Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MeGKY8nKiSkvGY0FNWosUVXCm4g.roa
File:                     MeGKY8nKiSkvGY0FNWosUVXCm4g.roa (raw, json)
Hash identifier:          tli8qPC8tmntZSr+avbHuRLxJhZmrKs6qxzLI/sKVIc=
Subject key identifier:   31:E1:8A:63:C9:CA:89:29:2F:19:8D:05:35:6A:2C:51:55:C2:9B:88
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       6A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MeGKY8nKiSkvGY0FNWosUVXCm4g.roa
Signing time:             Mon 17 Oct 2022 02:34:07 +0000
ROA not before:           Mon 17 Oct 2022 02:34:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23788
IP address blocks:        202.148.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:34:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=31E18A63C9CA89292F198D05356A2C5155C29B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:0c:88:9e:ec:47:b7:ba:09:d6:26:4e:47:
                    0d:25:b8:3e:1e:56:3c:fc:e9:5d:a4:09:86:6f:fe:
                    fa:e9:44:3e:11:bb:dd:3f:91:b1:c7:19:6d:df:06:
                    d7:7b:75:ea:f2:22:8b:70:2a:c7:d1:c6:5c:f6:f3:
                    45:f7:05:7f:24:a4:97:47:1e:10:13:81:98:7a:ae:
                    54:01:77:fd:9e:0c:1c:1e:51:99:d5:f1:8e:b6:d1:
                    2d:98:db:95:6c:1d:a2:0a:5c:ca:c5:18:b9:f8:e2:
                    53:83:53:c5:07:60:57:c7:01:96:9a:b0:ad:92:b5:
                    13:b4:dd:01:0c:84:97:b3:ea:3e:be:7b:ab:e7:90:
                    84:9b:bd:37:6e:e9:ed:1e:37:a6:f0:a9:96:ae:50:
                    38:d2:5f:61:0a:79:91:a1:a2:b9:1a:93:ef:e3:2f:
                    fd:29:14:f8:3b:9a:8c:52:46:89:be:f5:99:10:23:
                    37:db:de:f1:b4:0e:9e:e3:2f:a0:b3:0d:56:44:9d:
                    b2:78:eb:60:25:76:ed:29:8b:9c:57:1a:86:cb:76:
                    fc:83:7f:22:00:32:bc:1d:75:ba:f3:94:dd:bd:cd:
                    b9:50:09:28:7e:62:4d:f2:af:55:46:7f:9f:09:ec:
                    82:46:20:96:2f:53:b5:fe:9a:1c:f9:fe:5f:88:3c:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E1:8A:63:C9:CA:89:29:2F:19:8D:05:35:6A:2C:51:55:C2:9B:88
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MeGKY8nKiSkvGY0FNWosUVXCm4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:16:cf:0c:de:ef:a1:90:5b:a7:f8:11:a1:c7:e7:14:21:8f:
         ab:93:36:00:5b:16:0d:80:03:40:e0:31:7b:b7:9e:69:4d:2b:
         80:48:2b:23:03:4b:51:7e:4c:2a:6e:e7:60:b8:b1:3f:66:15:
         91:c2:89:60:bb:bb:b6:26:1b:5f:1d:60:92:9f:c9:d1:3f:ae:
         a5:bf:c3:1f:fe:f0:fb:19:13:5d:11:40:62:42:9b:54:46:c5:
         a4:ff:43:ae:52:57:c5:8e:6d:4e:a6:91:23:f2:e5:09:ff:65:
         07:2e:01:c1:87:74:32:11:08:a4:35:a6:eb:7f:2e:5e:15:d7:
         8b:3d:98:a3:04:4c:42:e6:55:5e:ae:0b:2b:62:92:9d:45:53:
         44:36:9d:45:f6:af:a4:20:c8:c6:8d:17:e8:92:63:82:ab:b7:
         44:c5:3a:19:45:1b:6a:82:a7:ef:9b:a4:2c:2d:7f:ac:6a:50:
         10:5a:38:17:2b:fb:6f:be:60:50:34:d5:f9:9d:49:3f:a9:18:
         22:29:7f:3a:26:08:03:1e:04:2c:ab:91:aa:a6:e4:16:cd:89:
         58:54:05:ed:d4:0f:d2:70:11:86:5c:84:35:f3:a9:62:5f:99:
         3f:e6:ef:02:b4:69:fb:39:36:b0:09:68:be:9e:9b:06:33:1d:
         bf:68:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org