Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/pCoE4nslg7WzHXv2GF-GDbQ4uig.roa
File:                     pCoE4nslg7WzHXv2GF-GDbQ4uig.roa (raw, json)
Hash identifier:          b6zj1IqFU1WiKL2vXxIa2nhuzTELZMofIpKFmLb+KpI=
Subject key identifier:   A4:2A:04:E2:7B:25:83:B5:B3:1D:7B:F6:18:5F:86:0D:B4:38:BA:28
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       16
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/pCoE4nslg7WzHXv2GF-GDbQ4uig.roa
Signing time:             Fri 28 Apr 2023 00:41:24 +0000
ROA not before:           Fri 28 Apr 2023 00:41:24 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     131954
IP address blocks:        113.59.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Apr 28 00:41:24 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=A42A04E27B2583B5B31D7BF6185F860DB438BA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:b3:e8:ae:ea:17:03:78:4c:ca:7c:fe:45:
                    73:50:47:f5:4e:b5:40:04:f0:a6:de:24:92:de:bc:
                    7e:16:1a:d0:c8:14:c1:b5:c0:a6:dd:11:38:4d:17:
                    ae:ae:9d:15:17:9b:5c:2e:87:59:3c:08:a5:35:11:
                    04:c0:b0:ef:64:40:12:5c:33:27:e9:50:c6:f4:ec:
                    04:8c:2a:2b:5e:96:d2:10:e5:f4:7b:05:5e:b1:12:
                    c5:ab:14:83:ad:d8:3c:26:b5:94:20:76:2f:8d:ef:
                    2d:15:a7:b3:b6:06:27:2c:bc:4d:87:5c:3b:6c:76:
                    f4:06:60:3c:e6:bf:aa:b7:1b:28:06:01:08:85:02:
                    62:b3:5a:2d:af:c6:3a:7c:63:20:47:e8:6e:23:b3:
                    c8:77:01:e5:1b:ae:28:9a:12:7e:22:b4:bb:d9:fc:
                    9a:73:9d:31:53:b9:26:48:cd:60:d3:7c:91:5e:91:
                    ab:3f:48:a2:15:95:bf:f2:e2:c9:14:24:8b:4c:c8:
                    ba:03:d8:a4:5f:cc:f7:85:c8:18:bf:41:da:34:07:
                    e2:ce:b5:03:ab:3a:ab:f2:93:33:0d:9d:81:17:68:
                    a5:83:87:9b:31:6d:8c:70:16:de:9a:a6:88:57:f7:
                    c6:06:e3:3b:46:a7:fe:39:ca:6e:d4:36:e2:46:df:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2A:04:E2:7B:25:83:B5:B3:1D:7B:F6:18:5F:86:0D:B4:38:BA:28
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/pCoE4nslg7WzHXv2GF-GDbQ4uig.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:a4:8e:8b:b2:10:5e:1d:2c:5e:72:2e:55:ff:54:8f:5a:
         7b:20:42:ac:df:a4:78:2e:cd:ee:aa:c5:db:02:ea:b9:00:d7:
         7f:23:8f:d2:b5:6e:3c:e8:c9:65:20:b2:bf:71:1b:b2:ee:f2:
         ee:2b:9c:3d:30:4e:7f:e1:27:38:3a:1f:9d:ce:0d:97:da:39:
         9d:6e:83:de:d1:f4:df:72:66:f1:69:15:5e:39:38:d5:10:2a:
         80:9f:a7:8e:b5:87:41:3e:37:7a:74:97:2e:2a:a0:4e:68:c5:
         9f:7c:c7:35:79:53:ad:e9:08:29:63:4c:7d:cb:82:21:ec:22:
         94:77:fa:94:1f:82:a9:af:7c:9b:c7:2a:d3:c4:0e:0b:70:16:
         cc:c6:9d:95:ac:6e:bb:90:80:8c:40:87:4b:db:90:24:cb:14:
         21:9c:71:3e:d6:bf:24:a4:cd:94:dc:5d:87:37:31:00:b4:d9:
         25:a5:ee:b2:4c:f8:e9:76:e2:af:7a:41:49:25:d6:f9:4c:d3:
         12:8a:36:11:b8:55:5e:89:d1:16:77:41:ef:e6:07:59:3d:50:
         38:fd:7a:d8:b4:4d:3d:09:c5:c7:40:bb:75:a4:5d:08:62:c2:
         af:a7:57:99:20:3a:ed:eb:47:33:3c:bb:a9:02:7c:1a:25:37:
         14:65:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org