Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/fzgE6R81LBjhyVC2-pAexcAOPjk.roa
File:                     fzgE6R81LBjhyVC2-pAexcAOPjk.roa (raw, json)
Hash identifier:          v71AFcQOa+zd3OIq317CYRPiDLE6uIsBI/qJpw0W/pM=
Subject key identifier:   7F:38:04:E9:1F:35:2C:18:E1:C9:50:B6:FA:90:1E:C5:C0:0E:3E:39
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       24
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/fzgE6R81LBjhyVC2-pAexcAOPjk.roa
Signing time:             Wed 01 Jun 2022 01:28:49 +0000
ROA not before:           Wed 01 Jun 2022 01:28:49 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     17948
IP address blocks:        218.219.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Jun  1 01:28:49 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7F3804E91F352C18E1C950B6FA901EC5C00E3E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:e7:57:7f:80:e3:f8:d9:62:f8:7b:7c:0e:
                    1c:de:8f:7b:4c:ac:7d:30:fd:1d:33:a4:a4:2a:3b:
                    d8:58:ac:f2:4f:bf:5a:c2:0f:32:19:30:38:ff:95:
                    f9:24:b1:2c:69:6e:0f:c5:02:5e:29:22:60:e6:04:
                    b2:30:fb:0a:d7:f1:08:46:a8:17:15:43:5e:9b:18:
                    12:40:d2:8d:d7:47:63:c4:16:45:19:97:b7:32:19:
                    30:6e:2f:51:30:8b:9a:4d:2f:de:cd:6d:f3:45:32:
                    18:7e:12:b4:37:7e:9f:45:d3:fa:dc:bd:48:93:fb:
                    35:85:c3:df:f7:4b:8b:bc:e6:21:8c:1a:e1:b7:05:
                    de:6d:a8:34:b1:fd:14:71:be:f9:3e:2a:17:ec:8f:
                    ec:11:d7:46:99:c3:1f:b1:25:8d:d1:f4:ab:a0:51:
                    b4:d9:4f:a2:e3:ff:01:c6:09:a6:ba:20:fd:87:df:
                    49:33:44:b1:8f:b1:88:ae:e7:fb:31:4e:ba:1a:6c:
                    a2:bc:67:d8:0a:5b:54:8f:03:41:13:6f:28:08:5c:
                    91:af:69:13:94:2a:54:a3:9c:34:80:32:ad:f0:49:
                    bf:55:b2:a4:56:3c:11:fa:87:1b:fd:59:f1:ce:3e:
                    f7:ae:63:20:63:4b:fb:db:fc:00:ce:e1:b8:ba:bd:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:04:E9:1F:35:2C:18:E1:C9:50:B6:FA:90:1E:C5:C0:0E:3E:39
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/fzgE6R81LBjhyVC2-pAexcAOPjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:02:bc:e2:ef:33:47:25:ae:9f:79:70:f5:89:b4:d7:ac:a6:
         ef:34:ca:2b:b5:7f:9d:3a:1c:18:04:13:13:89:6a:e1:c3:54:
         7d:01:76:13:29:b9:09:3c:02:25:08:d4:b5:ab:fc:1e:3b:32:
         99:8c:7e:d9:29:8f:0d:a1:68:70:5e:81:37:fa:9c:09:d1:82:
         88:00:34:73:fa:7e:d2:9f:8f:7c:f8:7f:22:4f:ed:43:72:0b:
         fc:71:3c:a2:43:b2:5a:30:52:bb:38:26:9f:ac:4b:cf:55:8d:
         9b:df:58:97:56:09:2a:cb:a5:a6:47:5f:6e:fa:02:44:da:f1:
         10:e3:83:a8:78:c7:12:38:ec:5a:47:a4:f0:2e:01:e3:1f:4f:
         e7:f6:5b:26:65:8c:62:e5:38:20:42:a7:67:06:fc:1b:cf:99:
         59:f2:ad:87:15:11:57:e5:6e:37:fa:f5:3a:54:25:ad:17:f5:
         1b:c8:66:bc:2b:17:f5:69:a6:6b:84:37:11:9f:dd:21:8b:2f:
         6e:48:36:37:a7:d4:6f:13:e9:95:5a:a1:85:37:19:b0:97:c7:
         27:ec:26:83:0e:65:c3:91:ca:82:d1:51:26:40:43:51:6c:b8:
         db:28:a5:b3:c9:7a:39:0f:31:f1:2b:51:f3:e9:fb:da:2c:34:
         b3:21:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org