Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/LgJK8_5OWxCihydeBA_ztvr1MnU.roa
File:                     LgJK8_5OWxCihydeBA_ztvr1MnU.roa (raw, json)
Hash identifier:          w8QWxURYzzkoL3HZ1xKJ+Nf5ypxzfUvbcFTj9M7N7g0=
Subject key identifier:   2E:02:4A:F3:FE:4E:5B:10:A2:87:27:5E:04:0F:F3:B6:FA:F5:32:75
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       26
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/LgJK8_5OWxCihydeBA_ztvr1MnU.roa
Signing time:             Wed 11 May 2022 01:46:27 +0000
ROA not before:           Wed 11 May 2022 01:46:27 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        210.141.208.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:46:27 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2E024AF3FE4E5B10A287275E040FF3B6FAF53275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:ed:91:f1:5d:4f:5a:bb:89:ae:5f:5e:ad:
                    af:a8:95:0d:99:6b:c3:64:26:27:04:12:6e:7d:63:
                    c7:64:05:d7:d2:4d:31:20:fb:ca:45:7c:18:7b:84:
                    0e:64:85:e1:e4:b0:8b:d3:93:46:07:53:0e:07:69:
                    37:fa:0f:20:34:32:21:7d:44:90:98:d2:3b:c9:49:
                    e0:85:b0:a7:7e:31:5d:0e:8b:0a:5d:1f:08:99:cd:
                    a8:e0:f8:b5:bc:7b:63:2f:90:0c:31:bf:08:19:82:
                    4b:4e:f6:40:81:19:a1:d8:fd:70:81:61:31:63:5d:
                    95:b9:b9:aa:54:9b:e6:52:ac:e5:80:35:5a:06:77:
                    1e:70:14:11:b5:8f:ef:e2:77:fe:73:b7:14:2d:b7:
                    d8:7b:f2:38:dd:29:d1:f2:ad:30:4f:3e:60:ae:0a:
                    1f:2a:78:5c:11:b6:d2:ce:c0:72:1c:69:5d:d8:1b:
                    9d:57:b8:75:e8:e1:6d:79:1e:83:e7:5d:8a:a4:68:
                    62:b7:4a:e3:97:31:ae:e0:23:37:aa:94:a6:8b:c2:
                    d8:7d:26:df:bf:f3:88:77:b6:78:2c:9d:b5:b0:83:
                    48:b7:09:aa:00:c0:bb:e7:ed:66:60:2d:0a:e5:d4:
                    98:df:f6:d5:21:7c:b6:f1:52:c5:6d:76:31:e3:ba:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:02:4A:F3:FE:4E:5B:10:A2:87:27:5E:04:0F:F3:B6:FA:F5:32:75
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/LgJK8_5OWxCihydeBA_ztvr1MnU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:45:89:31:0a:eb:8f:35:7a:a8:69:b5:df:aa:61:b7:79:1f:
         c5:2d:70:37:1e:79:a4:4a:b7:9b:e3:43:f5:3c:7c:7f:46:33:
         7e:f2:34:39:07:6c:fd:8d:6e:ed:98:3d:cd:b5:df:9a:3f:c7:
         50:b5:69:3f:d3:b3:4d:7e:bb:b8:00:8b:b8:9a:30:6f:74:d8:
         5c:65:f0:56:c4:26:2b:99:cb:7c:67:cd:9f:49:60:7f:ec:11:
         43:1d:d4:ab:a2:7e:f1:58:27:11:fd:5b:94:26:c6:4b:bb:19:
         d4:62:e4:ec:61:90:9e:fb:f6:0a:ba:43:e1:85:b5:21:68:c7:
         7a:f1:3e:20:00:23:96:c0:1e:43:6b:0e:83:e2:8b:ad:0b:26:
         1a:cb:ab:ba:f0:97:14:b7:98:c2:09:1b:e2:a4:14:2e:80:9d:
         09:4d:88:e9:5e:6a:b6:48:1c:6b:dc:02:e9:ec:1c:89:0e:ee:
         c7:ee:3f:28:21:4e:e9:4b:d5:a2:ca:b1:be:ec:dd:3b:f9:7b:
         85:63:0e:db:37:01:c1:b0:1a:96:2c:f7:8c:8e:15:83:48:78:
         d8:22:c7:09:82:bb:ef:b8:af:07:c8:b3:43:4d:6d:ae:77:fb:
         79:e4:52:95:15:b1:86:b2:34:95:fb:93:c7:cb:24:12:97:09:
         22:6c:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org