Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/Mk17f-VOY1LZa4gZKCGvM-qLBvk.roa
File:                     Mk17f-VOY1LZa4gZKCGvM-qLBvk.roa (raw, json)
Hash identifier:          rNwPYgPPa9Gx9Q9qhRnLOT5MxiWv3vjDLvO+fVGAw4M=
Subject key identifier:   32:4D:7B:7F:E5:4E:63:52:D9:6B:88:19:28:21:AF:33:EA:8B:06:F9
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       2B
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/Mk17f-VOY1LZa4gZKCGvM-qLBvk.roa
Signing time:             Sat 01 Oct 2022 01:29:50 +0000
ROA not before:           Sat 01 Oct 2022 01:29:50 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     17707
IP address blocks:        219.109.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Oct  1 01:29:50 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=324D7B7FE54E6352D96B88192821AF33EA8B06F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:6e:ca:91:9e:cf:7a:6f:c7:ed:40:10:1a:
                    17:b5:49:f4:4a:bb:c1:e3:5c:36:fd:b0:82:0f:9e:
                    56:68:35:b0:2e:70:87:ef:2c:97:e5:ce:3f:32:17:
                    3f:99:57:7a:5e:d9:19:a4:f8:06:40:9d:89:a1:6d:
                    b4:62:9c:d3:4d:70:5c:65:31:71:3e:3a:93:e7:19:
                    8b:ae:3e:f7:cc:06:39:fd:91:a7:39:28:0e:3a:3a:
                    ea:63:28:bf:00:77:93:c0:ce:3f:1a:31:f7:3b:25:
                    96:9f:53:3c:ac:ff:16:8a:2d:ca:66:30:38:d6:35:
                    68:b5:ad:3a:14:6c:fc:ee:77:1e:3f:27:29:46:e9:
                    38:f2:32:f9:62:70:06:9a:f9:a6:5a:27:07:fc:80:
                    1d:7a:db:41:44:1e:44:aa:2d:b8:f7:df:1f:0c:0b:
                    fd:3d:84:be:f3:5c:7e:97:c9:4e:a2:96:4c:ad:64:
                    59:dc:53:34:a4:30:d8:07:97:ec:42:e0:14:7c:33:
                    4d:56:2e:eb:7c:7f:f7:9f:0f:ef:65:17:1a:ce:9a:
                    53:2c:79:1e:27:4c:39:7c:89:8a:20:d2:d3:c1:a9:
                    ea:82:09:71:d2:52:e7:ce:62:37:48:3d:8d:97:c2:
                    36:77:e8:84:94:04:08:10:b1:13:81:7b:8b:5d:32:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4D:7B:7F:E5:4E:63:52:D9:6B:88:19:28:21:AF:33:EA:8B:06:F9
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/Mk17f-VOY1LZa4gZKCGvM-qLBvk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:84:48:0f:b1:7e:78:70:f2:1e:86:c1:f6:49:33:77:2e:
         35:6d:14:95:d8:30:33:ff:b0:3f:24:d1:98:69:e4:1b:87:f8:
         e8:ed:04:fc:93:00:98:f2:8c:43:ec:7f:8f:2b:29:1f:93:f8:
         8e:1b:29:92:e4:83:94:7a:a3:c2:c8:e3:45:b2:21:34:e0:27:
         5e:ef:c6:9f:d2:a3:be:f4:5d:f2:11:d2:84:e6:8f:93:b9:2c:
         15:9b:22:4d:ca:ea:cd:b4:fb:86:ac:bc:ba:00:8f:73:47:a5:
         c6:00:cc:3c:be:4c:2f:30:77:85:67:17:74:b9:1a:2e:cb:30:
         fc:98:09:61:40:b2:a5:c1:00:78:7b:f5:d7:91:7f:df:bb:13:
         fe:ff:cf:a5:ee:e2:a3:6d:c6:05:70:79:41:d2:6b:c8:2f:35:
         22:2d:2b:e0:9c:49:87:1c:0c:f3:1c:c5:f2:95:78:e4:78:0a:
         da:63:33:f7:bb:96:ed:b7:a6:a3:af:45:ac:2d:60:42:80:d6:
         9f:16:06:f4:b2:e1:b5:8d:bf:71:4b:07:fe:43:8d:d9:1f:08:
         75:e2:2d:38:26:67:b0:de:68:ce:f5:71:4d:2c:f8:4b:55:4d:
         a0:22:29:28:24:bc:3f:91:a4:eb:5d:ae:c9:15:7c:79:a2:20:
         ba:2b:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org