Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/_OciionhbJPncyoJ2eQGOEalvYg.roa
File:                     _OciionhbJPncyoJ2eQGOEalvYg.roa (raw, json)
Hash identifier:          wnjNGTekrR9sDVEp66f6HnoL/PGSdfR0IFQ/aM22Eu8=
Subject key identifier:   FC:E7:22:8A:89:E1:6C:93:E7:73:2A:09:D9:E4:06:38:46:A5:BD:88
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       2D
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/_OciionhbJPncyoJ2eQGOEalvYg.roa
Signing time:             Fri 05 Aug 2022 06:05:09 +0000
ROA not before:           Fri 05 Aug 2022 06:05:09 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        2400:4000::/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: Aug  5 06:05:09 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=FCE7228A89E16C93E7732A09D9E4063846A5BD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:45:d3:0d:8d:17:75:30:7d:a6:00:fd:36:
                    fc:d9:5e:b8:ca:85:f4:49:86:b4:03:6a:ce:c8:a7:
                    e7:03:e1:a7:e2:9b:77:45:6b:6a:c6:01:46:dc:a3:
                    62:5e:b1:de:e0:9a:4f:6d:d6:ba:80:c3:ee:29:15:
                    f5:a5:67:a5:a1:0b:c0:dc:9c:da:8b:49:dd:ff:a9:
                    be:91:8a:17:c7:f8:c0:f8:2f:09:e1:93:b3:ac:ea:
                    46:a3:3c:a7:11:6f:29:ec:8e:d0:df:d8:6d:25:2d:
                    1e:22:c6:c0:da:3e:88:c8:89:e4:66:82:56:c8:91:
                    b0:9d:d1:e1:38:97:9d:3f:04:a5:84:e7:93:dc:1b:
                    38:6a:4e:39:df:e9:98:74:09:9f:59:ac:8d:9f:36:
                    1f:b3:60:38:2f:97:bb:bc:6e:a7:e4:3e:4e:f3:2a:
                    6c:33:25:b2:bb:73:72:df:de:93:35:a9:8b:85:33:
                    d3:c8:9f:6d:83:44:62:67:d9:15:32:a9:91:90:a4:
                    b2:e9:09:d1:af:18:5f:2e:d9:ee:27:6b:19:c9:9d:
                    1a:28:1e:a3:b4:a7:25:8d:c3:01:03:3b:53:89:71:
                    0f:94:6d:d8:36:ec:a1:c6:8f:38:5e:c3:06:32:49:
                    df:ab:60:66:32:32:99:03:b9:0a:43:7e:7b:fe:37:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:22:8A:89:E1:6C:93:E7:73:2A:09:D9:E4:06:38:46:A5:BD:88
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/_OciionhbJPncyoJ2eQGOEalvYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4000::/22

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:69:c9:4c:9f:53:37:66:a9:f6:79:18:af:91:2d:42:f1:
         bb:a9:6a:a9:a8:75:d6:7f:d5:87:be:03:d9:5a:b7:8f:da:a2:
         43:9f:10:d2:be:60:96:cf:b2:1d:d9:a8:51:ba:66:44:34:ec:
         07:60:49:73:06:34:59:83:e2:04:a7:ea:5e:5e:cb:f4:02:8b:
         52:83:4a:11:2e:75:92:93:e1:aa:42:4b:dc:dc:49:3c:61:c0:
         80:41:be:d6:2a:66:ca:0b:99:66:9f:7a:e8:88:7c:78:49:0f:
         81:84:48:1c:72:b6:39:2c:a8:05:9a:89:f6:d8:6c:8c:43:9f:
         16:0d:43:85:cf:2d:b5:b3:64:41:5e:e9:ea:07:e0:8a:9c:39:
         15:a0:78:49:0b:4b:0c:fe:b1:18:01:6e:83:60:3f:f1:12:3c:
         b9:58:d8:3b:c2:69:93:0b:be:78:cb:e8:c2:6e:f2:e8:3c:5e:
         6a:80:3b:54:eb:30:c5:a4:22:6a:02:a8:8f:96:bd:10:27:b8:
         2e:71:5c:67:ce:4f:69:85:ae:ab:60:00:00:f0:c3:8c:fa:68:
         0d:3c:c7:31:b4:39:9c:ec:d6:42:f9:46:c0:11:56:0a:20:01:
         8d:cf:98:74:51:e4:a4:c5:8a:a7:56:49:71:fa:47:83:73:3c:
         06:43:ed:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org