Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/6g8h_fqBJddZVHc7srD3l3cTdJg.roa
File:                     6g8h_fqBJddZVHc7srD3l3cTdJg.roa (raw, json)
Hash identifier:          t+TXHxICqOkYYv0zM/1PzgPeFpba5IKhMOsUFdNt1FU=
Subject key identifier:   EA:0F:21:FD:FA:81:25:D7:59:54:77:3B:B2:B0:F7:97:77:13:74:98
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       29
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/6g8h_fqBJddZVHc7srD3l3cTdJg.roa
Signing time:             Fri 01 Jul 2022 01:28:06 +0000
ROA not before:           Fri 01 Jul 2022 01:28:06 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     7684
IP address blocks:        157.17.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jul  1 01:28:06 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=EA0F21FDFA8125D75954773BB2B0F79777137498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:5a:ff:f1:a3:10:8d:b4:90:45:31:65:31:
                    8d:df:a2:dc:3a:17:5f:4b:90:58:f7:d9:dc:63:5c:
                    64:44:ab:5b:40:48:22:f5:ef:58:6f:82:62:19:ee:
                    03:9d:c1:fe:02:8f:0a:71:c9:24:fe:a6:74:40:f6:
                    f7:6a:9d:68:17:6d:96:e4:06:21:29:fa:b0:b7:df:
                    27:d4:f0:a4:04:77:de:91:2f:09:f2:ad:14:47:21:
                    dd:a5:3b:f5:5d:37:dc:26:aa:15:08:cd:5d:1f:38:
                    17:7a:32:37:fe:28:5f:8d:0f:84:3e:d0:1d:45:79:
                    a8:d4:99:b9:09:9c:4a:f2:4f:dc:7f:5f:70:6d:2e:
                    80:f5:db:8b:31:12:56:92:ee:29:4b:d5:81:07:0b:
                    80:29:f2:82:7a:be:fd:65:df:3f:ff:0e:11:bb:24:
                    7d:ad:28:40:d4:88:93:0c:55:c9:6f:c9:04:8d:fb:
                    da:47:8e:75:39:88:89:ee:e3:0d:39:83:87:28:5c:
                    7f:10:cf:31:47:67:ed:97:7d:27:3c:02:78:bf:2e:
                    f4:be:64:ee:17:2a:12:c5:ab:21:4f:55:74:8d:0b:
                    aa:f7:bf:62:c7:65:79:a5:76:24:cd:58:e7:23:24:
                    0f:3a:88:65:30:06:9c:98:df:43:7e:c5:a5:e0:53:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0F:21:FD:FA:81:25:D7:59:54:77:3B:B2:B0:F7:97:77:13:74:98
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/6g8h_fqBJddZVHc7srD3l3cTdJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:ba:cd:79:70:88:38:55:7b:f6:98:57:85:de:44:1a:a3:
         1a:2e:d8:1a:55:36:f9:b3:a3:44:ba:bd:ae:6e:da:0c:fd:2a:
         5f:d3:fa:c1:91:ab:bf:5f:18:b7:6b:84:73:17:e4:9e:ed:93:
         19:1f:a8:9a:74:1e:a2:4e:5a:31:fc:82:6f:d9:86:71:fa:d0:
         b2:50:ed:24:af:81:9e:8f:f5:07:db:1b:d7:94:5b:42:a9:46:
         e3:54:22:a6:bf:de:44:4d:dc:94:99:34:be:19:2d:21:16:92:
         aa:b8:89:0f:d0:ef:79:97:ac:81:93:62:0e:90:27:81:82:d3:
         73:7f:02:42:3d:9e:b2:e8:56:79:d7:38:87:64:5c:65:af:88:
         db:16:35:d5:dc:48:dd:61:3d:c3:1b:2f:15:ad:7e:35:29:dd:
         9a:45:1e:57:52:94:12:89:8e:76:bb:5d:41:4c:be:d8:b0:86:
         36:85:d4:62:94:09:ed:e7:a8:49:bf:01:90:50:52:36:9a:e7:
         70:ea:bd:22:44:58:f9:f8:67:fc:e2:b0:ae:f8:d4:23:0e:e2:
         d0:d3:0e:78:14:c3:ad:3d:1c:0b:7a:c8:a8:0d:4a:93:0f:bb:
         cd:61:ee:9e:d9:a7:90:f8:db:e5:b4:a5:1c:d1:16:e6:2d:28:
         d1:df:49:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org