Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/5pvbqTqlEcihEtT4Yd98pDCYjP0.roa
File:                     5pvbqTqlEcihEtT4Yd98pDCYjP0.roa (raw, json)
Hash identifier:          wLMEIFr040ThN/VpheuaVSoAOCLAzSzVOr3XjGTqON0=
Subject key identifier:   E6:9B:DB:A9:3A:A5:11:C8:A1:12:D4:F8:61:DF:7C:A4:30:98:8C:FD
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       28
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/5pvbqTqlEcihEtT4Yd98pDCYjP0.roa
Signing time:             Tue 01 Nov 2022 01:28:27 +0000
ROA not before:           Tue 01 Nov 2022 01:28:27 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23805
IP address blocks:        27.100.48.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Nov  1 01:28:27 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E69BDBA93AA511C8A112D4F861DF7CA430988CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:2e:2e:b8:1e:4f:77:f5:46:28:b8:2b:f2:
                    65:66:a0:39:9d:59:50:9d:50:06:a4:b4:7d:84:89:
                    29:aa:db:15:b5:24:2f:f7:ea:30:35:98:5c:5a:2e:
                    9a:e6:8d:e5:c5:52:bb:0d:85:5a:44:e6:68:90:8b:
                    4a:7c:c7:13:c1:4f:5b:70:ac:1b:47:6e:27:ae:5a:
                    45:5c:c9:87:bc:45:aa:d3:0f:d8:0d:c4:36:3c:e7:
                    a9:5a:29:96:0f:30:21:bd:4d:49:87:20:db:da:55:
                    a5:09:4a:05:73:56:75:36:a7:b4:da:5e:82:a2:e6:
                    b8:67:d1:85:d9:27:62:98:7a:23:f8:7a:49:31:c0:
                    e2:25:88:63:5a:17:f7:d6:c9:af:78:40:3d:63:d1:
                    5b:5b:25:4f:ed:cc:97:b6:5e:e6:cb:1f:3e:42:c4:
                    6c:65:97:51:ea:5e:19:cc:2f:5b:17:28:da:3c:a1:
                    d1:6e:ee:84:54:75:ed:8d:db:13:56:17:21:c7:e3:
                    4d:a9:b3:73:28:2c:01:12:56:be:0e:70:84:03:12:
                    b9:b9:66:f2:e3:70:80:79:01:9f:76:32:da:4e:b8:
                    4c:a6:59:2a:6e:0d:e7:fc:57:08:dd:ca:67:6d:22:
                    74:61:c6:b9:ec:6c:5f:c2:ed:99:11:5b:1f:81:55:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:DB:A9:3A:A5:11:C8:A1:12:D4:F8:61:DF:7C:A4:30:98:8C:FD
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/5pvbqTqlEcihEtT4Yd98pDCYjP0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.100.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:c0:61:c9:b4:f9:96:66:e1:18:36:bd:89:8d:81:b5:5a:
         89:00:1f:ac:ca:f2:17:02:22:a7:af:6a:42:42:89:27:fe:c8:
         7d:26:8c:72:0e:f1:f0:d4:50:c6:b7:8f:21:9f:73:16:74:23:
         93:7c:2a:6e:dc:07:e1:f1:4b:c6:27:2c:cf:bf:fe:5c:05:64:
         a8:9c:00:f9:31:87:4d:f6:61:b4:40:e5:f1:9b:e0:80:e1:70:
         54:80:65:48:14:93:9d:f5:05:26:7b:f6:94:1d:2c:76:f6:02:
         12:22:d6:0f:87:21:98:43:cc:bb:51:7d:9c:34:94:ce:fc:1d:
         06:55:05:e5:5e:d2:76:0c:c2:fb:23:45:e7:d0:cc:af:f8:71:
         68:de:c2:2a:14:a0:a9:bb:14:43:b4:bf:b5:a3:4c:c7:9d:2d:
         a9:f3:a9:9d:6d:b8:e3:ba:d4:17:b2:0e:57:57:1b:67:24:da:
         f5:fe:2c:e0:f0:31:33:fc:19:43:b5:df:ec:42:6d:c5:4b:86:
         e8:e3:06:98:10:20:e1:cf:17:9c:52:80:84:d7:3a:04:bc:b1:
         6b:f7:2f:5b:84:54:4e:61:0a:ba:d7:c3:b5:b8:35:b2:5e:74:
         a8:62:89:cb:80:11:ea:57:25:b4:dc:e4:07:d1:22:84:08:e3:
         69:88:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org