Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7lVCEgahKJ072f0py3m7Q-f7qcY.roa
File:                     7lVCEgahKJ072f0py3m7Q-f7qcY.roa (raw, json)
Hash identifier:          CcrduPSspmpu/oclSEni4/s2NIJaihPot2LHgNn/a7A=
Subject key identifier:   EE:55:42:12:06:A1:28:9D:3B:D9:FD:29:CB:79:BB:43:E7:FB:A9:C6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       60
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7lVCEgahKJ072f0py3m7Q-f7qcY.roa
Signing time:             Mon 17 Oct 2022 02:21:58 +0000
ROA not before:           Mon 17 Oct 2022 02:21:58 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18136
IP address blocks:        219.105.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:21:58 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=EE55421206A1289D3BD9FD29CB79BB43E7FBA9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:6d:8a:9e:59:c9:fe:77:ec:6d:e1:86:2d:
                    10:95:ec:f5:9d:57:3c:6e:bf:48:53:ec:a0:1c:5f:
                    f2:be:b2:44:92:16:93:5f:04:aa:35:dc:1a:79:15:
                    56:6a:89:55:0b:4e:88:6a:d1:68:2c:a5:19:cc:5c:
                    e2:92:ab:ad:0a:c6:12:3f:58:e9:aa:15:10:e1:bf:
                    46:7c:f7:2a:28:2f:29:58:96:90:41:ca:66:ed:83:
                    17:28:44:cf:4e:6f:78:15:6b:84:3d:31:15:0b:14:
                    6e:93:aa:06:88:3e:fc:4f:b9:58:0d:9f:92:11:4b:
                    c3:d9:4f:20:64:c2:5f:f9:61:de:02:c3:6c:7c:03:
                    ef:8a:e6:2a:e4:ec:09:a2:91:b0:41:e1:59:d4:24:
                    dd:aa:74:7b:cc:ac:63:86:de:20:e2:f0:0c:2b:c6:
                    6c:6e:5d:c4:22:e6:c7:f7:9f:5e:bb:4f:8e:f0:be:
                    28:a3:cf:a5:d2:f9:be:d1:98:65:ea:14:12:01:c2:
                    12:63:ca:4f:d8:0b:89:75:fa:b0:ad:3a:9d:a5:77:
                    1c:db:bc:e6:a3:55:c8:cf:f6:db:17:43:f1:71:ee:
                    59:df:08:e7:cd:de:16:d7:af:29:4d:d0:44:91:b0:
                    91:39:8a:68:1a:f9:ae:b3:9e:dd:e9:0a:0b:c1:b9:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:42:12:06:A1:28:9D:3B:D9:FD:29:CB:79:BB:43:E7:FB:A9:C6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7lVCEgahKJ072f0py3m7Q-f7qcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:43:af:3c:9b:d8:3c:1e:39:41:4c:19:5b:c1:85:9e:69:d4:
         26:4a:ad:4f:ea:51:37:1d:7c:cb:d5:4d:19:a9:26:6b:f9:61:
         e7:03:94:10:8b:0e:83:53:9f:e0:dd:49:03:ec:d2:1c:9b:3a:
         bc:73:cc:14:49:f8:ef:94:0e:1c:a1:20:44:63:88:dd:3d:0e:
         1d:fe:ae:9e:27:8e:57:9d:20:d0:49:98:cb:63:71:42:9c:71:
         ff:27:48:a4:7f:f0:82:d5:b7:f7:2d:59:7f:a7:5b:1d:e0:92:
         b3:b6:0d:41:09:34:8d:3a:a9:15:c6:3f:c7:62:8d:3f:71:aa:
         58:c3:b5:7c:ee:b1:1b:7f:7a:88:3f:12:ad:12:f8:0b:28:23:
         3f:09:5c:1c:60:cd:0a:c7:b4:5b:2a:6b:c0:3c:ea:38:f6:11:
         49:5e:a4:92:d3:88:03:87:8c:52:b5:f7:f8:db:d1:9c:0e:d6:
         39:0e:ed:39:3e:34:a5:be:c5:e9:a4:da:b8:51:0d:ce:58:68:
         39:e1:92:5d:c4:4b:1c:72:ad:09:36:ab:16:f3:42:42:08:d8:
         88:8c:5b:f8:a9:f6:c6:6d:1b:ac:67:fb:0f:af:80:84:86:56:
         5a:3f:9d:c9:08:d7:c2:14:0c:c8:e1:76:89:60:90:b7:21:6d:
         a0:0f:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org