Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xhfbFXzMkowAivNY2fpOTnH49oE.roa
File:                     xhfbFXzMkowAivNY2fpOTnH49oE.roa (raw, json)
Hash identifier:          PureuQjW3hkG1ZczTSW/j2rsW6U6G3WO8/35+8VFng8=
Subject key identifier:   C6:17:DB:15:7C:CC:92:8C:00:8A:F3:58:D9:FA:4E:4E:71:F8:F6:81
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       1E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xhfbFXzMkowAivNY2fpOTnH49oE.roa
Signing time:             Mon 26 Dec 2022 07:54:27 +0000
ROA not before:           Mon 26 Dec 2022 07:54:27 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     146979
IP address blocks:        103.180.131.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec 26 07:54:27 2022 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=C617DB157CCC928C008AF358D9FA4E4E71F8F681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:90:6f:08:6a:86:71:53:0b:33:5a:7a:43:
                    ab:0d:42:96:99:7f:52:76:4c:3c:31:ca:78:84:7b:
                    f9:84:22:d3:42:1c:70:1b:29:de:48:e1:bb:f6:47:
                    69:b2:33:37:67:80:ff:86:86:ea:fc:db:b9:60:ef:
                    14:5e:1d:45:90:0f:12:6d:05:f5:6b:0c:e2:c4:40:
                    9a:4f:75:b5:24:a5:f2:36:c7:24:52:5e:20:0b:c7:
                    c7:86:51:a1:ed:84:f6:da:d7:9c:1b:bd:39:ef:e6:
                    71:df:74:27:ac:e4:c5:58:61:28:dc:fe:6e:1e:5f:
                    a7:8c:84:ec:4b:b8:27:96:a8:ba:59:02:77:1c:36:
                    be:03:9f:fb:b7:a0:8b:37:eb:5f:bb:eb:03:8f:3a:
                    ef:0c:16:b8:8f:da:31:f4:21:0d:bd:bc:84:63:29:
                    c6:72:6f:7f:30:90:09:d0:59:73:16:b2:d6:8d:a6:
                    99:ba:66:dd:eb:8a:26:bf:10:22:54:a5:a1:35:b4:
                    bc:c5:c9:4c:3e:ff:0b:ee:77:54:c9:41:75:9c:ea:
                    f7:68:db:48:13:1b:cd:99:1e:00:3c:b8:79:f2:72:
                    fd:58:06:7b:81:a6:d8:56:d4:07:59:1b:52:87:76:
                    65:ca:d8:ff:31:a1:c6:d7:29:3a:b5:6e:b3:8a:ca:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:DB:15:7C:CC:92:8C:00:8A:F3:58:D9:FA:4E:4E:71:F8:F6:81
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xhfbFXzMkowAivNY2fpOTnH49oE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:f4:96:6a:7c:0f:b7:59:9c:7a:5c:84:b7:9f:58:4c:b7:
         a8:f0:68:8c:ea:0e:6e:29:f4:5a:a3:18:82:13:3d:27:77:1b:
         b8:b9:b9:45:5a:d2:65:6b:45:47:08:18:0b:28:5c:67:b0:6a:
         e8:56:20:03:38:42:7b:d5:da:47:80:2f:96:4d:78:5c:ed:53:
         b7:00:5d:98:35:ab:ae:00:67:a1:72:3b:85:5c:7a:3f:bc:45:
         92:3b:00:20:a4:2b:e2:27:98:a1:ec:88:a9:86:8a:af:92:25:
         1e:1d:bb:f2:95:77:a6:dd:7c:e4:22:99:94:e9:07:2b:84:f1:
         b1:1c:a5:d8:fd:7d:9c:91:7f:28:72:7c:5a:36:21:93:93:fa:
         85:05:4d:ce:5d:5f:71:68:85:e6:67:5d:99:a3:2d:52:1a:69:
         55:3d:41:d7:8b:1d:52:5e:6e:a8:df:8c:28:db:ad:64:a6:98:
         fa:c6:17:ad:10:31:a6:c3:9a:22:7b:0d:fb:b3:6e:79:a4:4d:
         f2:23:43:ef:6b:20:b8:b4:80:4d:81:d5:5e:94:30:5a:38:ed:
         f8:fc:31:1b:06:3c:27:9e:c5:9d:c6:c1:64:78:e7:a7:c9:d5:
         c1:73:e7:ef:81:7f:01:64:15:27:a4:67:7c:93:1f:5c:fb:c8:
         c0:61:c5:cf
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIyMTIyNjA3
NTQyN1oXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQzYxN0RCMTU3Q0NDOTI4
QzAwOEFGMzU4RDlGQTRFNEU3MUY4RjY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALq3kG8IaoZxUwszWnpDqw1Clpl/UnZMPDHKeIR7+YQi00IccBsp
3kjhu/ZHabIzN2eA/4aG6vzbuWDvFF4dRZAPEm0F9WsM4sRAmk91tSSl8jbHJFJe
IAvHx4ZRoe2E9trXnBu9Oe/mcd90J6zkxVhhKNz+bh5fp4yE7Eu4J5aoulkCdxw2
vgOf+7egizfrX7vrA4867wwWuI/aMfQhDb28hGMpxnJvfzCQCdBZcxay1o2mmbpm
3euKJr8QIlSloTW0vMXJTD7/C+53VMlBdZzq92jbSBMbzZkeADy4efJy/VgGe4Gm
2FbUB1kbUod2ZcrY/zGhxtcpOrVus4rKOccCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTGF9sVfMySjACK81jZ+k5Ocfj2gTAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzL3hoZmJGWHpNa293QWl2TlkyZnBPVG5INDlvRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABntIMwDQYJKoZIhvcNAQELBQADggEBAF/99JZqfA+3WZx6XIS3n1hM
t6jwaIzqDm4p9FqjGIITPSd3G7i5uUVa0mVrRUcIGAsoXGewauhWIAM4QnvV2keA
L5ZNeFztU7cAXZg1q64AZ6FyO4Vcej+8RZI7ACCkK+InmKHsiKmGiq+SJR4du/KV
d6bdfOQimZTpByuE8bEcpdj9fZyRfyhyfFo2IZOT+oUFTc5dX3FoheZnXZmjLVIa
aVU9QdeLHVJebqjfjCjbrWSmmPrGF60QMabDmiJ7DfuzbnmkTfIjQ+9rILi0gE2B
1V6UMFo47fj8MRsGPCeexZ3GwWR456fJ1cFz5++BfwFkFSekZ3yTH1z7yMBhxc8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org