Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/_PPS8mvLFcG6IQovRmtRCBCcgNQ.roa
File:                     _PPS8mvLFcG6IQovRmtRCBCcgNQ.roa (raw, json)
Hash identifier:          4sbtQi/UKuj255SwWDwLPqh6p+3Zr1u4KLM8OZzlDgQ=
Subject key identifier:   FC:F3:D2:F2:6B:CB:15:C1:BA:21:0A:2F:46:6B:51:08:10:9C:80:D4
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       C3
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_PPS8mvLFcG6IQovRmtRCBCcgNQ.roa
Signing time:             Sun 01 Jan 2023 01:29:13 +0000
ROA not before:           Sun 01 Jan 2023 01:29:13 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     8220
IP address blocks:        202.95.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jan  1 01:29:13 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=FCF3D2F26BCB15C1BA210A2F466B5108109C80D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:84:b1:e1:24:c4:09:df:ca:71:0a:4f:ff:
                    64:49:32:2b:ba:28:a9:ba:c3:cc:7c:a7:45:3b:a8:
                    78:64:af:82:a0:20:04:70:65:1b:df:d4:69:5a:32:
                    11:b6:cb:1c:b0:d6:c6:b3:78:16:24:a0:d6:ae:c5:
                    43:87:12:6c:8d:34:9a:e7:ef:89:95:18:e3:ff:19:
                    30:c6:fd:01:b7:10:b4:8a:36:20:10:11:9b:5b:30:
                    77:05:97:4e:1d:7d:c5:2a:7c:97:8f:b2:cd:88:9c:
                    98:3e:fd:58:90:c8:89:cf:b8:ad:06:23:9c:1c:11:
                    31:ee:c9:08:21:8a:c3:2e:41:ab:f7:23:78:e0:24:
                    06:3c:7d:f1:a6:94:7a:8c:de:99:7d:fc:35:9e:cc:
                    f5:3c:26:0d:b9:3c:44:08:08:9c:4b:97:ed:bd:07:
                    80:55:15:d5:5a:62:4d:fe:60:22:4f:26:a2:58:2c:
                    e3:8c:bb:41:9a:9d:27:04:63:db:01:f7:21:e0:58:
                    e7:36:a6:c2:a8:c8:1b:e9:6a:c3:aa:a9:f9:5b:41:
                    41:0f:f4:be:a5:be:1c:01:97:01:5c:be:84:da:36:
                    2c:9f:2a:cc:c6:52:93:c4:f5:fe:d4:71:cd:16:72:
                    bf:c8:88:39:2d:4a:6c:f7:63:2e:01:d1:44:1d:a0:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F3:D2:F2:6B:CB:15:C1:BA:21:0A:2F:46:6B:51:08:10:9C:80:D4
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_PPS8mvLFcG6IQovRmtRCBCcgNQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:3b:e2:23:de:db:8b:9b:99:37:e4:40:b2:9a:ef:e4:e2:
         12:b4:0f:1f:68:f3:ae:fa:2d:92:4b:a1:c7:0e:89:31:c3:cf:
         ab:41:7f:0e:5d:f7:40:10:55:0e:24:7d:d1:5b:51:8e:ae:52:
         11:50:a4:fe:56:f4:dc:f1:53:ab:46:48:ea:34:2e:a2:57:72:
         96:49:3d:92:ae:c0:dc:57:ff:74:ea:08:ff:e7:70:cf:47:e8:
         d0:20:17:24:9e:40:40:00:18:72:e3:83:3c:a7:e0:00:ba:74:
         74:01:c9:46:2d:0a:c3:cf:e9:5a:7a:98:78:f7:d8:c6:db:f2:
         5b:f2:98:1e:a3:3b:56:e3:3a:d9:60:23:f0:c7:e4:0f:e2:39:
         bf:aa:f7:4c:f3:8c:a1:33:be:61:fc:e6:8d:49:9a:95:c5:fe:
         d2:8a:b5:d2:e6:04:68:e8:bb:e5:74:47:a8:a5:5d:fe:b2:20:
         f4:f9:a7:16:a3:be:ee:21:0f:72:19:6c:fe:b1:c5:39:a4:a8:
         64:15:2e:18:83:d9:d9:47:ff:a9:bb:d9:b9:e0:3e:d8:3c:6f:
         db:25:00:0b:8f:36:78:75:cf:0f:59:31:4d:f7:4d:e4:45:cc:
         b3:f2:d3:17:6f:a9:2e:ae:9b:ab:db:53:66:8a:34:72:fa:24:
         43:13:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org