Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/kG1EnEAcc2HojwGARy1LHlSsigM.roa
File:                     kG1EnEAcc2HojwGARy1LHlSsigM.roa (raw, json)
Hash identifier:          mL6u1wtSUoBpHPHGTkkAqCRFT4FXkVpbV9xgaJbAmHk=
Subject key identifier:   90:6D:44:9C:40:1C:73:61:E8:8F:01:80:47:2D:4B:1E:54:AC:8A:03
Certificate issuer:       /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial:       2D
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/kG1EnEAcc2HojwGARy1LHlSsigM.roa
Signing time:             Sat 01 Oct 2022 01:29:34 +0000
ROA not before:           Sat 01 Oct 2022 01:29:34 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9621
IP address blocks:        157.120.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Validity
            Not Before: Oct  1 01:29:34 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=906D449C401C7361E88F0180472D4B1E54AC8A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:da:84:b1:90:b2:fc:9d:18:0f:62:e6:20:
                    77:5a:77:e6:ef:4e:f5:e7:5f:9a:2e:80:f0:31:6d:
                    d6:e4:e8:35:5c:8d:41:ed:2f:49:ff:0b:ad:8d:70:
                    4d:ed:54:fd:36:2f:b2:cb:f9:fa:fe:a7:aa:a0:81:
                    42:3f:9b:17:93:ff:6c:f5:36:85:66:5b:3c:4a:10:
                    5f:db:1d:19:be:5e:bf:c1:d5:52:2c:eb:c8:25:33:
                    4f:a4:65:fe:69:b9:43:b4:c9:da:d4:7b:7c:36:a1:
                    87:4f:ec:cc:1d:d7:88:d1:1a:23:79:96:d0:8a:ab:
                    3b:3c:1c:2d:17:99:03:56:bc:63:ba:e0:4d:8f:0c:
                    40:f9:49:44:51:d5:76:39:9e:c8:22:c7:1a:aa:c7:
                    fd:51:aa:f3:6d:53:a4:1a:e9:89:32:29:68:dd:38:
                    51:62:e6:bc:ca:76:8f:02:f2:d8:cd:c4:95:30:d4:
                    a1:55:85:a9:27:2f:1d:f8:d7:45:21:16:73:6f:a5:
                    20:fe:2e:10:45:54:f1:00:9c:11:66:5a:d9:63:7e:
                    af:78:4e:43:3f:91:6a:92:f1:a3:de:da:7b:55:2e:
                    3c:35:b7:b4:30:52:de:16:b8:b7:63:d4:6d:e4:fe:
                    75:2c:e9:12:e9:27:4a:ac:33:8f:f8:b0:d3:ae:5f:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:44:9C:40:1C:73:61:E8:8F:01:80:47:2D:4B:1E:54:AC:8A:03
            X509v3 Authority Key Identifier:
                keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/kG1EnEAcc2HojwGARy1LHlSsigM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:10:ca:c4:2d:1d:43:d6:c2:f1:25:c8:db:52:c7:8c:10:
         a2:41:95:50:d9:d6:ee:4c:11:cb:67:41:db:35:95:80:d0:d7:
         5e:03:85:0b:a4:06:f5:24:d5:b9:fd:03:09:b5:00:92:64:8f:
         36:78:03:66:65:25:6c:a2:a5:ee:89:31:81:df:e3:9a:66:14:
         1e:38:60:8a:7a:89:34:74:78:07:ea:ab:fe:62:35:f5:30:3b:
         bf:79:b9:50:aa:c4:51:e1:dc:ea:95:f1:39:83:91:27:36:c5:
         5f:9c:ca:a3:90:45:49:1c:3d:0d:05:76:6d:c0:74:bf:03:49:
         d5:b9:d9:b4:43:fc:92:77:e0:f2:e3:9f:b1:c4:d9:86:15:0b:
         02:3f:38:8f:b8:84:b4:63:09:eb:ae:57:bd:c4:bc:60:e6:56:
         05:59:6b:20:67:48:d8:e7:60:e2:7c:c2:1b:ec:9e:98:5d:d4:
         6d:95:91:e7:aa:56:56:90:73:9b:b5:67:a6:49:65:7e:0e:82:
         20:e9:38:41:e6:28:7f:3c:ec:cc:b2:ef:e8:7d:90:62:f9:29:
         f9:b2:35:9f:8a:e0:cf:ae:ae:91:3e:fc:eb:88:4c:50:e0:17:
         10:c9:e7:16:d6:af:8e:4c:ae:19:eb:83:4f:a5:9b:93:0e:38:
         7f:51:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org