Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/AoXXDim_C5EOeGU8MVgSV1M5s_E.roa
File:                     AoXXDim_C5EOeGU8MVgSV1M5s_E.roa (raw, json)
Hash identifier:          d5zXq36hQIs74ZFaMqtNOR9wwPLTY+5KCz+ZX4Z/6sc=
Subject key identifier:   02:85:D7:0E:29:BF:0B:91:0E:78:65:3C:31:58:12:57:53:39:B3:F1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       89
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/AoXXDim_C5EOeGU8MVgSV1M5s_E.roa
Signing time:             Mon 24 Oct 2022 02:40:30 +0000
ROA not before:           Mon 24 Oct 2022 02:40:30 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        113.52.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:40:30 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0285D70E29BF0B910E78653C315812575339B3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:89:2f:e2:7e:50:59:7d:62:39:55:e2:dd:
                    07:8c:ae:0c:1f:a8:09:82:4c:0d:8f:d8:51:85:99:
                    0f:53:12:c1:57:49:c4:05:95:50:fa:ea:7d:e9:99:
                    8b:b5:8c:f0:31:c0:f3:97:e1:f8:45:6b:b0:6f:c8:
                    e4:29:a3:a0:4a:72:66:65:9e:2b:f1:5a:df:95:95:
                    b4:4d:d2:0a:74:e7:42:65:dd:b5:d7:38:69:e6:38:
                    33:d5:75:83:6b:ce:d9:67:c2:48:e0:ab:25:07:3c:
                    92:de:26:6a:7a:28:dc:12:6f:51:1f:06:c7:3a:ff:
                    78:ee:f4:c1:22:1f:34:6e:ae:83:15:be:a2:e2:1c:
                    b2:aa:ad:05:6c:ad:87:9b:e9:f3:54:20:04:86:ae:
                    a9:66:40:05:e3:75:0e:f9:d5:f9:6c:be:eb:da:1c:
                    31:c1:13:eb:1e:25:e4:a4:72:7e:e8:7d:d0:67:b1:
                    79:06:41:7c:df:2a:11:b5:b7:57:e8:a6:d5:aa:d8:
                    7a:e2:6b:3f:55:da:48:c2:bd:bc:00:39:24:70:1c:
                    4c:85:0a:71:5a:75:86:69:d4:0a:ca:99:94:9a:b3:
                    25:73:9a:92:6f:3e:af:47:9d:1b:d4:2f:cc:94:4c:
                    0e:79:e5:ec:7f:13:3f:e5:d2:82:3a:7a:2f:78:82:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:D7:0E:29:BF:0B:91:0E:78:65:3C:31:58:12:57:53:39:B3:F1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/AoXXDim_C5EOeGU8MVgSV1M5s_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:4d:3e:f3:dd:73:e7:a3:92:03:cb:61:ca:84:46:54:fb:25:
         b7:ed:ff:f1:30:c0:1a:50:f7:90:99:68:df:d8:6c:e3:3b:4e:
         3b:20:0c:cf:42:a8:9a:ce:e3:b3:dc:6f:28:87:e2:97:4b:15:
         96:7e:0a:b7:b0:73:c0:00:83:18:de:2a:72:a8:0a:e9:4b:61:
         90:1a:df:64:bf:c8:da:c0:d6:74:9b:32:30:cd:ab:a3:98:4b:
         26:bd:c1:00:b3:2a:f6:77:1f:e3:70:12:1a:d9:b2:d4:69:c5:
         10:c4:79:41:64:ad:92:8b:89:71:de:13:c7:9a:be:2b:a9:7a:
         37:85:3a:65:fe:17:70:07:9d:f5:28:c4:0b:d6:ec:7b:82:0c:
         21:da:f6:38:c7:48:07:96:62:28:97:5d:e4:0a:02:0d:c9:96:
         37:66:42:41:ba:8e:53:52:13:cd:d1:aa:65:7b:ed:e7:8f:48:
         f9:8f:e8:97:85:90:d8:88:9c:98:d5:9f:f8:cb:9a:4a:46:17:
         c3:e4:39:64:44:f5:ba:4b:02:0d:08:c3:8d:13:35:21:ab:80:
         0a:92:1f:f5:c5:5d:70:38:32:cd:95:18:43:7a:56:7d:b8:fd:
         62:1b:ff:93:b9:19:9e:a8:a2:d8:db:da:f8:bd:f9:33:a8:60:
         ae:c1:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org