Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/vGs3pOB_Gz5snueygF-yRvpiyJA.roa
File:                     vGs3pOB_Gz5snueygF-yRvpiyJA.roa (raw, json)
Hash identifier:          bTB0x30QL8oFXe/IcKvkpF+2CayXS/OfQXVZNUwUPXE=
Subject key identifier:   BC:6B:37:A4:E0:7F:1B:3E:6C:9E:E7:B2:80:5F:B2:46:FA:62:C8:90
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       29
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/vGs3pOB_Gz5snueygF-yRvpiyJA.roa
Signing time:             Wed 11 May 2022 01:48:25 +0000
ROA not before:           Wed 11 May 2022 01:48:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        210.87.224.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:48:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=BC6B37A4E07F1B3E6C9EE7B2805FB246FA62C890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:3c:0a:8f:28:99:7d:fe:de:87:0d:71:e2:
                    dd:31:90:58:05:61:c9:05:3a:2b:30:92:ac:4f:32:
                    91:a5:3c:48:a8:63:77:8c:9c:e3:fb:b4:af:45:d9:
                    b2:58:1c:68:7b:0a:6a:a4:a8:54:71:00:99:b8:50:
                    d0:c5:9a:d8:08:f4:dc:83:d1:7d:be:d4:67:55:db:
                    1c:4f:2d:ac:f7:47:f6:55:da:cb:97:f0:49:50:8f:
                    06:e4:2a:9a:06:43:0d:e9:94:de:4c:9a:08:72:4f:
                    f0:2b:b7:d5:92:5e:ad:37:19:06:36:cf:0e:d9:2c:
                    a3:44:30:b1:69:75:9c:1b:dc:c8:f3:20:e6:d8:b8:
                    db:73:be:09:b2:33:5f:3f:cd:e0:d7:42:2a:3c:09:
                    21:2f:e3:76:54:98:af:33:94:f6:33:ec:a4:c0:bf:
                    00:1c:da:03:5e:fa:15:7d:fa:28:b1:98:81:8d:8d:
                    db:4f:51:cc:7a:4e:db:9d:fd:12:3f:c1:58:56:fb:
                    1b:de:a3:44:63:d0:17:11:0b:cf:5c:58:5c:f3:cb:
                    13:20:ef:ce:3f:c8:54:ae:4d:0b:d0:d8:36:cb:bf:
                    d0:dd:b7:da:92:9c:19:b1:56:0b:cf:fa:55:40:e0:
                    08:fd:61:8b:4d:64:6c:f1:92:24:95:17:c2:75:e9:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6B:37:A4:E0:7F:1B:3E:6C:9E:E7:B2:80:5F:B2:46:FA:62:C8:90
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/vGs3pOB_Gz5snueygF-yRvpiyJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:87:55:a0:d1:c2:c9:91:be:e9:45:c5:86:34:99:25:85:c1:
         6e:be:b4:e7:9b:ab:15:35:cf:7f:b5:b2:e8:ea:93:a2:07:1c:
         e6:b4:de:9e:42:f1:62:9e:d7:3e:07:dc:db:ae:6f:bc:9b:4f:
         0d:2c:c6:ea:9f:c5:0d:52:25:c7:b9:4f:2f:9e:00:1f:71:62:
         3d:00:ca:5e:88:e6:6f:21:12:fd:ab:1b:f9:58:cd:16:45:d2:
         76:9a:cf:68:5e:ee:68:00:c8:43:69:cb:ad:96:e8:77:be:a9:
         35:d3:ba:36:6a:d0:cd:09:05:5b:26:77:c6:e0:ed:31:b3:91:
         a0:1b:21:bd:1e:6a:ad:4d:80:0c:6f:b8:a7:6b:2d:f4:8f:d6:
         39:7d:3e:86:a5:7b:dd:63:b4:55:c2:49:06:ab:a1:fc:a5:9c:
         dd:16:2f:9e:6c:9e:e4:ed:10:6b:45:43:69:b0:63:2f:50:15:
         1e:66:71:72:9e:f0:a6:b0:9f:6c:37:74:ec:a5:20:94:a2:e1:
         be:45:78:bd:d7:f0:d9:e7:1e:c1:a9:7b:a8:4a:a1:3b:37:31:
         8c:bb:fd:07:58:7c:71:68:5c:80:e5:a4:cd:41:9e:9b:29:1d:
         d4:7d:35:79:d3:e0:64:a3:0b:3a:9a:50:9e:ee:f1:d0:c4:40:
         21:7c:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org