Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/vcD8CYyMTNBQwSrP_gbSRsncObc.roa
File:                     vcD8CYyMTNBQwSrP_gbSRsncObc.roa (raw, json)
Hash identifier:          Mv6IX7eAkRUEU1ykR02GEG+L985f4NJsbnsg0R17va0=
Subject key identifier:   BD:C0:FC:09:8C:8C:4C:D0:50:C1:2A:CF:FE:06:D2:46:C9:DC:39:B7
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       06
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/vcD8CYyMTNBQwSrP_gbSRsncObc.roa
Signing time:             Mon 03 Oct 2022 07:41:52 +0000
ROA not before:           Mon 03 Oct 2022 07:41:52 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     45677
IP address blocks:        180.148.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Oct  3 07:41:52 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BDC0FC098C8C4CD050C12ACFFE06D246C9DC39B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:66:c7:3c:c4:9b:69:66:4b:9c:dd:99:bf:
                    fd:2b:28:77:0c:d6:2b:c8:60:69:61:ee:fc:db:3e:
                    40:a3:b9:85:58:76:3c:1b:f8:96:bc:3f:e1:6d:9a:
                    53:d6:b2:75:1d:ba:c0:84:94:6f:29:31:f7:64:f0:
                    27:9e:b3:e0:f6:d8:84:b9:63:e2:fa:c4:07:7c:3f:
                    ef:6f:54:8e:b8:f2:eb:5e:ef:8b:67:9b:36:19:0d:
                    a0:2e:0d:dd:24:c2:b1:27:98:82:4a:93:23:22:46:
                    f3:1c:20:e3:25:f1:63:1f:1f:0b:15:9a:a8:48:14:
                    59:0a:13:f8:e6:a1:03:c7:51:24:3d:d2:bf:65:f7:
                    a8:58:92:2b:c2:47:d4:37:92:50:af:a2:c6:20:9d:
                    4f:6b:e8:b1:53:71:6f:29:3d:24:94:48:14:aa:02:
                    15:63:5b:dc:1d:9e:34:98:ac:79:8a:ba:6c:e7:2d:
                    3f:ac:1d:19:c0:e1:67:79:e6:05:ad:0f:7a:84:e9:
                    df:14:f8:81:63:04:50:cf:e6:3a:00:7e:39:62:f1:
                    42:71:9c:f9:75:81:61:89:15:89:46:09:ac:b5:d8:
                    17:bf:60:26:71:26:1f:8a:14:4d:27:1e:13:88:db:
                    37:86:83:b9:7f:eb:a7:b0:ed:a3:15:e0:fb:64:f9:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C0:FC:09:8C:8C:4C:D0:50:C1:2A:CF:FE:06:D2:46:C9:DC:39:B7
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/vcD8CYyMTNBQwSrP_gbSRsncObc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:6e:5d:95:2b:0d:62:7a:5b:a0:6a:56:2f:7e:c8:a7:3f:
         bc:81:1f:7a:f6:85:50:5f:90:62:30:a0:b9:86:c1:5b:7e:c1:
         d0:f3:f5:2b:ae:ef:da:34:46:e8:df:c2:84:80:ba:7e:da:2a:
         d2:bd:79:8c:1f:19:3e:2f:28:ad:25:0d:df:05:c2:89:e2:8b:
         a1:36:d5:a2:02:65:f1:dd:f2:e6:ef:88:21:40:e7:24:99:d8:
         4c:0f:49:f4:94:c8:15:56:5c:9a:ea:e0:be:de:d8:21:a1:24:
         5a:4b:0f:77:91:55:5f:70:1a:78:d0:53:e6:b6:6f:a4:21:be:
         90:65:fb:69:bd:34:98:de:67:5c:a5:07:fd:ae:3d:29:ce:ab:
         aa:a5:cd:43:7c:aa:fa:54:fe:22:92:b6:9e:5a:e9:c4:73:e0:
         9e:bf:81:49:0a:c7:57:cd:68:fd:b3:f2:88:b2:91:c5:4d:db:
         59:71:2d:d3:c2:f9:05:ad:4a:f5:b9:cc:ad:a3:74:70:c5:08:
         53:7e:5d:e1:cf:4f:69:c1:30:33:7a:6d:ed:19:83:eb:97:fb:
         cd:9e:14:1a:fb:9d:1f:3a:5b:24:cf:d7:24:f6:7a:c0:32:30:
         89:45:20:ef:2f:86:2d:8b:4c:2f:28:83:4d:25:68:35:22:a4:
         07:6b:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org