Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/tIZDQ06gfTyLlAPxqb4bJFEeBgA.roa
File:                     tIZDQ06gfTyLlAPxqb4bJFEeBgA.roa (raw, json)
Hash identifier:          heaXcXaapFpOVVmRf5ul2fBkSgSSFZaLqvrtqhwO/YM=
Subject key identifier:   B4:86:43:43:4E:A0:7D:3C:8B:94:03:F1:A9:BE:1B:24:51:1E:06:00
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       55
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/tIZDQ06gfTyLlAPxqb4bJFEeBgA.roa
Signing time:             Sun 01 Jan 2023 01:29:23 +0000
ROA not before:           Sun 01 Jan 2023 01:29:23 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     9621
IP address blocks:        119.59.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Jan  1 01:29:23 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=B48643434EA07D3C8B9403F1A9BE1B24511E0600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:a3:68:d9:e3:1b:c0:3f:11:e9:81:ea:fd:
                    13:16:40:c4:99:00:42:dc:6d:5a:a6:8c:d1:b8:02:
                    5c:87:e7:54:07:d3:40:40:01:95:cc:15:9c:13:90:
                    0e:eb:ee:d5:b2:66:4a:a2:b3:20:f3:82:5d:12:9c:
                    c2:40:62:a0:0a:1e:c1:8b:28:34:f3:c6:fa:fd:3e:
                    68:d0:89:56:46:d7:ea:66:b3:5d:ab:99:b8:6e:f0:
                    23:f3:e5:14:8a:1d:6c:4f:5a:d9:d0:51:cd:01:9f:
                    69:cb:d7:7b:c8:c9:ac:e1:19:3a:3c:10:84:d7:8c:
                    8e:72:04:38:66:88:70:3f:e7:e9:f5:8a:33:f2:a1:
                    53:e2:ad:ef:4b:b6:24:7f:2d:65:d6:7d:80:87:f5:
                    fa:96:49:69:96:d5:24:a2:4b:8e:b4:fa:a2:95:b0:
                    75:1a:d4:b5:a1:e0:bc:fa:1f:2f:fe:cc:2c:42:b8:
                    32:7e:55:62:8a:ae:f3:36:2d:6c:e4:6b:97:49:77:
                    2e:dd:26:40:ca:e8:04:86:a6:d9:4f:d3:79:d7:d1:
                    3e:7c:a1:dd:09:58:5b:79:e4:68:9c:57:3f:df:3e:
                    5f:48:12:f2:76:aa:7d:bc:29:f5:2e:68:ab:92:c4:
                    d8:01:ef:3f:f9:5c:4d:f8:ca:50:e1:a1:77:78:96:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:43:43:4E:A0:7D:3C:8B:94:03:F1:A9:BE:1B:24:51:1E:06:00
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/tIZDQ06gfTyLlAPxqb4bJFEeBgA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:5f:73:cc:e8:2c:0a:51:9b:bc:e9:12:d5:15:9a:81:7a:
         ca:99:65:71:fc:bd:3c:f6:bf:c7:61:4e:74:df:79:18:85:8a:
         a3:a7:21:21:41:99:48:56:f2:49:65:ec:f3:0e:4a:06:da:5f:
         c7:c6:d7:6f:ac:7a:bc:07:3a:ba:47:16:63:b2:9e:1f:f5:80:
         26:e3:15:da:9e:0c:82:de:0c:b8:5e:f9:29:8b:46:d1:62:6c:
         6b:91:03:88:de:25:c1:f8:88:4c:69:9c:9b:80:95:d9:fb:fb:
         78:c9:d1:e7:d9:7c:fb:f9:96:f7:15:ce:59:ee:44:d9:26:5b:
         f3:0e:1b:62:ef:fa:b1:38:59:7b:ee:10:e4:95:6a:9f:d3:bb:
         26:e3:05:d2:d4:df:c5:c1:31:f2:10:00:d6:5f:12:57:81:66:
         e6:76:dc:36:bc:22:30:88:6f:fa:c1:6e:f0:ee:d8:10:0e:74:
         d4:6b:98:25:25:ae:60:a7:b3:c1:78:37:53:85:72:e1:7c:86:
         be:44:83:44:13:d3:7e:79:37:81:a0:84:34:32:10:08:a3:65:
         03:a4:be:1e:ff:72:9e:83:53:a6:81:df:99:80:d1:8c:6a:73:
         11:86:37:fc:d9:98:21:0a:ab:b8:61:d6:74:97:45:b1:f2:57:
         74:0c:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org