Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/853/7OKQ0TgEVAuu7R5WuzuUop7OgKY.roa
File:                     7OKQ0TgEVAuu7R5WuzuUop7OgKY.roa (raw, json)
Hash identifier:          fPr7qo3g+5QB8AEo5xc53yuHLPOU+cbm2/AnHqm1zy8=
Subject key identifier:   EC:E2:90:D1:38:04:54:0B:AE:ED:1E:56:BB:3B:94:A2:9E:CE:80:A6
Certificate issuer:       /CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
Certificate serial:       24
Authority key identifier: 27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/7OKQ0TgEVAuu7R5WuzuUop7OgKY.roa
Signing time:             Sun 01 May 2022 01:30:45 +0000
ROA not before:           Sun 01 May 2022 01:30:45 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2506
IP address blocks:        202.249.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
        Validity
            Not Before: May  1 01:30:45 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=ECE290D13804540BAEED1E56BB3B94A29ECE80A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:7c:3e:16:fd:e5:e7:f0:18:1a:10:7b:64:
                    cd:c2:20:9a:6c:26:1c:b2:1f:b1:d1:8a:32:69:94:
                    e0:b6:46:a1:79:c8:ec:d9:15:5e:87:37:b6:2b:75:
                    f2:96:94:c6:2f:dc:16:64:11:c4:35:2c:15:0c:9e:
                    1f:98:c2:fb:8c:9e:02:74:18:e5:ee:2c:39:3d:ec:
                    7f:7b:6e:31:81:28:ef:67:28:2d:0e:c4:0b:52:53:
                    da:0d:90:c7:73:25:3d:c9:d3:4f:bd:da:d2:73:db:
                    9d:15:ff:41:7b:8e:62:c2:1c:46:d6:c4:10:de:90:
                    56:37:43:b2:d9:fe:21:e2:d5:80:4f:13:41:82:82:
                    75:05:48:16:4a:85:2e:56:96:9e:4d:f6:1d:b1:1e:
                    bb:a8:d7:f1:44:32:bb:84:ad:e4:ff:1a:41:94:c0:
                    66:25:bc:a6:cd:ca:f4:11:d9:ca:8a:42:a4:a4:13:
                    b2:e0:4c:05:06:c1:79:f1:75:b4:1e:49:a8:c5:01:
                    d7:28:87:2c:0a:7c:cc:ba:5d:17:2c:be:54:64:20:
                    65:56:38:4d:cd:bc:8f:c2:c3:94:ab:ae:c7:a3:5c:
                    7e:18:2c:77:08:97:0d:a2:a0:96:df:18:c8:af:d0:
                    54:42:ae:17:08:b8:8d:b2:6b:79:b3:50:ff:c6:d2:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:90:D1:38:04:54:0B:AE:ED:1E:56:BB:3B:94:A2:9E:CE:80:A6
            X509v3 Authority Key Identifier:
                keyid:27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/J6wM0khnq-iA-7dCP9OYDb-kMdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/7OKQ0TgEVAuu7R5WuzuUop7OgKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:43:5a:50:ca:65:5a:ac:da:c5:8e:aa:71:ea:ef:ba:c0:02:
         e8:cf:ab:0a:66:d3:96:9d:91:56:b6:68:da:36:c3:55:83:3e:
         dd:6e:ce:ef:09:6a:3a:e7:9c:38:32:04:b5:ee:26:ac:9c:07:
         3a:21:c1:48:52:b0:6a:17:84:23:1a:d4:23:1a:47:d0:af:b7:
         7c:47:99:79:42:93:2d:2c:6e:d0:81:12:95:98:a5:3c:33:70:
         e3:03:82:ae:00:a4:55:dc:6a:d7:5f:ea:c5:f2:1f:7d:45:ef:
         b9:b9:70:17:ff:84:7c:45:d7:7d:4e:14:5e:14:7e:91:25:35:
         c2:3e:f5:9e:74:6d:7f:b5:b5:dc:c1:12:92:ef:0d:81:f4:22:
         6d:fc:de:ff:67:01:be:62:c1:46:c3:47:4c:e9:d7:f3:d0:a7:
         27:be:34:97:43:80:11:4d:31:4f:15:94:4c:35:20:08:d8:03:
         d6:21:ad:32:5a:ef:6c:66:3d:8c:42:2e:a6:49:77:d6:38:7f:
         e7:0b:b3:c1:06:ce:23:01:cf:33:c8:50:99:12:7e:51:74:6b:
         c1:a7:ca:8e:94:b0:a8:ea:61:77:ab:fc:32:97:aa:d9:0e:b9:
         95:9f:47:b5:5e:56:a2:30:ec:37:5a:2f:9e:c1:fe:c7:99:0f:
         1f:95:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org