Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/HXi4TqoYnByma0mrZgdobvRXz8o.roa
File:                     HXi4TqoYnByma0mrZgdobvRXz8o.roa (raw, json)
Hash identifier:          I1DEw6Ln9AKl8OtNHgOVFy/OI/6NXrDsx54CyBvSNBY=
Subject key identifier:   1D:78:B8:4E:AA:18:9C:1C:A6:6B:49:AB:66:07:68:6E:F4:57:CF:CA
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       1D
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/HXi4TqoYnByma0mrZgdobvRXz8o.roa
Signing time:             Wed 11 May 2022 01:38:27 +0000
ROA not before:           Wed 11 May 2022 01:38:27 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        27.106.208.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:38:27 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1D78B84EAA189C1CA66B49AB6607686EF457CFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:1b:10:36:bc:03:2a:f6:4e:6d:a3:e9:d2:
                    ee:93:bc:e3:9d:f2:d1:3b:96:78:4b:f2:61:fe:f7:
                    b6:53:80:52:5b:f7:5b:72:c6:32:17:70:67:1f:48:
                    ed:54:7a:6a:c7:9c:8b:56:5c:ba:04:72:2b:a0:ee:
                    e4:4a:1f:47:8b:0a:b4:b3:6d:bc:a8:3f:25:8b:6d:
                    57:f3:22:95:78:23:a0:96:50:3a:15:30:2a:a2:43:
                    85:91:a9:d7:3c:fb:88:a1:3c:e8:a5:3a:af:42:f4:
                    a3:f7:8f:28:71:9f:2f:f8:43:f8:2d:8e:b1:32:24:
                    6c:30:cb:bc:63:4c:54:bb:ca:20:76:8b:60:6c:98:
                    06:5f:78:a9:ff:7e:36:a5:6d:8e:26:dd:a7:e7:bd:
                    e4:85:c5:1a:78:cd:6d:93:cb:5a:a1:97:8f:1b:b6:
                    a5:dc:18:e7:cf:c0:8d:99:a6:75:ae:ac:ce:50:ec:
                    47:97:41:e2:19:e1:97:bc:26:60:1f:dc:07:cf:bf:
                    b4:08:56:09:79:8a:92:4b:6a:c2:e3:6b:11:b7:e3:
                    f6:a7:00:58:f9:50:89:b8:3f:f0:fc:6b:09:83:4a:
                    dc:c2:4e:cd:e6:e5:24:a8:0b:ed:b4:a8:0f:5e:69:
                    72:bf:d8:0a:ca:ec:85:3f:3a:b2:cf:6b:8f:64:7e:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:78:B8:4E:AA:18:9C:1C:A6:6B:49:AB:66:07:68:6E:F4:57:CF:CA
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/HXi4TqoYnByma0mrZgdobvRXz8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.106.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:31:25:d2:4c:8a:d9:04:32:c5:2c:6d:81:0f:98:c4:a0:
         68:7a:90:6e:79:d8:54:b3:a9:d9:2a:4f:35:d4:d5:44:e8:93:
         5d:64:a8:ac:d3:db:9a:0b:3b:ef:53:be:2f:ee:29:05:ea:99:
         b3:37:e9:ff:5b:ef:bb:a2:8f:f4:71:e5:85:5b:86:ac:a9:ad:
         db:08:b8:e2:bd:26:c6:cf:2b:4b:67:eb:34:34:29:97:86:64:
         cf:f2:c1:d7:e6:f3:f2:de:7a:b4:b6:4a:8e:b5:aa:ef:71:eb:
         51:ad:61:af:76:d2:a0:aa:e8:7b:0c:a5:af:77:b5:a7:5e:76:
         b8:9b:ce:a3:dc:86:82:5c:c2:46:d0:cb:ff:df:84:2d:ba:47:
         f6:b4:83:17:3e:17:51:9b:b0:57:42:ef:25:31:52:bb:17:61:
         80:65:19:b2:99:b9:2b:d8:08:5d:5a:84:b4:45:7d:aa:fa:e8:
         a4:25:86:e0:df:c6:3a:3e:8e:1a:65:02:12:2d:ec:99:d7:ee:
         39:f0:68:0a:0f:0b:90:3e:b6:ca:b6:7c:26:97:ab:ae:44:89:
         d2:a7:77:be:5c:3f:64:84:06:40:97:14:e6:93:9d:0d:61:d3:
         e5:ae:3f:88:b1:c0:4e:eb:b0:06:98:a5:23:c9:3c:73:79:44:
         c4:ad:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org