Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/2NHJZH39P2o2WQxpivPlEqNN4Wg.roa
File:                     2NHJZH39P2o2WQxpivPlEqNN4Wg.roa (raw, json)
Hash identifier:          w6FzS1NH0715TszP0mfwA5PzoZrpP7f22EsewZvnlp8=
Subject key identifier:   D8:D1:C9:64:7D:FD:3F:6A:36:59:0C:69:8A:F3:E5:12:A3:4D:E1:68
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       15
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/2NHJZH39P2o2WQxpivPlEqNN4Wg.roa
Signing time:             Mon 13 Jun 2022 06:20:46 +0000
ROA not before:           Mon 13 Jun 2022 06:20:46 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     23778
IP address blocks:        116.50.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Jun 13 06:20:46 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=D8D1C9647DFD3F6A36590C698AF3E512A34DE168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:33:9c:c3:72:f4:b4:37:43:1b:3e:23:65:
                    16:ce:9d:35:ca:9c:63:2d:4c:b1:1b:f5:a6:6b:e8:
                    09:9b:59:35:4f:ee:19:60:cb:97:e2:3e:b9:2d:9d:
                    59:39:16:c7:e7:e7:52:b7:01:80:ef:1a:9b:c5:82:
                    82:f1:52:f8:b8:cd:8f:e9:41:4c:5e:93:02:33:ac:
                    f7:66:13:cf:1c:1f:36:e4:ec:12:90:a3:22:d1:b7:
                    b1:7f:96:a9:08:77:57:20:3e:4e:a1:6d:0a:1f:b0:
                    61:60:38:1a:15:ce:80:b9:a0:ef:4b:52:b3:f2:fd:
                    6e:4a:ec:85:7b:25:14:16:aa:fd:72:27:3b:bf:1a:
                    6d:92:19:f0:27:82:0a:f8:90:d1:96:65:54:ca:cc:
                    3f:eb:1f:6b:63:5c:bc:6a:c2:a0:ad:2d:b4:2f:35:
                    62:53:e8:6b:c0:04:a4:9b:d0:06:3d:ff:73:85:0d:
                    ec:2e:d4:2f:19:04:d8:78:66:83:6e:6c:3f:d1:2e:
                    3d:8f:6d:a2:9f:ef:97:e0:42:2d:8c:0d:59:a0:36:
                    5e:9e:be:7e:2d:37:cd:a5:c3:c8:bf:15:4e:8f:88:
                    34:bf:cc:94:7f:ef:cc:72:cf:79:ec:d4:2d:cf:90:
                    81:1d:e4:06:41:fd:53:4b:72:cd:98:da:28:3a:56:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D1:C9:64:7D:FD:3F:6A:36:59:0C:69:8A:F3:E5:12:A3:4D:E1:68
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/2NHJZH39P2o2WQxpivPlEqNN4Wg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:2e:03:00:0b:4d:a0:46:38:47:d9:db:86:3d:d4:64:c1:
         5b:10:26:2d:38:cb:0d:ec:a2:83:fe:70:25:fc:8f:c9:4a:54:
         86:32:28:4c:a4:6d:b6:f5:de:f3:79:28:5a:14:74:a7:bc:e7:
         df:ab:7c:7e:0c:3e:71:2c:12:e4:58:06:28:5b:c5:dc:99:fa:
         58:67:da:32:11:ec:c6:d0:15:dc:29:29:64:fc:92:e8:a4:83:
         63:39:56:e8:b6:44:72:ab:5e:23:71:60:cd:f0:51:4f:e5:72:
         60:92:12:ee:69:3e:c3:45:7d:ab:0d:c8:db:62:f1:a9:b8:d2:
         7a:a3:bc:6a:0f:38:47:55:99:52:7d:b5:e1:07:7a:90:ad:7b:
         15:3f:4e:42:8d:f3:b5:c6:11:1f:17:9f:10:f4:c0:da:3c:71:
         32:4c:ec:23:e7:45:9f:26:f2:5b:7c:92:4f:b2:c3:5b:58:c4:
         98:54:a7:c6:31:81:12:4e:d5:4a:66:7a:ba:4f:3d:8c:91:aa:
         74:fe:e0:f7:ac:ae:f2:4c:df:c1:c4:82:7c:2e:77:15:f0:41:
         a5:4d:ff:c5:8d:21:ca:aa:db:02:1c:60:d7:25:c7:07:0d:71:
         31:52:55:ba:15:eb:8b:c2:48:87:b9:19:46:8b:b2:00:80:15:
         6e:85:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org