Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/XnQMVSBCXzNsaanfQY9e5qrMYtI.roa
File:                     XnQMVSBCXzNsaanfQY9e5qrMYtI.roa (raw, json)
Hash identifier:          nHE1Dcp3HDW5OL5M2qSLaDYnSvqkRrSm3aYRVBujHPU=
Subject key identifier:   5E:74:0C:55:20:42:5F:33:6C:69:A9:DF:41:8F:5E:E6:AA:CC:62:D2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       73
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XnQMVSBCXzNsaanfQY9e5qrMYtI.roa
Signing time:             Mon 17 Oct 2022 02:47:52 +0000
ROA not before:           Mon 17 Oct 2022 02:47:52 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     24276
IP address blocks:        114.69.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:47:52 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5E740C5520425F336C69A9DF418F5EE6AACC62D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:59:b5:63:97:cf:00:9c:93:c4:87:49:25:
                    a7:29:c5:ad:75:d7:d8:42:6f:c9:bc:8e:80:7c:ab:
                    cc:ec:09:97:46:59:2a:3d:e4:12:7d:b8:ac:5b:30:
                    c8:83:60:69:f5:2e:c5:f5:31:c5:a2:b4:8d:ff:89:
                    ee:18:52:8b:6f:20:f1:12:2d:ae:53:b9:47:be:08:
                    d0:8a:7c:75:2d:f9:de:b5:39:78:3b:60:20:c1:02:
                    15:b3:07:bc:c6:e2:ec:4a:31:eb:82:41:84:e8:7c:
                    59:2d:72:a9:87:76:08:7e:af:9b:01:6f:03:24:27:
                    8f:3c:f7:dc:12:73:88:bd:88:fc:e3:2a:ad:9c:72:
                    0f:e5:3a:2b:f3:05:84:68:86:65:19:df:22:81:4f:
                    ac:72:65:42:0f:ec:55:6f:d1:7c:78:24:58:d8:e4:
                    ec:0c:d7:d0:58:51:64:2c:e7:4f:d8:61:59:87:85:
                    59:86:ba:07:a1:a8:68:7c:b0:2a:15:18:5c:1f:02:
                    35:6a:25:8d:ae:33:80:5b:34:d9:e7:09:ff:b6:dd:
                    e6:f2:20:de:26:ba:6e:0a:22:d3:33:e0:92:70:28:
                    95:f7:f8:14:96:5a:f9:00:2c:12:e0:bf:62:85:7e:
                    e6:17:a6:fb:c3:6e:3d:28:17:d5:51:f8:35:85:14:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:0C:55:20:42:5F:33:6C:69:A9:DF:41:8F:5E:E6:AA:CC:62:D2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XnQMVSBCXzNsaanfQY9e5qrMYtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.69.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:89:91:6e:f2:ab:42:0d:1e:01:d9:c7:43:16:4a:de:6a:
         47:b4:3c:19:83:80:11:5c:4a:27:4d:44:fc:a2:76:98:bc:36:
         ef:20:7e:7f:1e:68:95:90:52:54:11:f7:d9:07:83:ed:bb:be:
         0f:f9:b4:36:c9:2c:45:10:bb:83:05:1c:bf:12:8d:7b:7e:5b:
         b1:6f:3b:0c:b8:c8:db:3e:6d:30:85:bf:ed:7b:c7:e6:d6:a5:
         ef:36:37:74:3f:20:98:c4:41:86:be:3b:2e:1b:df:f7:00:f7:
         2d:3c:6a:cf:32:80:50:53:fb:c6:1b:43:87:55:64:2d:22:01:
         92:70:db:0e:af:ba:19:65:f0:39:a5:0c:0a:f5:b0:b6:18:d4:
         bb:96:9f:e0:98:0c:eb:30:bd:16:4e:24:5a:88:1e:41:61:9c:
         a7:a4:51:95:46:bd:b1:dd:07:ce:df:d7:d4:97:76:19:82:70:
         e8:bb:89:48:60:5a:79:e7:2e:44:73:7a:28:9e:47:59:a4:fb:
         7f:c3:09:ba:4b:39:ba:b6:2e:d1:a6:63:94:a6:eb:37:95:42:
         f6:0b:b1:e1:c2:82:44:aa:75:33:f1:48:33:f2:d1:6b:31:3e:
         41:83:1a:b7:db:3c:38:3b:3e:37:11:4e:f4:4d:30:94:0b:43:
         0f:56:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org