Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7q-VKGP2seQag-wgGOQF73TeAHo.roa
File:                     7q-VKGP2seQag-wgGOQF73TeAHo.roa (raw, json)
Hash identifier:          qCSuRn1QpmEiwB6cJyV9m7iUezfa9uXAnW7v1ZO9erY=
Subject key identifier:   EE:AF:95:28:63:F6:B1:E4:1A:83:EC:20:18:E4:05:EF:74:DE:00:7A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       27
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7q-VKGP2seQag-wgGOQF73TeAHo.roa
Signing time:             Tue 11 Oct 2022 01:42:20 +0000
ROA not before:           Tue 11 Oct 2022 01:42:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     18134
IP address blocks:        103.55.196.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:42:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=EEAF952863F6B1E41A83EC2018E405EF74DE007A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:c9:2d:d7:2c:b9:5d:72:10:d1:cb:cf:fd:
                    9b:39:a1:4f:e2:c6:37:a1:28:b0:9a:af:5d:89:d3:
                    75:be:f3:2d:c5:2b:60:fc:7c:63:d0:6d:39:8c:9b:
                    d0:5f:9c:ac:e1:ea:0c:01:59:af:71:5b:ee:a2:16:
                    0c:50:0a:8d:ae:cf:8b:1e:12:74:ea:f8:0e:31:89:
                    74:86:ef:0e:ad:4a:54:7b:73:fc:b6:e4:80:cc:84:
                    4c:50:1c:17:63:82:08:aa:f6:2f:95:c9:d2:d7:40:
                    f5:77:e2:cc:54:a8:df:9a:67:4a:ef:b2:b0:bf:5c:
                    94:ff:6e:52:2f:7a:3e:24:bb:89:56:b4:ac:de:cd:
                    c5:a1:b9:fc:fa:9b:0c:b0:fa:6f:6e:79:27:7a:bd:
                    d7:00:2a:ca:31:67:55:bb:07:4c:91:5c:f4:a7:77:
                    72:a3:82:18:a2:22:57:b9:e9:bd:5e:04:57:91:9a:
                    c6:4b:ea:d5:47:8a:bb:9b:a6:3d:15:3d:cc:c2:76:
                    5b:64:6d:ff:4f:db:ef:e4:4f:f9:16:51:f6:60:ab:
                    02:45:0c:c7:d3:20:58:68:54:f1:90:94:f4:ff:13:
                    05:37:58:70:07:99:f7:39:54:c8:b5:bc:32:6d:20:
                    89:50:ac:82:6e:54:4a:f1:e7:f7:e6:fd:b4:e4:b7:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AF:95:28:63:F6:B1:E4:1A:83:EC:20:18:E4:05:EF:74:DE:00:7A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7q-VKGP2seQag-wgGOQF73TeAHo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:ab:3f:74:6a:27:bd:22:66:a7:fa:48:a8:1a:83:7d:0e:73:
         8a:6f:8f:6b:37:a0:2f:17:56:5b:21:4f:aa:2c:52:f5:6b:8b:
         10:33:aa:3b:a6:64:8f:cd:cb:03:4a:46:72:17:21:35:cf:d9:
         23:f2:09:c3:ea:19:56:a6:f0:6b:69:c6:21:73:4b:23:dd:96:
         73:bf:67:fe:34:d7:42:28:88:cf:fb:c9:cd:7c:8e:22:48:e6:
         b9:40:24:21:20:93:9d:ea:c4:a0:8d:cb:7a:51:90:2d:db:aa:
         fe:21:5e:73:4e:7f:92:c4:f5:5c:05:50:08:40:f2:5d:05:5a:
         03:e3:e6:44:0c:34:1d:53:34:71:96:96:18:20:df:82:12:82:
         fd:05:e5:6d:cf:43:93:4d:38:c5:a6:1a:ee:e6:5c:a0:1a:b7:
         05:5b:e0:cd:b7:f2:2b:58:45:4b:e6:b5:f3:a9:77:c1:24:86:
         cd:e7:c9:77:09:02:d6:3e:d2:bf:cc:48:f5:f6:46:cc:0b:79:
         6f:2d:aa:24:d3:cb:71:fe:c9:8b:cd:0c:3b:93:3b:53:a6:40:
         51:48:ce:5b:9d:1d:d4:17:ec:64:1f:ab:38:57:b2:36:e7:50:
         de:a5:ed:b8:52:10:08:df:bd:52:6d:50:d0:58:56:75:b5:44:
         f4:8e:24:23
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
NDIyMFoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRUVBRjk1Mjg2M0Y2QjFF
NDFBODNFQzIwMThFNDA1RUY3NERFMDA3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQeyS3XLLldchDRy8/9mzmhT+LGN6EosJqvXYnTdb7zLcUrYPx8
Y9BtOYyb0F+crOHqDAFZr3Fb7qIWDFAKja7Pix4SdOr4DjGJdIbvDq1KVHtz/Lbk
gMyETFAcF2OCCKr2L5XJ0tdA9XfizFSo35pnSu+ysL9clP9uUi96PiS7iVa0rN7N
xaG5/PqbDLD6b255J3q91wAqyjFnVbsHTJFc9Kd3cqOCGKIiV7npvV4EV5Gaxkvq
1UeKu5umPRU9zMJ2W2Rt/0/b7+RP+RZR9mCrAkUMx9MgWGhU8ZCU9P8TBTdYcAeZ
9zlUyLW8Mm0giVCsgm5USvHn9+b9tOS3MXsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTur5UoY/ax5BqD7CAY5AXvdN4AejAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvN3EtVktHUDJzZVFhZy13Z0dPUUY3M1RlQUhvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmc3xDANBgkqhkiG9w0BAQsFAAOCAQEAOqs/dGonvSJmp/pIqBqDfQ5zim+P
azegLxdWWyFPqixS9WuLEDOqO6Zkj83LA0pGchchNc/ZI/IJw+oZVqbwa2nGIXNL
I92Wc79n/jTXQiiIz/vJzXyOIkjmuUAkISCTnerEoI3LelGQLduq/iFec05/ksT1
XAVQCEDyXQVaA+PmRAw0HVM0cZaWGCDfghKC/QXlbc9Dk004xaYa7uZcoBq3BVvg
zbfyK1hFS+a186l3wSSGzefJdwkC1j7Sv8xI9fZGzAt5by2qJNPLcf7Ji80MO5M7
U6ZAUUjOW50d1BfsZB+rOFeyNudQ3qXtuFIQCN+9Um1Q0FhWdbVE9I4kIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org