Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ar8e-Ib9t82mSUaIl_ft33UMe8Y.roa
File:                     Ar8e-Ib9t82mSUaIl_ft33UMe8Y.roa (raw, json)
Hash identifier:          PK4F/yknM08NNme9cuiRGmUHPb2IyYX2MYX+EG3eLCg=
Subject key identifier:   02:BF:1E:F8:86:FD:B7:CD:A6:49:46:88:97:F7:ED:DF:75:0C:7B:C6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       FA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ar8e-Ib9t82mSUaIl_ft33UMe8Y.roa
Signing time:             Thu 24 Nov 2022 01:07:27 +0000
ROA not before:           Thu 24 Nov 2022 01:07:27 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        202.138.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov 24 01:07:27 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=02BF1EF886FDB7CDA649468897F7EDDF750C7BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:77:f5:60:fa:b3:0d:b2:d2:69:f9:ae:19:
                    b7:f1:2c:63:65:02:36:d5:93:00:52:f4:85:0a:cb:
                    d4:34:6a:0b:65:52:65:ff:9c:fc:87:22:83:8e:8d:
                    72:1d:c7:f0:3b:0b:31:a9:e5:24:48:a7:d3:e8:63:
                    35:03:a5:ac:b6:20:b8:ad:f9:66:38:f6:b1:43:49:
                    3c:4e:4f:97:f4:53:15:97:71:ec:78:3c:81:1d:c9:
                    a0:bc:1d:cc:3f:4b:d5:c1:fe:6a:a6:dd:38:08:15:
                    40:dc:13:e0:0e:c4:c6:39:b9:38:f0:36:e1:f8:30:
                    e9:28:3b:fa:0f:ce:7f:37:76:0e:97:d2:d2:4c:4d:
                    30:5d:28:34:fd:bd:86:df:5c:c5:6f:53:9b:18:b7:
                    06:4f:d5:15:03:0f:5f:8a:10:96:d9:73:d0:ca:4b:
                    0e:78:9a:9d:7c:a4:74:bd:0f:53:6d:bf:4a:f9:b9:
                    56:09:5f:74:cf:e3:c8:b3:5b:ac:77:e8:08:cf:91:
                    a7:a1:25:ef:73:96:38:12:2a:09:e4:d9:41:71:10:
                    c6:52:1a:e3:66:f9:5f:fc:f5:20:ac:ea:44:47:eb:
                    89:8f:b1:06:14:d1:2e:46:e0:4e:1f:18:53:11:ad:
                    20:f5:60:43:e0:55:4c:a5:b2:11:da:0c:e1:f1:1e:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BF:1E:F8:86:FD:B7:CD:A6:49:46:88:97:F7:ED:DF:75:0C:7B:C6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ar8e-Ib9t82mSUaIl_ft33UMe8Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.138.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e8:e4:e9:68:08:76:22:32:53:ee:73:43:57:d1:7a:02:45:1f:
         c9:ec:7a:df:1a:1e:d6:30:e2:63:5f:2b:b7:b7:6e:33:88:b1:
         dc:1c:6a:fc:3c:33:df:23:71:40:b9:1f:dc:ec:0f:f5:fe:9a:
         01:58:d2:44:0a:71:aa:91:a0:a3:6d:8c:ec:fd:71:28:cc:8d:
         30:1a:00:34:c4:df:88:52:f9:28:cc:9c:5c:4c:3d:ba:9c:59:
         5c:9b:c0:ef:58:a5:98:d1:00:27:6b:eb:67:07:ed:db:2d:0f:
         43:73:af:61:1b:12:23:54:b1:0d:6c:84:e5:25:22:4d:a4:ed:
         d0:bb:e9:c3:df:53:b2:fb:88:58:11:e3:6b:28:54:9e:3f:9f:
         1e:c0:6b:98:eb:83:60:3b:33:11:26:41:e1:3a:7f:fe:13:be:
         44:57:2a:04:18:cc:9d:fc:5f:36:a9:48:f7:de:ff:f5:c2:6d:
         6c:2c:84:83:91:4f:8b:f4:4f:81:07:ac:a4:c0:8d:2b:09:a4:
         10:ee:e0:a4:cd:64:c8:4c:b6:a0:7f:c8:3a:0b:49:08:0e:b9:
         c3:ac:db:96:84:b9:f6:65:0a:db:26:a6:3e:b4:f4:e1:65:41:
         98:df:92:f8:ac:5e:d0:33:4d:a9:94:2d:7c:8c:02:1b:4d:5b:
         dd:4e:ae:83
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjExMjQw
MTA3MjdaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyQkYxRUY4ODZGREI3
Q0RBNjQ5NDY4ODk3RjdFRERGNzUwQzdCQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPynf1YPqzDbLSafmuGbfxLGNlAjbVkwBS9IUKy9Q0agtlUmX/
nPyHIoOOjXIdx/A7CzGp5SRIp9PoYzUDpay2ILit+WY49rFDSTxOT5f0UxWXcex4
PIEdyaC8Hcw/S9XB/mqm3TgIFUDcE+AOxMY5uTjwNuH4MOkoO/oPzn83dg6X0tJM
TTBdKDT9vYbfXMVvU5sYtwZP1RUDD1+KEJbZc9DKSw54mp18pHS9D1Ntv0r5uVYJ
X3TP48izW6x36AjPkaehJe9zljgSKgnk2UFxEMZSGuNm+V/89SCs6kRH64mPsQYU
0S5G4E4fGFMRrSD1YEPgVUylshHaDOHxHrsFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUAr8e+Ib9t82mSUaIl/ft33UMe8YwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0FyOGUtSWI5dDgybVNVYUlsX2Z0MzNVTWU4WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKilAwDQYJKoZIhvcNAQELBQADggEBAOjk6WgIdiIyU+5zQ1fRegJFH8ns
et8aHtYw4mNfK7e3bjOIsdwcavw8M98jcUC5H9zsD/X+mgFY0kQKcaqRoKNtjOz9
cSjMjTAaADTE34hS+SjMnFxMPbqcWVybwO9YpZjRACdr62cH7dstD0Nzr2EbEiNU
sQ1shOUlIk2k7dC76cPfU7L7iFgR42soVJ4/nx7Aa5jrg2A7MxEmQeE6f/4TvkRX
KgQYzJ38XzapSPfe//XCbWwshIORT4v0T4EHrKTAjSsJpBDu4KTNZMhMtqB/yDoL
SQgOucOs25aEufZlCtsmpj609OFlQZjfkvisXtAzTamULXyMAhtNW91OroM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org