Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/GRZ4THMrOLaL3l36d2gkHXteoG0.roa
File:                     GRZ4THMrOLaL3l36d2gkHXteoG0.roa (raw, json)
Hash identifier:          6+yJdOS5/KxENjoaS5AdAYxZHlX5ZkNVubYhsF1hzks=
Subject key identifier:   19:16:78:4C:73:2B:38:B6:8B:DE:5D:FA:77:68:24:1D:7B:5E:A0:6D
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       27
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/GRZ4THMrOLaL3l36d2gkHXteoG0.roa
Signing time:             Fri 01 Jul 2022 01:28:05 +0000
ROA not before:           Fri 01 Jul 2022 01:28:05 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     7684
IP address blocks:        157.17.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jul  1 01:28:05 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=1916784C732B38B68BDE5DFA7768241D7B5EA06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:4c:ab:af:f4:d4:cf:64:17:71:03:9c:db:
                    a6:c1:e4:69:14:0b:77:66:f8:9c:97:65:e9:d0:6d:
                    da:aa:ac:f7:fd:4b:2c:aa:fc:c2:83:c6:3e:1b:d2:
                    06:93:1d:4d:e3:a3:66:c3:b7:1f:a0:38:07:8e:83:
                    b7:4b:8e:e6:0d:ff:c4:bd:dd:b4:00:50:76:da:4a:
                    05:fc:f0:db:36:78:24:8d:85:c4:04:e7:2a:ac:da:
                    50:46:8b:75:d1:35:95:ef:ce:99:ef:65:b1:39:bb:
                    77:f0:b5:12:a7:61:ef:be:9f:7e:94:6c:13:e1:93:
                    49:03:fc:da:38:b2:4c:53:cd:1b:b4:5b:16:5b:3e:
                    97:7c:79:6a:00:a1:15:d9:4a:d8:04:fe:a1:ae:df:
                    83:de:a0:41:b5:ae:fb:a0:49:18:92:cf:c1:50:66:
                    87:03:c1:7d:4a:aa:4d:76:3b:b3:57:7c:cb:bb:f9:
                    e1:62:90:b1:8c:78:b1:da:24:4f:7c:16:1e:92:92:
                    95:96:54:55:21:c7:c6:23:c0:74:97:12:57:af:f7:
                    99:b7:ec:52:e1:4a:c5:c1:ea:64:13:b7:24:35:83:
                    c9:bd:65:f9:72:37:b8:10:45:b1:87:88:c3:d5:ae:
                    c8:e7:2e:7b:12:ea:f2:5b:13:cc:0e:f6:64:1c:45:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:78:4C:73:2B:38:B6:8B:DE:5D:FA:77:68:24:1D:7B:5E:A0:6D
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/GRZ4THMrOLaL3l36d2gkHXteoG0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:68:e8:7c:52:cc:ce:2b:6c:b6:5a:41:91:14:d7:88:06:ac:
         69:11:6b:05:62:b1:12:f0:1b:ab:98:9b:23:64:58:ca:85:c9:
         e0:6d:df:38:c7:80:29:f1:25:4c:03:ce:ed:2b:f6:89:7c:29:
         18:5c:fe:1d:84:c7:b3:2b:4a:07:50:5a:59:3d:fc:45:df:52:
         3d:48:c5:27:f9:b2:2d:82:28:60:1e:ed:d7:32:4a:ec:0c:f0:
         80:8e:47:5a:ab:ad:19:27:99:65:72:b6:4a:52:f7:36:3d:ea:
         09:29:d0:2a:f7:81:89:f4:ac:22:db:57:c2:5a:84:d8:76:3d:
         f2:9c:e7:8e:28:b5:8a:b4:e0:b2:96:4b:4d:6f:3b:ea:7f:68:
         c4:8f:f9:b9:85:c0:fb:30:3d:b2:5a:4e:0a:8a:7f:0d:43:eb:
         e6:ae:36:e2:c9:27:2a:e7:38:68:e5:56:45:d6:ff:fa:f8:2c:
         1a:a4:7e:2b:32:e0:2c:9d:74:0b:51:a1:19:e4:9e:eb:10:30:
         5d:af:1e:2e:c0:f0:01:1c:bb:32:d2:db:20:9f:14:ec:45:d8:
         c5:38:78:86:6d:f6:39:e0:c5:73:b6:9d:b7:c1:2d:b1:70:eb:
         1b:f4:3c:ab:26:d5:4c:d2:cf:f9:17:28:42:d7:98:cf:f7:c0:
         4c:c0:a0:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org