Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/cqeOPNAYMR2hRM4sadOwFoDHHP8.roa
File:                     cqeOPNAYMR2hRM4sadOwFoDHHP8.roa (raw, json)
Hash identifier:          dIt5e2sZSBWI272ht026ZcoJTtApkYcUo+Z7qJNOBtY=
Subject key identifier:   72:A7:8E:3C:D0:18:31:1D:A1:44:CE:2C:69:D3:B0:16:80:C7:1C:FF
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       1A
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/cqeOPNAYMR2hRM4sadOwFoDHHP8.roa
Signing time:             Thu 13 Apr 2023 09:51:24 +0000
ROA not before:           Thu 13 Apr 2023 09:51:24 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     131934
IP address blocks:        210.231.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Apr 13 09:51:24 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=72A78E3CD018311DA144CE2C69D3B01680C71CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:a5:bd:ab:ef:b9:6b:8f:cc:55:a1:d0:5f:
                    75:61:a0:95:b2:6e:35:8f:dc:14:8e:c1:3c:b5:7f:
                    44:e5:83:df:30:38:b0:4e:bc:5d:c5:07:c2:16:3e:
                    33:88:cf:b5:d3:02:2a:cf:6f:d6:79:46:df:57:cd:
                    81:af:6f:c8:2a:51:13:2d:eb:b1:7a:f3:7f:b8:8f:
                    ed:71:5a:c1:13:66:24:6e:4c:e7:ef:b9:7b:bb:16:
                    76:22:e1:76:e7:2d:4b:a0:b3:88:73:22:99:29:53:
                    e2:f4:96:2c:47:aa:e2:09:fc:d4:17:72:2e:71:9c:
                    8a:e7:7b:7e:d4:4f:a6:b1:7f:c0:64:9e:d0:36:08:
                    77:8b:e5:7e:01:fb:b3:cd:ca:a6:dd:cd:e5:d0:a1:
                    74:e3:13:96:f7:97:f1:fb:c3:81:4a:95:94:dc:ae:
                    f5:99:0b:b1:1e:9b:5f:8d:70:8f:ae:95:d8:ce:3d:
                    c0:00:27:04:f5:a3:ac:ce:30:5a:cd:76:00:fc:52:
                    02:33:c4:34:a4:97:f9:90:6a:6d:6f:14:c4:81:aa:
                    5b:f9:4a:50:24:0a:c9:1f:b0:59:17:73:9c:a6:93:
                    1a:b6:d5:14:ad:7e:ff:6c:5a:2b:57:06:28:9a:8c:
                    ef:df:d8:b7:bd:3a:64:e2:36:c5:87:f0:29:29:94:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:8E:3C:D0:18:31:1D:A1:44:CE:2C:69:D3:B0:16:80:C7:1C:FF
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/cqeOPNAYMR2hRM4sadOwFoDHHP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:d2:d3:36:08:74:2b:7b:e7:e3:25:53:d4:d3:98:b8:52:
         49:51:4d:3c:06:9d:e0:06:51:36:09:0a:c4:b9:ca:6a:3c:e2:
         ab:e5:b6:89:bd:67:1f:ce:b2:a6:a6:4e:92:69:cd:c5:f4:7a:
         56:06:08:2a:ee:bd:0e:f5:50:85:51:54:71:ef:70:e3:ad:ab:
         a7:14:8b:49:7a:55:b3:6e:1b:cf:3b:9b:b4:43:b7:25:a3:b6:
         47:fc:5a:01:1a:c5:cb:5e:bd:81:4c:08:c5:ab:1b:82:36:0f:
         6b:47:78:d4:51:a9:9c:98:8d:66:57:28:b9:37:b2:94:61:52:
         81:7e:c0:1f:df:a6:62:60:b0:ab:68:f0:b0:20:ee:63:0f:9e:
         70:df:d2:f5:4a:a0:7b:a5:19:9e:19:76:c5:0a:d4:24:6d:c8:
         31:8d:4a:33:86:21:6a:9b:82:93:fa:b6:50:88:3f:20:61:7d:
         66:91:ec:d2:b1:57:ec:27:a1:16:78:43:e6:b3:3c:df:be:f7:
         1d:b5:61:29:52:a0:28:8d:5c:b1:9f:61:23:b9:a3:78:0a:9a:
         2f:84:c3:5b:79:4a:b6:31:af:a7:f9:28:a8:f6:9a:cd:71:ab:
         33:60:15:4b:78:f5:24:e2:37:d3:c2:35:7b:97:16:55:c9:97:
         c1:cb:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org