Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/wji89nvim4UnmJ9PDlARVwDV7to.roa
File:                     wji89nvim4UnmJ9PDlARVwDV7to.roa (raw, json)
Hash identifier:          eea0mDGIEZzZGdGqAsrTDdOBusl7QA2wHfdtR6HX3iA=
Subject key identifier:   C2:38:BC:F6:7B:E2:9B:85:27:98:9F:4F:0E:50:11:57:00:D5:EE:DA
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       35
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/wji89nvim4UnmJ9PDlARVwDV7to.roa
Signing time:             Sun 01 May 2022 01:31:15 +0000
ROA not before:           Sun 01 May 2022 01:31:15 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     37892
IP address blocks:        202.220.6.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May  1 01:31:15 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C238BCF67BE29B8527989F4F0E50115700D5EEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:06:79:ea:15:a3:7d:d0:96:c5:f0:ca:03:
                    df:b1:b6:18:05:23:ec:86:ad:56:81:c1:e2:41:d1:
                    b9:a9:30:23:3b:d9:9b:07:1a:aa:6e:41:a6:c8:c7:
                    35:3f:ae:5f:83:2d:a3:74:33:82:6c:23:a8:49:29:
                    4d:b3:4b:81:cc:83:0b:1f:bb:08:33:27:78:12:ad:
                    bd:0a:3e:8e:1f:c0:6a:5c:b1:36:2b:d0:b9:41:12:
                    32:34:c4:cc:31:2c:38:99:9f:04:eb:06:d2:22:d0:
                    5f:24:34:a4:cc:eb:81:34:7d:c7:8b:19:f9:5c:7c:
                    1a:ee:9f:01:20:bd:7c:3e:3c:23:ea:7f:7c:13:a2:
                    71:f8:c6:9e:42:36:1d:ad:b4:d7:ec:b9:95:be:8e:
                    19:07:bd:10:94:64:f2:30:e4:d2:2f:56:35:de:e5:
                    20:d3:fc:47:a4:c0:0d:fd:b4:a0:02:33:82:1d:83:
                    bd:60:06:fb:d7:4a:7f:51:09:48:08:24:53:84:6f:
                    a8:fd:cf:4e:96:66:85:07:22:59:c7:8e:5f:f9:2b:
                    20:cd:48:eb:53:39:ef:9a:15:39:50:e7:9b:81:99:
                    75:19:5b:ac:53:0e:b2:a4:d0:d5:b2:ea:c9:f3:14:
                    2e:8c:40:7d:cd:c5:cd:47:3a:9f:e2:a3:23:48:dc:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:38:BC:F6:7B:E2:9B:85:27:98:9F:4F:0E:50:11:57:00:D5:EE:DA
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/wji89nvim4UnmJ9PDlARVwDV7to.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.220.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:3b:b3:65:92:54:99:31:6d:1a:c5:49:f6:67:3e:fe:0a:
         ed:f0:e8:88:59:e6:48:6e:85:a5:cd:f8:2b:42:cd:cd:38:e7:
         d8:fb:8e:55:a1:cc:e5:ee:6e:79:ea:1d:fb:3c:50:ac:d9:02:
         1e:c6:03:34:f5:b7:41:de:3e:94:55:47:6d:81:ae:4d:7d:a8:
         ab:ca:08:d2:2d:b8:52:3c:d3:2e:cb:d2:cb:1f:a2:10:33:be:
         26:f6:d6:40:40:89:70:8e:b3:f1:3a:d2:bd:4a:fb:6e:f7:ee:
         5f:d8:9d:2b:d8:0c:fa:5b:06:91:a2:aa:ab:79:3e:3c:55:13:
         25:fb:8d:93:af:22:7c:0a:a5:e1:12:71:81:f5:43:39:b5:65:
         ca:42:22:04:ca:5c:f0:07:fb:21:ca:44:69:48:c9:22:92:b6:
         c4:9b:c4:a6:b3:ee:4f:46:68:cb:d4:ea:db:9f:84:17:bd:92:
         4f:83:cb:d8:36:2a:75:ba:3b:e8:a2:89:b7:f0:eb:ec:7d:de:
         c4:a0:1d:e7:4a:a0:fe:fd:c1:83:38:a1:63:54:7d:dd:5f:f4:
         99:67:f2:eb:99:f6:17:88:3a:b5:d4:c8:21:74:16:1f:e6:67:
         93:44:0e:d0:cb:06:4c:bf:b6:11:7a:cd:6b:52:cc:c9:41:50:
         68:42:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org