Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/_As4wq-XmppsrWOmK8hb5gzNmPM.roa
File:                     _As4wq-XmppsrWOmK8hb5gzNmPM.roa (raw, json)
Hash identifier:          +Es1g/BLTlyqybRdhW9GCB5VloU8B94Hc1vT3vKk3H0=
Subject key identifier:   FC:0B:38:C2:AF:97:9A:9A:6C:AD:63:A6:2B:C8:5B:E6:0C:CD:98:F3
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       3B
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/_As4wq-XmppsrWOmK8hb5gzNmPM.roa
Signing time:             Thu 01 Jun 2023 01:29:28 +0000
ROA not before:           Thu 01 Jun 2023 01:29:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jun  1 01:29:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FC0B38C2AF979A9A6CAD63A62BC85BE60CCD98F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:1e:2d:15:38:ef:d6:5d:9c:20:1a:16:62:
                    93:d9:e3:ed:04:0f:cf:33:77:d3:8d:34:29:dd:0a:
                    aa:35:4f:a7:89:d2:bc:7c:4e:34:c7:9d:de:ee:c5:
                    1e:8b:09:5e:b1:c0:69:a1:96:53:13:15:4c:ab:e1:
                    f8:f6:13:c9:45:fb:c2:85:1e:7b:ab:1a:90:e2:df:
                    47:02:8f:cf:61:fc:7c:33:08:a7:c5:c0:dc:de:f7:
                    2d:a8:de:13:7f:26:03:cd:ec:15:bc:67:ac:f3:98:
                    8e:ae:23:e2:3b:5a:1c:ee:15:19:4f:30:8b:d3:33:
                    42:5f:b8:0e:88:7d:79:75:ff:96:0a:2b:14:2a:27:
                    3e:84:85:f2:bc:3d:79:f5:43:eb:75:2f:b2:ef:63:
                    9b:56:a8:27:f9:42:fc:a5:99:a5:60:e8:47:6a:59:
                    6e:8a:95:0d:78:50:1d:58:6e:2a:f0:69:38:bb:ba:
                    0c:01:5c:06:7a:9e:90:ed:d0:84:2e:aa:9e:00:26:
                    7b:b2:20:d1:4a:2d:25:47:d1:55:f1:08:59:76:34:
                    29:20:2f:7e:44:33:2e:bb:ed:12:dd:95:c1:79:90:
                    3a:04:82:f6:13:fe:81:dd:77:ae:f3:3e:d5:7d:44:
                    ce:e9:aa:51:24:74:25:d7:a6:56:9b:99:46:21:b0:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0B:38:C2:AF:97:9A:9A:6C:AD:63:A6:2B:C8:5B:E6:0C:CD:98:F3
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/_As4wq-XmppsrWOmK8hb5gzNmPM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:2a:b6:d4:e2:48:22:2b:f3:aa:b1:3d:bc:00:ba:93:49:
         9a:d9:72:1b:e3:e0:1b:e2:7f:49:2d:c2:6e:f5:66:37:3b:ec:
         d4:53:d9:7c:5f:15:01:07:4f:2c:ae:ad:1f:bc:66:3d:53:f1:
         1c:7c:1f:1d:24:2a:e0:23:c4:19:e5:1a:c0:b7:37:9e:12:18:
         ae:2e:fc:1a:c8:b0:df:bc:40:1d:ee:b1:45:a0:4e:fb:e5:a1:
         c2:25:bf:4c:70:bb:85:65:0b:5f:11:e8:a7:ce:6c:76:09:ec:
         7a:d2:55:a4:7c:62:2e:6e:76:83:79:51:15:f8:f9:e5:da:75:
         9b:ed:01:df:d5:fb:b7:f0:4b:37:de:48:4c:ca:f5:4f:6f:78:
         7a:a5:d5:b9:f7:28:b4:a0:6f:9c:50:7f:c4:dc:f8:21:97:42:
         e3:a3:ff:28:e0:c1:97:24:2c:6c:a6:ad:24:2e:c8:a3:88:f5:
         14:59:de:bf:da:b5:d9:6f:fd:a2:bb:b9:fd:71:59:4a:06:d4:
         78:6f:82:98:77:5b:4e:d1:c2:8d:32:85:59:d6:9d:9d:10:9b:
         54:62:58:0a:2c:82:9c:c4:d2:91:95:1f:c0:64:81:4f:50:82:
         a5:7b:52:0e:3a:78:07:27:10:64:d7:dc:da:0d:80:91:0d:dc:
         24:31:bf:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org