Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/ntsoqfr_BdJKZ771x0xaL88r-HY.roa
File:                     ntsoqfr_BdJKZ771x0xaL88r-HY.roa (raw, json)
Hash identifier:          TICP1Vi+eQKWwfGoBIErLLP3aJQOU9Qpqrzf7rHYo8A=
Subject key identifier:   9E:DB:28:A9:FA:FF:05:D2:4A:67:BE:F5:C7:4C:5A:2F:CF:2B:F8:76
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       5C
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ntsoqfr_BdJKZ771x0xaL88r-HY.roa
Signing time:             Sun 01 May 2022 01:30:53 +0000
ROA not before:           Sun 01 May 2022 01:30:53 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        119.235.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:53 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9EDB28A9FAFF05D24A67BEF5C74C5A2FCF2BF876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:c6:c6:e0:19:b9:68:ee:aa:94:dd:b9:49:
                    5b:d7:69:05:09:f4:50:cc:8b:e3:2b:52:3d:ed:14:
                    91:80:cb:4a:3d:be:d9:d5:7e:cd:14:34:e3:74:8e:
                    e4:09:f5:f1:b7:4f:35:c7:ca:61:8d:45:94:62:42:
                    cf:40:23:35:50:9b:0f:a6:78:4a:ed:89:13:6d:1f:
                    31:a7:aa:35:f5:e4:e0:81:96:4f:86:5a:99:31:5b:
                    05:1a:fd:3f:c3:22:05:ec:e5:a5:67:f3:d4:0d:54:
                    16:61:60:a9:d8:14:82:49:a1:a2:1f:9a:ae:ec:a7:
                    42:8a:ac:16:a0:d9:7a:70:fc:14:11:75:b8:e8:b0:
                    c1:c9:f5:6d:ae:00:8f:50:b7:1c:b9:14:c4:12:31:
                    b7:00:b9:93:83:75:d5:3c:f8:0f:8b:4e:c8:de:17:
                    9c:67:6b:15:05:43:31:d9:ac:ee:58:f3:40:75:84:
                    22:85:a3:5a:33:36:07:bd:65:a7:1a:ea:f0:9f:82:
                    56:09:37:56:60:54:00:e9:4b:45:f3:1c:f1:71:19:
                    04:5a:e8:d5:bb:7c:87:37:18:99:95:87:54:aa:9f:
                    f7:9f:cb:c9:08:5c:54:8a:c5:a2:11:d4:a7:ee:ec:
                    b7:1e:c6:92:d4:ad:8b:5f:44:5b:30:df:4c:2b:5f:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:28:A9:FA:FF:05:D2:4A:67:BE:F5:C7:4C:5A:2F:CF:2B:F8:76
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ntsoqfr_BdJKZ771x0xaL88r-HY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:ba:47:ab:86:bf:31:bf:9b:c7:e6:76:60:b9:1f:fb:9d:
         0d:39:cc:19:a0:e7:e1:4b:2d:e3:da:e2:c3:8a:2f:78:de:61:
         40:11:d9:08:c1:3a:cb:ac:ac:5e:e7:71:ac:cc:e4:d2:cd:5b:
         cc:c4:61:22:eb:fe:57:ea:f7:9f:ee:bc:d5:c1:4a:cf:bb:12:
         7a:ba:ed:4d:32:45:95:12:51:11:0c:28:13:73:2c:88:f4:27:
         74:c0:43:64:21:3e:79:04:7b:cb:80:ea:d8:91:66:c7:44:6d:
         c0:96:e1:11:93:53:e8:62:ea:23:f6:a8:f3:ce:f9:c9:27:34:
         37:25:3a:61:90:1d:1e:a8:31:18:ae:40:92:70:49:98:a1:26:
         38:ab:4f:e3:72:80:cf:c6:67:4e:17:5b:0f:ff:23:2d:40:ad:
         aa:6b:a5:5c:52:a9:79:3f:61:cf:3a:9d:90:00:05:1a:27:8e:
         08:09:ee:5d:0c:f9:b2:f6:c7:f1:9a:93:ec:13:80:e8:dc:dc:
         ec:0f:aa:c7:f7:e8:bf:c3:83:49:05:15:e7:0a:b4:1e:c1:66:
         57:7b:05:00:a7:b5:a3:1e:dc:c3:38:52:02:0d:19:e5:10:a6:
         a1:49:ee:c4:3a:09:22:1a:a3:fb:71:4c:49:a2:39:f4:96:2b:
         b7:b1:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org