Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/RHMlSqirgE1zy0mIHYHaAvhJzxY.roa
File:                     RHMlSqirgE1zy0mIHYHaAvhJzxY.roa (raw, json)
Hash identifier:          1upXwaEaPI1vOJBs5d24T0jR3qBjg8+GXnpzU2IBSaQ=
Subject key identifier:   44:73:25:4A:A8:AB:80:4D:73:CB:49:88:1D:81:DA:02:F8:49:CF:16
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       5A
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/RHMlSqirgE1zy0mIHYHaAvhJzxY.roa
Signing time:             Mon 01 Aug 2022 01:29:04 +0000
ROA not before:           Mon 01 Aug 2022 01:29:04 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        119.244.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:04 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=4473254AA8AB804D73CB49881D81DA02F849CF16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:9f:4b:93:a6:2c:0e:1e:2b:c8:3a:6f:bb:
                    4b:8c:6f:ab:60:81:02:f5:da:59:93:97:16:db:99:
                    44:d1:39:8c:63:76:cf:fd:a1:51:56:be:55:51:ef:
                    e7:d9:47:ab:aa:45:9d:4c:d3:05:98:a4:a1:c7:97:
                    66:7e:bc:f5:54:ca:95:49:4b:b0:ab:3b:99:c0:c4:
                    e1:a9:dc:0a:4b:50:6f:ca:c7:62:78:69:9f:cc:24:
                    b6:52:dc:60:8d:fc:06:9a:a1:4f:e4:3e:8b:35:6d:
                    56:b0:e1:74:48:26:e4:8c:c7:7b:9a:07:10:42:84:
                    f4:ee:05:78:8e:fe:ac:19:50:e9:ad:78:0a:09:ed:
                    30:39:c8:c5:82:20:7f:d5:bd:9a:05:69:1f:c8:73:
                    26:b3:86:cc:f7:c8:81:28:00:b6:5a:56:76:9c:2f:
                    60:78:1f:5a:9f:c1:d7:02:db:9c:13:14:ac:2f:b4:
                    ad:5f:fb:71:ed:99:8f:0f:f1:c3:e4:44:e0:28:ad:
                    40:84:43:4d:f7:47:75:12:fe:fb:50:77:d2:99:54:
                    9d:38:34:82:88:72:4b:bc:58:d6:69:d4:58:b2:fb:
                    1f:1f:f4:11:76:77:d5:5f:7d:d7:57:54:01:fb:0a:
                    ee:ea:a8:c8:c7:28:57:52:c2:ea:29:47:41:56:9c:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:25:4A:A8:AB:80:4D:73:CB:49:88:1D:81:DA:02:F8:49:CF:16
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/RHMlSqirgE1zy0mIHYHaAvhJzxY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:19:7c:36:e6:0d:4f:46:25:e0:a3:f6:77:f8:8f:58:21:11:
         14:fb:0f:db:22:0b:d3:49:d3:c6:10:ac:11:87:37:0f:49:7a:
         74:e0:3c:dd:e8:3d:b1:c0:46:f2:3a:ab:1e:d8:45:c5:53:55:
         d8:82:20:ea:b5:3c:52:4a:62:75:29:57:16:26:17:bd:39:fc:
         21:e3:31:14:3f:86:2e:15:23:3f:88:9b:44:39:e0:8d:1d:c5:
         51:81:ef:ae:98:b0:78:e5:4a:f8:92:59:7a:1e:4f:97:a0:7e:
         78:70:34:e7:e1:61:66:92:7d:78:74:ba:bf:cb:93:6d:4d:76:
         32:65:20:bb:64:37:ad:8c:ca:1b:ab:59:62:19:41:dc:74:f1:
         5b:b4:30:97:4b:ef:41:85:48:6d:b9:6a:2a:cc:82:07:07:09:
         a4:97:de:60:8d:11:83:9b:da:e3:a3:08:ae:54:91:e5:8e:b9:
         01:2a:bd:f8:84:2c:14:49:d5:47:51:0e:ad:38:7a:34:d1:a5:
         ad:c3:d3:46:b7:9f:76:41:24:06:bb:c8:bf:64:57:87:18:6c:
         da:ca:5a:6e:02:73:78:37:2a:a0:7c:8d:ab:7a:de:ea:65:ee:
         e6:33:50:26:67:81:fe:62:a0:a3:d3:97:6a:c5:22:bc:87:c6:
         1c:3a:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org