Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/ENrVdOPFPO6FRg79GH8pWHjt3hg.roa
File:                     ENrVdOPFPO6FRg79GH8pWHjt3hg.roa (raw, json)
Hash identifier:          IOzrox8GnynG2OE43nQibWKustPa3vu9fwxde8BFCeY=
Subject key identifier:   10:DA:D5:74:E3:C5:3C:EE:85:46:0E:FD:18:7F:29:58:78:ED:DE:18
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       24
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/ENrVdOPFPO6FRg79GH8pWHjt3hg.roa
Signing time:             Wed 11 May 2022 01:42:24 +0000
ROA not before:           Wed 11 May 2022 01:42:24 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        119.30.12.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:42:24 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=10DAD574E3C53CEE85460EFD187F295878EDDE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:5a:ab:a1:c2:1b:1c:e1:14:9e:5f:25:18:
                    86:6e:d1:77:fe:24:a1:ef:71:de:2e:e6:f1:3e:45:
                    ad:c7:ac:90:f5:28:c1:eb:ab:b1:dc:50:b3:98:06:
                    04:5b:ba:1f:a0:42:7c:0a:0f:d1:0f:c1:b7:52:75:
                    d5:52:cc:0c:4d:5e:5b:48:43:f1:b6:c4:5d:4b:1a:
                    ec:6a:66:60:4c:0c:d0:09:70:97:ba:e1:eb:dd:98:
                    ed:d7:d9:80:de:d2:45:eb:f4:c2:6e:dc:fa:be:15:
                    0d:8e:7e:45:ac:c4:df:65:06:5a:cd:a0:d4:20:8b:
                    ad:17:61:7b:80:c8:30:5d:a7:1c:79:25:e5:a4:e3:
                    b3:d0:cf:56:6f:9d:80:86:7b:c0:da:5c:e0:84:b9:
                    88:ae:87:13:ea:a3:bb:0e:98:f7:d0:54:aa:ff:05:
                    92:72:81:0a:a3:ae:41:76:80:d9:ab:7d:a1:57:1f:
                    df:a3:b4:98:4d:8f:85:5e:15:f7:c4:f8:a9:0f:f0:
                    66:e3:b2:3a:38:58:a7:c8:15:bd:c4:81:2c:77:7e:
                    4d:43:01:1e:1b:d9:4b:5c:c2:ac:38:27:a1:68:bd:
                    8b:f2:fd:78:a7:fe:6c:20:9e:5f:89:d3:ae:43:ed:
                    38:93:c7:1b:20:ae:86:fa:4c:c7:a3:34:23:48:8a:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DA:D5:74:E3:C5:3C:EE:85:46:0E:FD:18:7F:29:58:78:ED:DE:18
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/ENrVdOPFPO6FRg79GH8pWHjt3hg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:bd:0f:19:af:c0:a0:23:bc:39:c6:c4:6b:eb:c3:29:ee:
         b8:e2:1b:63:67:b8:d8:eb:be:3c:f3:ba:4b:52:03:18:c5:ee:
         31:62:e2:54:e4:12:4d:b7:83:19:3c:e3:bd:02:3d:68:8a:32:
         64:39:54:98:97:bd:3e:e8:2c:af:ba:f2:70:86:88:b5:2c:c5:
         4e:9b:7f:bc:94:bb:82:76:ba:06:93:5b:f7:ec:b8:15:7f:3b:
         30:e6:f6:25:6c:34:dc:44:48:db:93:0a:f1:6c:8f:73:71:36:
         41:be:c7:0a:22:36:61:ce:a6:da:e6:37:1f:21:13:6c:a5:37:
         02:0c:95:57:dc:ec:05:87:07:b1:92:27:04:90:76:7d:22:6c:
         f5:2d:6b:66:42:8e:51:e7:eb:53:ee:d0:c8:68:f4:21:e3:dd:
         f7:ca:65:a3:d6:f2:6f:ea:bf:17:8d:16:f6:90:a8:6b:ed:de:
         bf:a2:be:ee:cc:87:0d:14:d5:c9:20:71:86:0f:51:7e:4f:4a:
         59:07:fa:87:93:13:46:26:c8:7e:a2:a3:de:55:50:94:7c:cd:
         ff:46:49:ad:a8:4a:af:15:25:3e:a1:21:6a:ab:b5:6c:f4:15:
         dd:53:06:a2:f5:9c:b8:3a:05:48:9f:55:44:61:9e:a7:19:72:
         41:42:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org