f5:13:06:79:70:b4:c5:c9:91:56:62:e1:
                    83:13:93:22:47:6c:2e:c4:2e:8d:82:64:ab:76:0b:
                    6f:f8:55:7c:88:04:69:be:b7:a0:70:b6:eb:e3:bc:
                    b1:f9:48:5b:0e:75:f2:f7:43:e0:16:c7:79:4a:b0:
                    33:bc:48:6c:21:7a:b9:50:37:98:58:99:ee:4a:d2:
                    ee:1a:82:77:d2:a6:07:2d:d4:c8:ca:da:2d:39:f5:
                    2e:4a:b6:89:17:aa:0f:7e:6e:f7:51:9b:73:48:13:
                    b4:3b:11:5c:e4:dd:71:0f:7c:4b:67:cb:a8:2e:8e:
                    11:a1:d6:9c:cc:c8:af:f8:c2:f7:15:dc:72:fd:1b:
                    f2:65:fc:a3:e8:ed:15:5d:8b:1f:46:36:37:f9:f8:
                    5c:c6:88:a8:57:a7:f0:43:77:3c:3d:46:85:f4:0a:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B8:BD:9A:07:33:F0:0F:20:F8:FB:36:C0:8A:C6:C5:04:66:73:35
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/BLi9mgcz8A8g-Ps2wIrGxQRmczU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:14:e2:cc:59:05:18:e1:82:ea:2d:9d:db:57:79:2d:ba:a9:
         0e:32:91:a3:03:db:29:0a:2c:1c:cf:dd:70:9b:4f:de:ba:ff:
         96:32:17:66:61:c1:1b:03:18:c3:3c:e3:3e:a0:b4:88:35:47:
         48:7c:b9:58:a8:24:4b:1e:d7:69:b2:13:1a:97:7b:7e:c2:3f:
         59:46:23:f1:26:dc:d9:0a:17:3e:e5:76:db:46:22:bc:c4:56:
         7f:f8:6c:43:54:30:af:58:2b:ca:e4:b5:23:0a:b5:2c:fe:fb:
         c2:95:12:e0:45:39:81:3c:24:4c:09:48:ca:6b:bc:5d:b9:1c:
         8c:5c:81:42:74:ee:65:b8:cf:41:52:18:46:88:4f:4c:61:f1:
         1d:27:e4:28:96:31:4e:e8:26:12:da:d7:59:98:69:65:ba:d7:
         31:da:33:70:ba:aa:7d:7c:ec:43:fb:ad:f7:54:db:38:98:07:
         dc:bd:a6:6b:82:d2:46:17:b7:37:29:8b:b6:d8:d8:a8:ca:f8:
         d4:88:c3:d5:e1:c9:e7:8a:33:c3:3e:c6:bf:5e:3c:cb:a2:20:
         9b:b1:ec:e9:fc:18:54:92:14:9b:36:0a:23:07:2d:0d:49:b6:
         03:b5:2f:8b:ea:f3:1b:af:b9:99:2c:91:61:73:9a:3c:86:23:
         fa:bc:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org