Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/t3Tjnw0OJB1EU-PEXZ6MnvI3YF4.roa
File:                     t3Tjnw0OJB1EU-PEXZ6MnvI3YF4.roa (raw, json)
Hash identifier:          CHRJNGTsKTXJkfSqjEPcfJbALQ6tOJxYPCSe2Q1t1B0=
Subject key identifier:   B7:74:E3:9F:0D:0E:24:1D:44:53:E3:C4:5D:9E:8C:9E:F2:37:60:5E
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       27
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/t3Tjnw0OJB1EU-PEXZ6MnvI3YF4.roa
Signing time:             Wed 11 May 2022 01:46:27 +0000
ROA not before:           Wed 11 May 2022 01:46:27 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        210.141.214.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:46:27 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=B774E39F0D0E241D4453E3C45D9E8C9EF237605E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:b6:8f:9e:31:fa:8c:9f:a4:22:49:15:ee:
                    23:f2:f4:23:40:3d:1e:b4:5c:b9:02:07:e2:e2:4e:
                    12:dc:23:3a:f2:cc:d7:a8:00:da:cd:9d:74:1e:4e:
                    73:23:82:45:6b:bb:15:2a:7a:17:ac:1f:d7:3f:85:
                    fe:26:9b:d5:59:66:2c:f0:92:e9:ba:28:75:3b:0c:
                    e6:21:81:e8:d9:45:b8:cd:c6:57:c7:19:30:80:bf:
                    9d:35:91:81:55:05:f3:14:f3:12:d6:aa:5a:a1:e2:
                    1c:85:e4:f7:a6:cb:c8:f8:a2:0d:c1:9e:e0:a9:2c:
                    e6:4a:2c:31:00:b0:b9:a7:1c:e2:0f:82:4e:0e:00:
                    f8:a6:a2:1f:58:a0:5d:1e:91:c6:88:b5:0a:ae:9b:
                    73:a7:0f:ad:5b:3f:f8:94:9b:31:0a:58:e1:a6:cb:
                    aa:ca:e8:1e:bc:3a:95:d6:32:83:68:33:99:6c:26:
                    45:9a:a9:f9:4a:62:73:c7:f2:c1:27:ad:23:45:9a:
                    90:3a:e2:bd:0e:54:bb:1c:6a:23:0e:1c:64:90:65:
                    2e:18:83:74:08:58:e2:00:b7:9a:1f:65:38:22:36:
                    5e:5d:e6:ae:43:16:37:d4:f4:0c:58:c2:fc:7f:fa:
                    e6:db:23:57:8d:f4:18:12:20:f3:4f:38:9e:16:39:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:E3:9F:0D:0E:24:1D:44:53:E3:C4:5D:9E:8C:9E:F2:37:60:5E
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/t3Tjnw0OJB1EU-PEXZ6MnvI3YF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:2b:6b:21:6e:4a:d5:dc:03:f5:94:62:30:c6:8c:25:59:
         c4:21:cb:f6:12:c9:58:2b:ef:b5:59:56:61:32:33:86:7c:0c:
         4d:52:cb:d4:c6:11:32:d9:96:58:be:39:35:bb:7b:d2:78:bb:
         3f:c3:45:0a:f3:90:cd:d4:61:49:67:0b:8a:f9:df:73:d1:33:
         e3:6f:a0:4c:15:32:be:5d:cb:19:62:7f:14:cc:07:e3:95:e9:
         0a:e5:29:cd:28:40:96:c1:62:30:ff:6e:0e:4a:9c:7d:f6:ac:
         c3:49:10:5a:1a:d8:81:3b:b3:ad:1f:45:dd:11:69:31:27:4f:
         b4:c0:c0:26:1e:a1:90:d1:a5:f3:93:26:ca:87:77:33:28:30:
         1a:48:75:1a:38:0d:af:40:85:b0:95:03:b7:77:63:35:f2:05:
         cc:1b:1e:a5:be:c4:5c:b2:94:fb:aa:6d:d3:ff:3a:18:17:57:
         31:89:08:46:4d:ae:89:a8:99:51:c4:53:29:59:ce:23:2f:9e:
         7f:4e:06:fb:73:8e:c6:0c:b8:b3:2d:9e:f2:f0:38:db:bc:71:
         87:e3:a3:7d:13:12:26:af:d0:89:7e:4c:62:6a:c6:37:a7:c4:
         90:be:2e:59:1f:33:61:b0:d3:e2:46:30:bb:ab:05:d1:f4:4e:
         5a:1c:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org