Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/T1hjnDOYB1ns_JmiQ6-IqnDtenI.roa
File:                     T1hjnDOYB1ns_JmiQ6-IqnDtenI.roa (raw, json)
Hash identifier:          1Qf4IhBZloCeSzGgMgiAU3Iln6CLrvqQF4K9MpsG+H8=
Subject key identifier:   4F:58:63:9C:33:98:07:59:EC:FC:99:A2:43:AF:88:AA:70:ED:7A:72
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       4E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/T1hjnDOYB1ns_JmiQ6-IqnDtenI.roa
Signing time:             Mon 17 Oct 2022 01:53:53 +0000
ROA not before:           Mon 17 Oct 2022 01:53:53 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9378
IP address blocks:        219.124.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:53:53 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4F58639C33980759ECFC99A243AF88AA70ED7A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:24:8f:24:3c:5a:8c:39:48:78:ae:ed:86:
                    55:44:a2:2e:b7:50:0c:f5:af:bb:e9:51:bc:94:ac:
                    7a:3f:7e:b9:6a:02:45:51:ad:42:af:51:05:66:69:
                    70:9f:6a:89:53:ad:37:e8:d0:73:88:9e:f8:6f:89:
                    3d:51:49:4d:aa:23:a5:1d:f1:0a:dd:d0:14:75:da:
                    70:8d:c5:c8:67:58:d8:13:ae:db:ad:68:0a:b5:a6:
                    48:6e:be:ba:c1:aa:a4:f0:a7:b0:15:98:bd:e6:bc:
                    29:fc:94:37:1b:aa:b3:3d:84:3e:30:58:d0:52:7a:
                    82:46:f0:12:00:bd:90:8e:1e:db:95:35:5a:71:74:
                    38:e9:8d:c7:b1:d5:03:70:ef:87:ca:9a:3c:0c:8c:
                    91:3a:bf:4d:3b:2c:bf:c5:16:f1:44:5a:34:e0:5d:
                    32:33:f7:a5:ad:b8:38:38:cc:ba:c2:46:fb:bb:83:
                    f0:17:a2:bd:32:e4:8b:1a:ee:02:7f:e9:bd:41:26:
                    3c:d6:0d:3f:28:07:2b:af:03:8f:e5:bf:08:4c:7e:
                    14:28:21:9a:10:74:8c:03:cd:b0:b4:a3:4c:d0:6f:
                    a6:3f:c5:5f:32:16:c2:d7:82:dd:f9:0b:bc:4b:0c:
                    b1:67:bf:3b:23:ed:97:6a:87:c7:c8:e8:a7:12:f8:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:63:9C:33:98:07:59:EC:FC:99:A2:43:AF:88:AA:70:ED:7A:72
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/T1hjnDOYB1ns_JmiQ6-IqnDtenI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:3c:84:2c:25:c3:ca:d8:45:28:ba:bf:76:8f:76:2e:db:c6:
         51:1f:46:d9:4f:69:90:33:1b:f8:f7:a3:4a:8e:08:ec:93:93:
         74:c9:01:97:87:07:f7:81:0a:be:2d:76:84:5a:f4:f5:e0:a7:
         af:88:1e:2d:b8:78:9a:1c:21:db:0b:75:3e:8e:65:ab:2c:e4:
         12:42:41:4a:98:63:a1:92:9a:1b:37:b4:fc:19:97:26:73:1a:
         18:94:6c:00:bf:9d:84:7d:de:3c:20:ac:25:32:81:f7:76:48:
         3f:72:94:9f:57:4e:2f:69:50:ad:60:03:aa:f3:c1:ec:e4:3f:
         ff:18:d9:24:b1:ec:88:fd:7a:5e:39:43:a8:17:62:1e:2d:02:
         61:4c:e6:5e:71:f3:7a:f1:14:f1:36:8b:30:1e:d6:8f:60:f8:
         1e:d6:70:a1:aa:89:96:39:d4:9e:d0:51:2d:d8:01:27:1f:d9:
         97:a7:be:4b:2c:f0:eb:64:1b:dd:fd:c6:df:d0:89:2e:db:bb:
         f4:82:9d:c5:45:4d:3e:d4:b6:1d:26:b1:d2:da:d1:25:fc:b0:
         a5:a8:d2:d7:61:e0:e1:93:af:23:b4:5a:76:bc:87:90:e1:11:
         35:3f:97:7f:c0:d9:bd:a8:d8:09:90:f8:3e:21:88:7c:44:e6:
         cf:bd:e4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org