Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/MuFMt29qOwXboegKODdYhJ4rWkg.roa
File:                     MuFMt29qOwXboegKODdYhJ4rWkg.roa (raw, json)
Hash identifier:          7emNpw74PTttgQuMDeMU/0wNt95uZ3JNs1KgxmmPy7Y=
Subject key identifier:   32:E1:4C:B7:6F:6A:3B:05:DB:A1:E8:0A:38:37:58:84:9E:2B:5A:48
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       2D
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/MuFMt29qOwXboegKODdYhJ4rWkg.roa
Signing time:             Fri 01 Jul 2022 01:28:07 +0000
ROA not before:           Fri 01 Jul 2022 01:28:07 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     7684
IP address blocks:        157.17.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jul  1 01:28:07 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=32E14CB76F6A3B05DBA1E80A383758849E2B5A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:6f:63:0e:29:82:4b:27:7c:03:4e:4d:af:
                    c8:4b:49:a5:74:9a:4f:38:fa:ef:f4:b2:ef:34:84:
                    2e:71:fa:f5:2c:a2:7f:7b:78:97:1c:3c:ff:04:52:
                    93:b7:a9:e8:9d:48:b8:dd:48:da:2a:67:03:66:d3:
                    e2:63:d1:36:fc:06:d2:80:0c:ab:9a:81:15:ff:e3:
                    f7:20:36:07:e8:3f:65:4a:36:56:f8:7b:f4:ed:93:
                    78:53:f4:20:b4:7b:c8:fe:18:fa:2d:ff:d3:84:65:
                    7d:91:93:73:62:fb:c6:19:c4:12:39:63:e1:ab:d8:
                    ca:e9:04:04:21:9d:7f:ea:84:17:29:d4:f7:54:92:
                    ac:85:db:33:7f:d0:37:98:ec:f8:60:46:62:1b:24:
                    e2:6a:1f:67:f4:4a:d0:a0:1f:81:7a:0e:5f:7b:37:
                    be:22:3e:5c:b3:fc:7f:3b:19:c8:9f:21:a7:8d:54:
                    50:c9:12:7e:78:d1:5f:26:a3:25:2b:44:1a:c5:d0:
                    64:be:3b:f0:75:19:48:0d:5d:97:96:fe:aa:22:ed:
                    b7:d2:6e:d2:1b:8b:52:ba:4b:f6:b0:78:a4:ec:5e:
                    b1:ee:cd:40:22:3d:e0:9d:95:4a:9f:5c:87:4d:9d:
                    90:78:bd:ab:17:0f:e9:10:97:ef:d9:83:20:40:66:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:4C:B7:6F:6A:3B:05:DB:A1:E8:0A:38:37:58:84:9E:2B:5A:48
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/MuFMt29qOwXboegKODdYhJ4rWkg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:ac:7b:65:1f:f0:19:ab:52:3b:87:d8:6b:e5:77:bb:e1:39:
         ab:7b:c6:95:a2:d1:bc:83:ac:94:a3:fb:6d:7c:f4:2c:9d:a8:
         f1:4a:64:2a:57:8d:69:d3:c0:0c:5d:bd:80:76:70:e0:19:44:
         eb:5b:5b:b9:4d:03:00:74:83:84:f3:0a:e8:31:6e:0b:33:35:
         e2:e6:b6:54:a6:69:56:4e:f5:19:32:59:3f:31:85:19:67:87:
         5b:cd:ba:36:9f:d1:ab:93:21:ac:e0:d1:b1:70:c9:ee:f8:6f:
         be:43:3b:19:29:1f:6e:18:64:6c:f8:48:bd:db:d0:ea:09:6c:
         1c:68:98:e4:a9:67:68:09:a2:df:35:7f:25:c0:42:2f:f1:1d:
         2f:04:92:54:e8:8f:4d:59:24:95:7d:83:8b:21:e2:f6:ed:e3:
         7a:11:09:23:26:2b:db:b4:27:6c:cc:d9:ec:a9:4b:56:3c:6a:
         33:00:e7:67:e4:44:31:bd:e3:24:76:2c:b6:70:81:6a:af:68:
         1c:d1:c4:aa:fa:c5:94:3c:96:81:0b:7f:ea:3d:05:66:8f:9f:
         3e:b5:0c:45:a2:ed:dd:f5:9b:b4:bc:35:b9:3e:89:57:d3:1f:
         50:2a:f4:80:b7:c4:09:5b:17:b0:b4:80:22:66:43:5d:1b:f5:
         b5:ab:6e:7a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0
NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTIyMDcwMTAx
MjgwN1oXDTIzMDYxNTAxMzAwNFowMzExMC8GA1UEAxMoMzJFMTRDQjc2RjZBM0Iw
NURCQTFFODBBMzgzNzU4ODQ5RTJCNUE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOXTb2MOKYJLJ3wDTk2vyEtJpXSaTzj67/Sy7zSELnH69Syif3t4
lxw8/wRSk7ep6J1IuN1I2ipnA2bT4mPRNvwG0oAMq5qBFf/j9yA2B+g/ZUo2Vvh7
9O2TeFP0ILR7yP4Y+i3/04RlfZGTc2L7xhnEEjlj4avYyukEBCGdf+qEFynU91SS
rIXbM3/QN5js+GBGYhsk4mofZ/RK0KAfgXoOX3s3viI+XLP8fzsZyJ8hp41UUMkS
fnjRXyajJStEGsXQZL478HUZSA1dl5b+qiLtt9Ju0huLUrpL9rB4pOxese7NQCI9
4J2VSp9ch02dkHi9qxcP6RCX79mDIEBmA2cCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQy4Uy3b2o7Bduh6Ao4N1iEnitaSDAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75
+5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo
M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L011Rk10MjlxT3dYYm9lZ0tPRGRZaEo0cldrZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAOdEVgwDQYJKoZIhvcNAQELBQADggEBAJise2Uf8BmrUjuH2Gvld7vh
Oat7xpWi0byDrJSj+2189CydqPFKZCpXjWnTwAxdvYB2cOAZROtbW7lNAwB0g4Tz
CugxbgszNeLmtlSmaVZO9RkyWT8xhRlnh1vNujaf0auTIazg0bFwye74b75DOxkp
H24YZGz4SL3b0OoJbBxomOSpZ2gJot81fyXAQi/xHS8EklToj01ZJJV9g4sh4vbt
43oRCSMmK9u0J2zM2eypS1Y8ajMA52fkRDG94yR2LLZwgWqvaBzRxKr6xZQ8loEL
f+o9BWaPnz61DEWi7d31m7S8Nbk+iVfTH1Aq9IC3xAlbF7C0gCJmQ10b9bWrbno=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org