Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/OPPuPqMOCbOfE0IZsJA-JnVxY2s.roa
File:                     OPPuPqMOCbOfE0IZsJA-JnVxY2s.roa (raw, json)
Hash identifier:          PqIvSTOmb0mo+r/lIvztxspyFHxP9GI1TL6gbkANx8Y=
Subject key identifier:   38:F3:EE:3E:A3:0E:09:B3:9F:13:42:19:B0:90:3E:26:75:71:63:6B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       54
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OPPuPqMOCbOfE0IZsJA-JnVxY2s.roa
Signing time:             Mon 17 Oct 2022 02:01:55 +0000
ROA not before:           Mon 17 Oct 2022 02:01:55 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18134
IP address blocks:        202.57.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:01:55 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=38F3EE3EA30E09B39F134219B0903E267571636B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:ad:1a:58:c1:f6:b3:d6:31:30:06:fa:3f:
                    f7:81:9e:18:a1:dd:f2:0d:f9:ff:ee:88:9c:dd:f9:
                    35:82:97:35:a4:ff:bd:c7:1d:54:cc:b2:fe:90:3a:
                    4d:8c:98:2d:1e:88:55:35:f8:b3:18:a0:c9:db:41:
                    f3:6e:ed:54:9d:1e:4c:c6:de:80:5a:84:5d:12:82:
                    31:d3:77:a6:df:bf:55:3a:2e:a8:c0:e7:1e:52:f8:
                    08:b5:70:d5:2d:36:0b:e8:8f:7b:d8:7f:fa:36:0c:
                    5c:3d:37:c8:82:56:f0:5f:c5:73:5e:fe:68:c6:ef:
                    eb:bf:08:aa:92:fa:69:a2:b4:1c:e0:a0:9e:af:f0:
                    c7:04:03:c3:53:b2:bb:1a:5b:0e:e0:52:1f:4d:d9:
                    83:60:15:f1:de:73:25:c3:3a:c4:52:1a:06:c8:f0:
                    5d:4d:78:ce:d8:42:40:22:93:a4:c4:34:bf:91:32:
                    3e:fe:3c:c0:28:9f:0f:6f:30:33:6d:03:70:97:26:
                    8a:8a:07:6e:85:93:ec:06:3e:32:2f:95:e0:83:b9:
                    c6:4e:f7:3c:8d:ea:fc:37:ac:3a:b7:a0:e5:d0:47:
                    36:96:d6:ae:e8:78:90:b3:f8:cc:05:85:fb:8d:bd:
                    56:59:56:0c:38:c6:10:2c:f3:b8:21:48:cb:74:78:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F3:EE:3E:A3:0E:09:B3:9F:13:42:19:B0:90:3E:26:75:71:63:6B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OPPuPqMOCbOfE0IZsJA-JnVxY2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e3:b8:9d:05:42:78:18:07:b2:2e:a8:cc:c2:ce:64:06:04:c1:
         9b:13:b8:5a:fe:92:5f:e6:6c:1c:0c:ea:e0:64:a3:05:e2:b7:
         1b:54:6a:1d:ff:f5:48:14:00:1b:7c:bb:8c:b7:0b:ad:29:63:
         bd:13:a5:5e:8b:58:32:63:64:f4:06:86:5a:9a:ea:17:ff:cb:
         7b:0e:23:09:c1:88:70:57:38:69:a2:56:ea:02:bd:4b:70:45:
         93:eb:f4:81:d6:78:5a:9a:d5:1f:72:a1:5f:06:78:2e:7b:85:
         1c:6c:35:eb:3e:00:9b:33:39:c3:d5:19:82:ab:ab:91:51:58:
         fe:b9:d1:d1:73:d2:79:df:a0:19:b8:9a:32:95:c1:2b:61:64:
         8f:75:fa:f7:9a:8a:3b:41:d9:b6:ed:8f:8d:7f:df:9e:25:a4:
         70:73:ed:b8:91:a9:97:77:97:a7:c0:d7:20:06:72:53:86:30:
         0c:f1:2d:98:48:64:90:1f:93:77:14:12:75:a4:de:1e:88:0b:
         cd:af:ff:ed:11:c3:ec:9c:6b:e9:8a:d5:61:29:2a:0e:94:00:
         d4:c8:74:51:5f:25:9b:af:12:9d:16:9f:3d:eb:1d:51:fb:2d:
         89:a0:42:b2:54:6f:27:f7:8b:76:8d:d3:11:64:a4:07:06:3f:
         52:bc:5d:fa
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAy
MDE1NVoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzhGM0VFM0VBMzBFMDlC
MzlGMTM0MjE5QjA5MDNFMjY3NTcxNjM2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALC9rRpYwfaz1jEwBvo/94GeGKHd8g35/+6InN35NYKXNaT/vccd
VMyy/pA6TYyYLR6IVTX4sxigydtB827tVJ0eTMbegFqEXRKCMdN3pt+/VTouqMDn
HlL4CLVw1S02C+iPe9h/+jYMXD03yIJW8F/Fc17+aMbv678IqpL6aaK0HOCgnq/w
xwQDw1OyuxpbDuBSH03Zg2AV8d5zJcM6xFIaBsjwXU14zthCQCKTpMQ0v5EyPv48
wCifD28wM20DcJcmiooHboWT7AY+Mi+V4IO5xk73PI3q/DesOreg5dBHNpbWruh4
kLP4zAWF+429VllWDDjGECzzuCFIy3R4bokCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ48+4+ow4Js58TQhmwkD4mdXFjazAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvT1BQdVBxTU9DYk9mRTBJWnNKQS1KblZ4WTJzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMo54DANBgkqhkiG9w0BAQsFAAOCAQEA47idBUJ4GAeyLqjMws5kBgTBmxO4
Wv6SX+ZsHAzq4GSjBeK3G1RqHf/1SBQAG3y7jLcLrSljvROlXotYMmNk9AaGWprq
F//Lew4jCcGIcFc4aaJW6gK9S3BFk+v0gdZ4WprVH3KhXwZ4LnuFHGw16z4AmzM5
w9UZgqurkVFY/rnR0XPSed+gGbiaMpXBK2Fkj3X695qKO0HZtu2PjX/fniWkcHPt
uJGpl3eXp8DXIAZyU4YwDPEtmEhkkB+TdxQSdaTeHogLza//7RHD7Jxr6YrVYSkq
DpQA1Mh0UV8lm68SnRafPesdUfstiaBCslRvJ/eLdo3TEWSkBwY/Urxd+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org