Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/RaVn7BbifbzTtVCjsngUQ3aJkPk.roa
File:                     RaVn7BbifbzTtVCjsngUQ3aJkPk.roa (raw, json)
Hash identifier:          Rp5GzpRp1tic0Rdvr4kEXBRZA6//XuBRxTMzjKT8j/Q=
Subject key identifier:   45:A5:67:EC:16:E2:7D:BC:D3:B5:50:A3:B2:78:14:43:76:89:90:F9
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       1A
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/RaVn7BbifbzTtVCjsngUQ3aJkPk.roa
Signing time:             Mon 07 Nov 2022 05:34:57 +0000
ROA not before:           Mon 07 Nov 2022 05:34:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     146987
IP address blocks:        157.120.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Nov  7 05:34:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=45A567EC16E27DBCD3B550A3B2781443768990F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:c5:c0:4c:9a:a3:0c:34:ba:d8:bb:a1:70:
                    61:97:c1:09:85:90:23:ae:44:21:e3:3d:c2:f4:a0:
                    10:d5:ed:a3:b0:5f:c9:29:2e:33:9c:01:a9:f2:aa:
                    ac:1b:03:fb:d8:60:2e:5b:d6:36:ea:94:29:5a:cc:
                    56:4b:9a:d2:40:39:2f:7c:08:18:24:80:9a:94:2d:
                    e0:52:be:84:33:5e:32:eb:3a:60:74:18:52:8d:ad:
                    98:14:5f:46:a6:67:f5:83:a0:7e:3c:07:68:e2:02:
                    45:89:37:79:f7:98:67:60:9d:eb:53:a9:db:d3:b4:
                    3a:4e:be:53:0e:fd:a8:09:31:f1:a7:10:a6:3c:d8:
                    22:dc:cf:81:9e:b3:ae:9d:fa:00:e3:1b:60:dd:1c:
                    72:dc:a3:f2:d0:79:6c:1e:c4:7b:a7:b6:3a:8d:14:
                    59:4b:02:e9:6e:45:b5:4a:f9:f8:9b:6c:50:f8:0c:
                    f6:0d:b0:33:f6:68:d8:80:dd:0a:0b:56:9b:a2:b9:
                    1e:36:de:68:4a:4a:49:d6:bc:b0:5f:b1:bc:68:f8:
                    0f:95:a8:16:55:17:57:a6:15:27:25:27:3b:a6:cc:
                    c3:dd:04:9d:d8:74:7c:b7:32:be:dd:b0:08:a2:91:
                    f1:33:3a:bc:06:c6:c1:96:d6:d3:0f:0e:5c:11:70:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:67:EC:16:E2:7D:BC:D3:B5:50:A3:B2:78:14:43:76:89:90:F9
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/RaVn7BbifbzTtVCjsngUQ3aJkPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:4b:5e:fa:7c:e1:d7:86:da:ec:37:52:1f:c0:95:db:a7:
         63:6a:7d:0e:3b:db:8e:32:9c:a0:31:aa:e5:e0:16:5d:a0:c6:
         c7:3b:90:84:52:7b:37:26:40:92:71:71:da:db:58:0e:ad:51:
         01:a8:e8:03:97:93:45:1d:18:5c:0d:4d:3c:27:64:9b:f4:e7:
         5e:25:f0:b6:db:bd:5d:13:8a:ba:c0:09:39:be:c8:05:62:72:
         dd:58:50:77:26:29:08:e9:22:ec:f3:67:7a:ad:c3:ee:4d:4e:
         a4:31:af:fe:85:5c:ac:0c:fd:d8:6c:ce:a2:ec:b0:e7:06:59:
         9f:3d:cf:77:cd:15:f7:b8:31:07:39:be:df:32:4b:c5:74:49:
         08:62:c4:4d:bb:c1:7a:2a:00:75:19:d8:35:8e:50:bc:a8:25:
         ea:a7:54:a8:d7:35:d3:ee:3b:57:e1:92:05:e2:7e:ca:49:47:
         d5:c9:34:07:a5:44:fc:f3:8d:62:72:a9:45:fc:95:d9:a5:cf:
         3c:c9:06:6f:85:1c:13:11:37:b7:9d:8d:7f:55:4c:1f:5b:8e:
         f1:a1:88:ae:66:fb:7a:72:4a:9a:3c:20:45:8b:72:36:24:08:
         e0:1f:92:3c:7d:e1:a6:cb:c9:4b:ec:98:2e:e8:b1:5d:2e:29:
         cb:cc:62:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org