Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FB-rN5W2yk27_OCaQPV2soHJCdM.roa
File:                     FB-rN5W2yk27_OCaQPV2soHJCdM.roa (raw, json)
Hash identifier:          /p5s5FbqqzTzNYPXq3W5Tb44OO385/iUe5QF/XofXgs=
Subject key identifier:   14:1F:AB:37:95:B6:CA:4D:BB:FC:E0:9A:40:F5:76:B2:81:C9:09:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0453
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FB-rN5W2yk27_OCaQPV2soHJCdM.roa
Signing time:             Thu 13 Apr 2023 09:57:48 +0000
ROA not before:           Thu 13 Apr 2023 09:57:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=141FAB3795B6CA4DBBFCE09A40F576B281C909D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:84:1a:85:e1:53:57:dc:fb:38:e8:ed:50:
                    62:8c:c7:b4:31:26:92:89:bb:bb:b9:01:b8:c2:2b:
                    74:c8:32:aa:84:42:87:b0:01:38:dc:f7:8e:ef:78:
                    74:48:2a:9c:65:8f:9d:8c:a0:aa:4a:6f:00:11:d9:
                    0f:a8:ea:e8:96:ea:8e:29:89:74:69:41:cf:c6:fa:
                    7c:61:39:0c:05:6a:c4:76:c5:e9:1c:21:5b:c2:94:
                    13:3c:59:94:d2:97:ad:7d:d8:c3:69:e6:0d:fb:02:
                    ed:40:38:01:da:90:e2:77:76:16:77:d2:06:80:58:
                    3c:c3:36:a3:e9:5f:4e:6c:21:ba:0c:4d:6c:c7:ce:
                    cc:a2:92:48:41:18:80:d1:b6:18:e2:13:20:77:72:
                    0d:69:3b:34:44:58:b5:c6:f5:04:38:15:4c:99:99:
                    a1:9e:73:68:ed:02:2e:b5:85:24:16:90:60:61:a7:
                    1a:be:07:db:b9:9f:b5:4f:56:52:ad:26:a2:dd:28:
                    50:8d:06:32:47:7d:9f:02:9c:c1:b8:5b:9a:55:0c:
                    7e:b2:fe:be:39:f6:95:64:70:9b:7c:1b:ff:ba:46:
                    e5:f2:60:93:2a:51:27:0b:da:34:29:28:94:0f:60:
                    62:86:cb:77:b1:13:b7:31:8d:85:b6:d2:d0:f2:62:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1F:AB:37:95:B6:CA:4D:BB:FC:E0:9A:40:F5:76:B2:81:C9:09:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FB-rN5W2yk27_OCaQPV2soHJCdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:46:f0:50:8b:16:11:05:0b:4b:dd:f3:01:5a:e5:a8:b1:
         99:6f:58:a7:9e:52:93:7d:04:4b:9a:39:95:80:25:e3:9f:e8:
         28:44:84:19:72:20:ed:2e:fc:ca:00:80:c9:bf:3f:ea:98:69:
         49:e3:ff:62:61:31:36:33:8c:f1:c7:f9:d1:a8:81:56:00:b9:
         45:70:5a:77:41:37:0b:d9:e0:c3:bc:a4:7e:25:15:cf:b1:b5:
         dd:7a:cc:76:a7:3f:75:4f:05:09:f7:0f:5c:c7:f8:99:14:7e:
         94:5e:5f:d4:6a:de:a2:43:a4:62:89:74:a9:47:d8:7f:2e:89:
         c8:f4:dc:0d:d4:5a:34:bd:79:e5:50:f3:ee:e4:95:2a:a9:f5:
         19:cd:dc:71:7e:10:30:25:15:8f:5f:6d:12:07:90:5d:ed:0f:
         cd:84:c2:58:29:87:ed:4a:05:58:34:ed:cc:5a:0a:69:7d:33:
         7e:1c:41:ab:22:cc:09:ae:5c:21:a8:30:6e:98:74:ec:8b:f9:
         54:49:8a:02:5a:e8:ed:8f:36:3e:91:ad:91:ee:d3:31:6a:da:
         ab:89:17:1d:e1:7f:53:38:c3:b5:2c:74:ce:0f:e8:d1:a3:f4:
         22:39:90:e1:ce:b6:97:9c:e9:43:c1:e6:04:43:6c:5f:9d:78:
         58:60:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org