Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/EHzRdOCwDOQ6230qBabILKjHxX4.roa
File:                     EHzRdOCwDOQ6230qBabILKjHxX4.roa (raw, json)
Hash identifier:          k2hu5fe6Zbt7PnsKmbjYY+a4EQBhTXAivToNGvriZcw=
Subject key identifier:   10:7C:D1:74:E0:B0:0C:E4:3A:DB:7D:2A:05:A6:C8:2C:A8:C7:C5:7E
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       5D
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/EHzRdOCwDOQ6230qBabILKjHxX4.roa
Signing time:             Mon 01 Aug 2022 01:29:05 +0000
ROA not before:           Mon 01 Aug 2022 01:29:05 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        221.170.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:05 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=107CD174E0B00CE43ADB7D2A05A6C82CA8C7C57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:42:37:aa:54:9e:1f:03:e2:79:79:d6:d5:
                    a8:d7:c7:31:cf:ed:c3:50:90:03:e0:e5:2c:0c:4f:
                    e6:f9:54:6a:f2:17:b9:42:fc:23:ec:76:c0:be:4c:
                    a8:b9:b7:89:16:32:1a:7a:a3:05:13:cd:6a:de:d0:
                    eb:0a:b6:29:d7:ff:07:e6:5a:a5:8c:41:07:be:81:
                    a2:cc:1b:b3:cb:55:e4:fe:35:e7:6a:21:b6:cf:20:
                    b1:00:a9:77:f5:71:db:6f:89:f3:ac:78:b5:bd:e7:
                    47:af:25:ea:9f:b1:5c:27:9a:fc:3e:c3:07:16:a3:
                    c5:85:05:1e:86:76:b0:38:c4:16:3c:9f:2d:7f:0d:
                    79:e3:17:54:50:1b:88:0b:c8:c3:e0:78:5e:ce:c8:
                    02:ce:a5:e4:89:15:2e:02:81:f1:ee:de:01:f8:63:
                    22:89:97:b6:73:c9:b5:33:e9:20:f8:14:5c:12:77:
                    32:69:7d:a4:26:dc:08:2f:e9:07:55:e3:58:b2:64:
                    a0:9c:0a:42:65:37:98:d9:fd:62:9e:f6:03:dd:82:
                    6c:37:93:03:ba:4c:62:ea:42:ae:22:77:d7:ee:f1:
                    18:62:10:37:4d:b4:19:24:80:85:1c:2e:6c:07:23:
                    4a:12:03:d3:85:20:1d:bd:a6:86:e8:ef:5f:80:0c:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:D1:74:E0:B0:0C:E4:3A:DB:7D:2A:05:A6:C8:2C:A8:C7:C5:7E
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/EHzRdOCwDOQ6230qBabILKjHxX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.170.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b8:11:69:fe:74:e2:21:42:6e:e7:72:b0:cc:00:9a:00:9f:c9:
         8d:17:84:4c:e2:96:f4:3e:f2:30:57:6a:b6:32:21:bf:53:07:
         c8:a4:8f:c1:53:a2:a1:c8:63:27:5d:d3:09:1a:ee:57:bf:86:
         c2:22:b2:53:28:46:2e:08:4f:58:bc:fc:69:b9:c7:3a:3b:61:
         ae:75:52:71:f6:ed:9a:c8:df:6e:7a:46:60:27:2e:7e:1d:49:
         8a:a2:21:ba:98:5d:cb:72:33:0f:12:c2:fc:99:d6:e3:6e:4f:
         66:35:5a:71:0a:cf:05:3c:42:b2:c3:b7:0e:22:4d:e9:42:17:
         95:09:af:f2:97:eb:bb:e7:f1:8c:b3:de:73:df:f6:15:c1:0a:
         b3:f8:47:0d:a1:40:b3:2d:e3:2b:a8:27:53:04:31:ea:d9:2b:
         51:94:61:dc:16:89:4f:50:fb:b8:38:78:4c:b3:52:e0:bd:03:
         4d:e6:30:0f:db:70:1f:64:22:de:fb:07:43:ee:d8:29:b4:20:
         ef:58:af:8e:a9:0c:9e:38:91:a4:41:d1:17:f7:76:01:56:6e:
         b5:5b:9d:9b:f4:db:5c:83:28:68:49:18:1f:35:e0:b4:01:92:
         c8:da:2a:2e:a2:64:61:8a:c7:b6:a1:e2:9f:58:f2:66:4e:ba:
         06:94:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org