Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/cLc2UxcXDp5U0UJ_yCCd_3oQM_E.roa
File:                     cLc2UxcXDp5U0UJ_yCCd_3oQM_E.roa (raw, json)
Hash identifier:          7qPBNIoTJg2PC0McSVTscUrNUbfEgX89LlGF5b6AC5Q=
Subject key identifier:   70:B7:36:53:17:17:0E:9E:54:D1:42:7F:C8:20:9D:FF:7A:10:33:F1
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       38
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/cLc2UxcXDp5U0UJ_yCCd_3oQM_E.roa
Signing time:             Thu 13 Apr 2023 09:53:58 +0000
ROA not before:           Thu 13 Apr 2023 09:53:58 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        27.106.208.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:53:58 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=70B7365317170E9E54D1427FC8209DFF7A1033F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:7e:a0:7e:4e:a6:92:ff:bf:c0:13:84:74:
                    4f:db:6b:a9:12:9b:13:6f:be:fb:f7:4a:8a:07:38:
                    37:d2:8c:52:a8:86:41:9f:7a:a1:3a:fa:02:36:86:
                    8b:67:0b:e8:6e:4d:29:52:93:19:41:82:3d:43:67:
                    23:48:c8:d6:0d:4e:eb:93:43:43:01:d6:4b:93:f4:
                    2a:45:c9:21:88:5b:f5:6c:86:df:a5:73:ca:24:ca:
                    6f:66:78:88:93:f6:fd:54:ea:bd:ea:f2:58:13:8a:
                    29:52:54:f9:07:39:ac:e2:36:c4:00:1f:54:0f:3c:
                    c3:d2:6d:5b:a4:2b:61:1f:04:e5:e3:3d:a1:4e:12:
                    12:89:e7:20:a0:4e:9f:9d:6b:68:3b:ce:7b:2a:26:
                    69:25:16:79:52:49:5f:ad:4d:23:f8:a2:ea:d1:02:
                    d8:72:1e:b5:fb:30:e0:d3:62:30:2e:c8:1f:18:b1:
                    8f:96:9f:5b:5b:60:01:64:09:b3:01:c6:af:ec:71:
                    66:47:16:cd:47:2d:93:6c:e3:52:13:b7:2e:52:43:
                    21:05:72:ef:62:64:24:f0:72:b4:d9:1b:25:70:3d:
                    3f:75:4b:73:e5:6e:11:10:8e:bb:e3:b3:87:c7:25:
                    32:e5:6d:30:b0:cb:89:a7:82:12:8b:80:57:50:2f:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:36:53:17:17:0E:9E:54:D1:42:7F:C8:20:9D:FF:7A:10:33:F1
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/cLc2UxcXDp5U0UJ_yCCd_3oQM_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.106.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:eb:f8:00:54:45:43:d4:50:0d:c5:81:d7:42:dc:a3:f0:
         6b:6f:ea:ac:3a:f7:a9:31:ce:7d:0f:b2:d7:82:31:7e:d0:4f:
         58:9a:6e:e5:75:20:9f:a6:6b:58:aa:8e:7e:56:14:ea:d4:e8:
         d7:39:e7:cc:a7:4c:f1:8a:95:f2:fb:81:e2:a1:65:1c:78:27:
         a3:19:cb:0c:17:fd:30:5b:f8:1e:5a:c8:ce:2c:36:4e:bc:01:
         0c:11:7d:bc:25:72:03:3a:5e:9c:24:eb:56:2a:e8:80:73:76:
         f5:0d:96:ca:8d:12:69:88:04:f8:bf:18:fb:58:ba:c8:00:1f:
         ed:65:4f:38:9c:d4:fb:f0:d8:ec:09:c7:6f:b0:e4:b7:ad:a7:
         d5:d1:b8:2b:b5:37:0b:ca:77:68:e9:f5:2c:44:8f:b1:4d:7b:
         90:30:6b:fd:c2:7d:83:2b:5e:81:d4:7f:73:f5:24:6f:83:a7:
         5c:35:66:08:0e:15:3a:ed:e0:3f:8d:b3:1b:fe:62:e1:da:71:
         52:7a:74:dc:c3:d1:91:34:e1:3a:b8:62:61:a2:ae:86:9a:c8:
         35:1b:1f:ab:44:2a:eb:63:3a:b8:43:7a:89:d6:1f:e9:e4:2b:
         e2:65:34:5f:a6:10:05:5b:fb:4b:cc:91:86:1e:d6:15:75:f4:
         63:71:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org