Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/vaD1Mm31nnQU8gE4xVsck8RxKy8.roa
File:                     vaD1Mm31nnQU8gE4xVsck8RxKy8.roa (raw, json)
Hash identifier:          gzopTMD3LHms+0aO8xJ7AF/tzemMFrlyGPN+93PZu/o=
Subject key identifier:   BD:A0:F5:32:6D:F5:9E:74:14:F2:01:38:C5:5B:1C:93:C4:71:2B:2F
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       25
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/vaD1Mm31nnQU8gE4xVsck8RxKy8.roa
Signing time:             Sat 01 Oct 2022 01:29:47 +0000
ROA not before:           Sat 01 Oct 2022 01:29:47 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     38651
IP address blocks:        114.31.104.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Oct  1 01:29:47 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BDA0F5326DF59E7414F20138C55B1C93C4712B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:4d:cf:fb:21:31:14:8f:17:ff:69:db:41:
                    97:ca:35:71:7d:df:3b:d9:13:2f:ea:a1:bd:10:61:
                    cf:6e:c3:96:e7:df:7f:45:3a:a5:76:c7:6c:c0:44:
                    1f:bd:6f:58:1e:bf:1e:93:61:09:8d:6f:c9:ff:42:
                    02:64:e3:e5:4b:8d:64:93:b6:6c:0b:6d:43:33:1e:
                    b1:6c:b6:c9:b4:28:71:6f:3d:b6:22:d5:d8:4d:ad:
                    94:ab:c7:e6:f0:c0:ca:c6:fd:65:9c:2c:bf:c9:6f:
                    e0:9f:bd:e7:52:08:d1:f0:c5:93:45:ce:92:6c:b2:
                    c8:83:1c:66:ce:16:bb:67:bb:28:a9:91:cd:40:6b:
                    1d:36:8d:0c:b8:c1:ca:97:ec:2a:83:eb:d0:17:2c:
                    a1:a7:11:7c:93:3b:0d:fe:cb:26:1d:97:2b:3c:9a:
                    46:3a:2a:6a:98:5a:52:73:cb:09:8a:fb:98:ae:48:
                    47:7b:73:fa:55:8c:0b:08:77:29:d4:d8:98:7f:13:
                    43:83:71:15:68:a7:11:b4:de:f4:f0:65:73:5d:a6:
                    ef:62:72:1f:cd:41:d1:0e:37:2a:0d:f6:fa:61:ae:
                    45:15:5b:27:e9:ab:c8:75:85:39:0a:d9:24:9a:18:
                    7f:ba:39:d0:6c:fa:ad:21:7a:a6:80:c3:1b:5c:4f:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A0:F5:32:6D:F5:9E:74:14:F2:01:38:C5:5B:1C:93:C4:71:2B:2F
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/vaD1Mm31nnQU8gE4xVsck8RxKy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:61:08:e5:ac:16:c7:5f:5c:06:7f:c9:a1:33:f5:6c:98:1e:
         bc:63:48:81:71:33:45:c3:4b:72:53:3f:e7:36:c4:ce:80:8a:
         80:30:1e:0a:58:4b:61:78:98:11:66:b6:c8:cd:35:52:5c:19:
         78:97:68:33:9e:ac:89:43:30:b5:05:f6:b7:f9:57:34:34:ca:
         0c:12:e4:71:23:db:00:b6:be:fc:51:16:ba:e3:7b:e4:cf:33:
         c9:77:59:9e:52:3d:2c:03:3f:f0:2f:c6:3d:35:57:d7:23:7a:
         e4:96:b0:1f:ff:9b:29:d5:fe:85:cb:42:bb:14:ef:54:aa:51:
         2f:ea:14:a8:e9:13:b3:6f:2f:81:ac:5e:fa:29:2a:86:ea:81:
         a3:7b:2b:28:e2:a4:ac:f5:75:65:47:f1:5b:69:2d:4f:fb:1d:
         b8:40:b8:8c:e2:a6:26:48:5b:f5:8f:04:0f:9f:15:07:33:14:
         28:98:a4:b6:a6:e8:a1:97:9e:24:c0:e8:01:60:3b:54:87:49:
         0a:9a:ad:45:39:f8:b9:f9:df:7e:08:f6:44:cf:32:a2:f6:3f:
         69:de:d7:0f:29:b2:79:76:6e:3b:5d:32:21:35:ce:d1:cb:58:
         12:ef:26:4e:47:f1:fb:3d:68:0f:00:fb:eb:97:29:85:2c:40:
         a4:ce:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org