Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/XhS-ZeYkv77H1GhXp1ItRzdAoy8.roa
File:                     XhS-ZeYkv77H1GhXp1ItRzdAoy8.roa (raw, json)
Hash identifier:          sxKFhOj/CY7LDtT9zrlvkQrJq6AYKNsHlDVWOBFAEpA=
Subject key identifier:   5E:14:BE:65:E6:24:BF:BE:C7:D4:68:57:A7:52:2D:47:37:40:A3:2F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       F5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XhS-ZeYkv77H1GhXp1ItRzdAoy8.roa
Signing time:             Mon 31 Oct 2022 02:38:04 +0000
ROA not before:           Mon 31 Oct 2022 02:38:04 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        221.132.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:38:04 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5E14BE65E624BFBEC7D46857A7522D473740A32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:89:ec:3e:4c:23:67:3a:8f:12:25:88:07:
                    4b:c8:f3:30:4c:68:24:53:52:6e:bb:73:de:c0:9d:
                    c1:e4:b1:36:96:45:b6:45:4c:80:a7:e5:40:9a:1d:
                    76:ab:0f:d9:ca:32:51:e4:34:c8:ba:70:2a:a7:61:
                    65:24:b8:15:8f:e0:be:b7:ab:96:6f:3a:87:07:d1:
                    85:39:43:c9:8f:01:78:de:bc:51:7d:8c:f4:49:a1:
                    cd:5b:61:1e:af:45:67:46:3c:3c:bd:00:c5:75:de:
                    ad:4e:ee:a7:a9:00:29:ae:4f:09:ff:42:56:96:c8:
                    1e:7f:1b:f1:f2:56:16:f3:f2:d0:73:fc:c1:e2:c6:
                    e8:03:56:3b:5d:d0:5f:25:4d:a8:98:57:ec:12:f7:
                    ea:1a:88:2d:c1:6c:d2:3d:e4:f0:d5:87:0e:d4:6a:
                    d5:5a:65:3d:59:0c:cd:05:f7:ec:2e:b9:be:5e:e2:
                    e7:2d:3b:44:64:8e:96:45:56:5b:1a:6f:5f:58:f3:
                    da:cb:38:e2:2a:34:a1:fd:41:1e:c3:e2:3e:44:11:
                    c2:65:3f:be:a1:23:42:37:37:66:d3:f4:2e:05:a2:
                    ff:43:b7:4f:d9:db:5e:f4:b7:2c:29:59:57:23:37:
                    8f:99:7a:c9:ff:6d:57:15:24:6b:36:8f:7b:ee:d3:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:BE:65:E6:24:BF:BE:C7:D4:68:57:A7:52:2D:47:37:40:A3:2F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XhS-ZeYkv77H1GhXp1ItRzdAoy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:42:52:d0:5a:b3:8b:6a:f4:11:3f:28:79:5d:f2:a5:8a:
         d8:90:9b:86:bf:69:0b:f0:eb:0b:2a:a7:df:be:02:d2:7f:c9:
         e5:af:98:68:5a:62:b7:40:52:ca:fa:5e:53:27:66:69:87:da:
         bd:eb:3f:8e:ba:64:23:e4:d8:2a:db:7f:c3:7a:db:37:38:0d:
         38:65:54:37:8a:11:cc:45:e4:4d:03:7d:24:c6:b3:51:e1:c9:
         77:56:88:2a:24:da:d8:36:56:66:3f:6f:4b:fb:41:9b:c2:34:
         e7:d3:7c:f4:fb:61:d9:aa:4a:c0:2c:39:74:97:6d:91:8e:72:
         3b:1f:95:82:00:c8:9c:c7:12:b2:42:26:6c:d3:82:a1:e7:8b:
         1b:1c:26:4a:73:e0:a1:66:f3:d2:6c:2c:9f:7c:fc:57:50:18:
         79:4f:c8:7f:e5:07:7b:e9:cc:59:e8:fc:0f:78:47:6e:27:7a:
         c9:78:47:12:93:2e:85:19:72:c8:b8:d7:5e:bb:48:1a:75:2f:
         80:85:74:41:aa:23:bb:34:1e:34:27:e9:28:99:d6:59:af:13:
         b6:00:e1:15:0d:16:82:1c:9a:ab:c5:e4:f2:7d:b3:25:10:23:
         d7:06:23:18:37:84:bc:64:0a:4c:b3:23:c9:f5:d1:51:f2:88:
         06:ae:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org