Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/IouabXDRcsLyZihLMQu0TZ9yvQ0.roa
File:                     IouabXDRcsLyZihLMQu0TZ9yvQ0.roa (raw, json)
Hash identifier:          VXoqSFGAxKIZg1OCDZPPO+Kcejmb8lM7eIx1vBIExNs=
Subject key identifier:   22:8B:9A:6D:70:D1:72:C2:F2:66:28:4B:31:0B:B4:4D:9F:72:BD:0D
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       4B
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/IouabXDRcsLyZihLMQu0TZ9yvQ0.roa
Signing time:             Thu 13 Apr 2023 09:54:17 +0000
ROA not before:           Thu 13 Apr 2023 09:54:17 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     37892
IP address blocks:        124.247.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Apr 13 09:54:17 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=228B9A6D70D172C2F266284B310BB44D9F72BD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:32:0f:86:75:74:7b:39:1b:ca:0a:fb:b5:
                    15:2e:76:02:ed:93:11:10:b0:35:27:14:a8:87:33:
                    91:15:09:9e:39:d5:62:aa:ee:0c:0d:cf:d3:57:02:
                    70:bc:7b:68:b1:bd:bb:56:51:f8:1b:0d:a2:10:e4:
                    df:b7:06:16:d1:f0:0b:4c:98:82:0e:28:69:43:63:
                    51:df:c3:d0:40:9d:1e:d2:98:3d:f6:6e:03:b2:26:
                    16:51:9c:0b:6c:36:07:d1:26:c9:fa:6b:bc:9b:e0:
                    a1:83:82:8b:ee:d4:22:ae:24:9f:cc:bf:cc:21:af:
                    66:73:6d:bc:6f:7e:90:7d:ed:20:e1:d6:11:64:1c:
                    bb:2a:17:7f:c2:de:74:de:38:8f:cc:8d:6d:e7:b5:
                    40:6b:b0:a8:f2:12:14:52:d1:80:3c:cf:2f:1d:a1:
                    3f:78:03:52:2a:32:d0:f6:a5:ba:03:75:35:f1:3b:
                    52:08:68:7d:28:34:a7:c3:24:c9:9b:32:3f:76:3b:
                    0a:62:9d:cd:1e:4c:2d:5a:c6:da:57:b6:40:00:bd:
                    25:6a:59:52:d8:66:dd:ab:01:4b:29:e1:99:e2:4c:
                    a2:b7:74:ae:d0:39:5d:f7:ee:24:13:f4:48:05:15:
                    b9:ef:07:a3:b0:bd:1f:75:07:69:1a:2d:24:a2:18:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:9A:6D:70:D1:72:C2:F2:66:28:4B:31:0B:B4:4D:9F:72:BD:0D
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/IouabXDRcsLyZihLMQu0TZ9yvQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:d4:29:2d:6e:4e:e2:5d:bf:8a:5c:46:a7:58:88:d3:36:
         ac:58:65:11:b5:df:05:a0:4b:c9:ba:c5:a4:fa:1f:39:75:b8:
         9d:7d:8b:d2:25:b4:d5:af:d5:55:51:65:c0:f6:bd:aa:e0:f1:
         5f:e0:6d:70:07:4c:d4:86:f9:b2:38:99:62:b5:e5:a5:e1:1d:
         26:40:6a:8e:87:47:e4:7c:98:b2:d5:a0:62:7b:22:90:38:00:
         8b:66:8d:8b:e0:1d:fb:d3:22:ca:ab:6e:d8:7c:1a:ff:30:f3:
         6a:81:98:38:00:c5:2e:e2:83:2b:d4:05:8d:89:46:cd:1c:68:
         a8:e1:27:87:f4:5e:73:5b:c8:0d:f9:9f:6b:0c:f5:83:f8:fb:
         07:10:9f:97:9e:03:d3:49:28:30:ee:ff:0c:22:c2:9a:f8:22:
         19:34:aa:83:e9:48:e5:c7:66:24:7b:53:af:7c:d7:9e:84:5d:
         d9:24:da:09:15:f7:a8:0e:13:54:3d:b4:aa:7d:a8:11:c5:8c:
         55:d0:1c:c2:70:c4:53:c2:cc:12:44:22:42:eb:92:93:45:cf:
         23:bc:b7:c2:ed:29:a9:f3:4b:9e:19:61:34:eb:36:ed:6d:dc:
         56:eb:e3:9d:75:4d:26:ff:50:e2:02:ce:3c:41:03:9a:4e:de:
         a8:94:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org