Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PsXAkpECJEu23hn8cBAxrB7LqUU.roa
File:                     PsXAkpECJEu23hn8cBAxrB7LqUU.roa (raw, json)
Hash identifier:          Si0GFp9m29KCw8AlWP3TuVzq24wGun+EkmXzwwe/JfQ=
Subject key identifier:   3E:C5:C0:92:91:02:24:4B:B6:DE:19:FC:70:10:31:AC:1E:CB:A9:45
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PsXAkpECJEu23hn8cBAxrB7LqUU.roa
Signing time:             Mon 24 Oct 2022 04:20:57 +0000
ROA not before:           Mon 24 Oct 2022 04:20:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        202.78.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:20:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=3EC5C0929102244BB6DE19FC701031AC1ECBA945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:01:b4:f6:52:1e:ad:4a:4a:da:db:e1:7b:
                    a3:ca:d1:fa:7c:95:32:69:19:ed:60:14:f1:32:8c:
                    6d:07:48:24:d0:6e:78:c4:b4:df:77:ae:c7:08:58:
                    ba:32:74:7d:d8:8d:2f:cb:e3:f0:95:a8:25:8e:07:
                    39:24:ae:c6:be:9f:64:2f:68:3c:dd:57:84:47:47:
                    f9:1e:bc:af:c7:28:f6:66:1b:c8:4b:d8:ec:14:6d:
                    b4:c7:40:ce:75:c2:c8:08:08:ba:a6:3c:69:02:77:
                    d9:2e:0d:52:1b:c2:b4:e2:db:87:5c:29:ac:ee:c7:
                    26:86:f9:64:ff:26:40:ee:3b:0c:09:d7:3f:e0:bd:
                    16:0e:76:3f:45:70:de:d2:ed:3c:e1:90:25:94:3e:
                    30:d2:2a:42:0f:e7:bd:76:7a:7a:10:03:4b:fc:67:
                    44:fc:38:6b:62:6b:9d:33:c0:ac:5c:db:84:09:67:
                    2a:96:34:d0:fd:6b:35:bf:e2:53:1a:b7:c7:ba:07:
                    94:ef:bf:59:a9:a1:4b:c0:82:b3:3c:9a:fc:14:48:
                    86:f9:c6:08:99:f4:d8:e5:c5:c6:1c:46:f5:f5:9b:
                    4e:fd:66:9a:cc:83:0e:38:21:13:1e:c1:5d:2c:9f:
                    94:de:bf:c7:d1:15:3d:0a:0f:8e:37:15:eb:80:e1:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:C0:92:91:02:24:4B:B6:DE:19:FC:70:10:31:AC:1E:CB:A9:45
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PsXAkpECJEu23hn8cBAxrB7LqUU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:71:78:a4:b6:53:37:a2:29:79:31:cc:4d:7d:fd:03:e3:
         1e:7c:4e:32:05:c3:01:53:d2:a2:a6:49:6b:5d:e9:45:47:9b:
         7f:01:ce:e1:1b:68:7c:c4:61:f5:eb:9c:f2:a0:fe:9b:db:ff:
         95:68:22:d7:85:bf:4f:54:50:90:92:83:e7:d0:7e:15:8a:24:
         0d:3e:ee:1b:43:89:b2:a3:a1:3d:0c:a2:19:a2:8f:5c:f2:50:
         f5:8e:53:87:2b:c0:52:6d:48:f3:b3:04:4f:31:82:5e:8b:f6:
         e5:0d:63:56:11:85:d7:4c:7f:8a:39:74:64:39:0b:08:2d:e2:
         7f:7b:21:24:33:70:d5:4b:b0:f9:e0:6b:89:c8:70:7f:22:f0:
         10:41:b8:70:f5:0d:3e:ae:66:b6:3c:85:43:2f:08:38:23:55:
         97:c6:ca:5f:6d:d9:50:51:5f:c4:27:3b:78:54:7f:27:db:b8:
         2e:be:02:53:84:7d:6f:20:c8:26:cb:cc:a8:9d:16:24:9a:b5:
         46:7e:f8:db:0f:2b:7b:b7:23:f7:37:a8:3e:a7:c7:d5:17:ce:
         3d:78:ea:a3:0e:50:70:f9:2d:6f:e8:95:4f:28:47:50:f2:43:
         1d:7c:96:de:00:df:31:32:48:19:1e:de:9d:cc:9f:12:74:1e:
         eb:61:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org