Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/t9YmSPcom6sdzSwLNEtOSh6XWG8.roa
File:                     t9YmSPcom6sdzSwLNEtOSh6XWG8.roa (raw, json)
Hash identifier:          OaIj91Xb68ttJfReTlDzTFLx4/nIurbeVam/xkxlyGA=
Subject key identifier:   B7:D6:26:48:F7:28:9B:AB:1D:CD:2C:0B:34:4B:4E:4A:1E:97:58:6F
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       28
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/t9YmSPcom6sdzSwLNEtOSh6XWG8.roa
Signing time:             Sat 01 Oct 2022 01:29:49 +0000
ROA not before:           Sat 01 Oct 2022 01:29:49 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     17707
IP address blocks:        61.121.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Oct  1 01:29:49 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=B7D62648F7289BAB1DCD2C0B344B4E4A1E97586F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:c3:19:55:1f:6a:23:c7:56:10:75:64:4a:
                    a4:30:46:a9:01:a1:18:45:1f:bb:cc:ec:25:93:4f:
                    8d:dd:69:7e:16:45:80:e7:f6:65:a7:d5:eb:f4:07:
                    f5:79:74:64:9b:07:5d:af:4c:70:6a:6d:ca:24:e7:
                    c4:d0:75:2f:56:4f:f4:9d:b3:16:77:67:07:cd:6a:
                    79:b9:20:80:2b:5b:42:cd:b5:12:89:eb:1d:0e:89:
                    9c:73:c5:fd:bc:cb:c3:74:92:2a:80:05:79:6c:78:
                    20:01:85:f7:c1:82:d2:cf:27:14:9f:e3:27:b8:b7:
                    f2:a9:23:95:79:66:d0:76:1d:4b:03:83:4e:f7:75:
                    d8:af:89:31:6d:4d:0e:1e:de:cd:cd:58:f9:27:1d:
                    a0:dd:0c:e2:2d:20:7c:78:4a:99:94:bc:f6:8d:1c:
                    78:9c:e8:6a:47:bd:62:0d:f0:28:83:54:c0:8c:42:
                    54:b1:51:c3:e5:52:e3:ba:18:a8:76:51:02:ef:50:
                    72:bd:57:19:e5:2c:51:96:1c:aa:a6:2b:09:8a:6e:
                    72:6c:c3:e2:b7:a6:b3:b4:43:74:98:9c:0f:08:71:
                    07:11:34:28:41:80:af:97:99:16:00:94:fd:9f:c2:
                    f2:2b:03:d1:f8:3f:cc:94:bd:c1:a2:81:87:8e:38:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:26:48:F7:28:9B:AB:1D:CD:2C:0B:34:4B:4E:4A:1E:97:58:6F
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/t9YmSPcom6sdzSwLNEtOSh6XWG8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.121.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:b2:7b:ff:ba:f5:a7:db:bf:64:dd:54:af:a7:e2:28:59:86:
         7a:8d:75:e1:05:b7:e5:8b:36:a8:43:dc:1b:a0:f9:ff:c9:91:
         7f:32:08:49:6c:5f:9d:c0:cd:54:14:1e:db:4d:b8:d9:94:8c:
         c4:9c:2c:c6:ad:b7:91:cc:6b:1f:7c:9c:21:ab:38:3a:4c:6f:
         c5:ef:9f:5b:32:b0:d3:ec:90:bf:31:7c:df:ac:76:6b:bd:f4:
         f3:a8:8f:68:80:55:d3:89:84:8d:2b:40:1e:fd:be:56:81:20:
         4d:9f:15:30:ef:5d:b7:88:1c:20:95:b8:09:53:07:d5:38:23:
         09:1f:51:a1:ee:ab:f4:45:df:56:f7:23:90:66:ed:46:0e:38:
         78:11:38:09:e4:da:af:23:ce:9e:5e:88:6f:b1:29:d6:98:5c:
         1b:2b:11:da:a4:4c:51:c1:17:b2:62:f9:0d:0f:61:51:21:e1:
         9f:ee:98:50:14:22:5a:1c:c3:29:d0:ab:3a:d8:07:2b:5c:57:
         7a:6a:57:53:9d:c8:0c:24:d1:09:31:fc:48:04:cb:5c:94:80:
         9d:89:08:94:cb:10:af:09:0c:07:2d:14:bf:07:5e:32:71:66:
         c6:e9:89:a0:fc:7c:65:85:64:0a:80:3d:c2:c5:50:7b:26:2e:
         94:4a:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org