Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/__psikArNGLYI553zRtdNNEwUsU.roa
File:                     __psikArNGLYI553zRtdNNEwUsU.roa (raw, json)
Hash identifier:          5LcKTtNSUWJhkTZw/t4nmMqNdd2br2UuvehqHeiiS0Y=
Subject key identifier:   FF:FA:6C:8A:40:2B:34:62:D8:23:9E:77:CD:1B:5D:34:D1:30:52:C5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/__psikArNGLYI553zRtdNNEwUsU.roa
Signing time:             Mon 24 Oct 2022 04:22:59 +0000
ROA not before:           Mon 24 Oct 2022 04:22:59 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.78.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:22:59 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=FFFA6C8A402B3462D8239E77CD1B5D34D13052C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:dd:9e:43:83:91:d8:63:0c:0c:c1:d2:16:
                    8e:ec:df:30:fd:3b:dc:f6:0a:f5:d4:35:b5:2c:94:
                    b2:29:e1:b5:37:7b:fd:eb:3f:60:d6:88:c7:38:27:
                    6c:16:d4:3d:27:98:71:67:3b:be:b7:c3:1b:ed:ca:
                    1c:3f:78:70:b5:61:6c:5c:23:6d:e1:77:91:78:50:
                    c8:c5:63:1d:cf:06:9b:e0:13:90:93:fa:01:4c:1e:
                    f8:6a:78:11:6b:7d:48:56:43:a2:2a:f2:51:c9:cd:
                    46:c5:b3:91:17:99:c7:46:9f:e2:ac:47:2a:01:41:
                    e9:25:4f:ad:52:5f:e7:6a:0e:0b:4c:af:34:e6:fe:
                    71:4e:30:ea:ca:5d:f8:89:c2:80:0e:25:d4:8a:6e:
                    66:5a:3c:37:9f:0b:9c:74:e9:16:10:7b:0b:f1:62:
                    25:ce:a5:9b:4a:43:01:3f:a8:36:3b:57:20:cb:8f:
                    46:ad:dc:c7:ef:6b:b4:d4:27:3e:60:d0:2a:9b:01:
                    cb:3d:dc:61:4c:bf:d2:0d:20:53:a2:f2:88:de:e8:
                    15:9f:07:f2:f3:62:7e:91:4f:ab:e3:1f:e7:6b:9a:
                    fa:79:0c:81:5b:e7:73:cc:a6:ef:13:e0:90:49:af:
                    66:78:9b:c7:9e:b9:42:c8:b3:40:a1:c4:21:24:c0:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FA:6C:8A:40:2B:34:62:D8:23:9E:77:CD:1B:5D:34:D1:30:52:C5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/__psikArNGLYI553zRtdNNEwUsU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:f2:9c:31:af:3d:ed:c9:cc:ab:90:cf:10:e8:be:c6:8e:
         64:26:8b:8b:57:41:39:f2:da:2e:ef:e5:ca:39:0f:84:3d:c9:
         a6:ab:a8:0a:af:66:73:cd:fc:7d:91:98:17:f6:26:10:e3:0f:
         f9:60:ac:8e:ad:9d:f9:fb:63:c6:e3:26:6d:5a:d2:50:b9:be:
         c1:30:ec:fb:07:24:db:0a:49:88:69:bb:af:43:39:e9:66:dd:
         92:ac:0f:ca:48:4b:06:16:41:98:25:0f:d4:c0:57:f5:3a:9a:
         e2:f9:14:20:86:e7:30:ca:f5:35:b0:e6:d3:f2:02:82:53:50:
         23:bc:27:1b:8b:cb:c1:ca:5e:5f:92:5e:45:93:f6:62:09:f5:
         c1:aa:53:55:58:57:ad:26:d3:67:f8:e7:48:cb:b7:f4:7e:86:
         b8:32:bd:cc:6e:8e:3e:7d:2d:16:99:df:66:27:ba:b5:ef:ff:
         9c:fc:c4:78:ef:34:30:3e:1c:c8:a4:95:c4:85:e9:1c:af:ba:
         a3:81:c1:55:fd:d8:df:13:68:0f:98:a9:66:3b:d8:04:fd:42:
         f1:66:66:63:13:f7:bd:01:05:84:ba:55:56:59:e5:6b:d9:a6:
         4a:62:9d:13:1d:af:16:fa:ff:b7:d6:ab:fd:c0:9b:fa:f8:68:
         8f:ea:df:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
NDIyNTlaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGRkE2QzhBNDAyQjM0
NjJEODIzOUU3N0NEMUI1RDM0RDEzMDUyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLMN2eQ4OR2GMMDMHSFo7s3zD9O9z2CvXUNbUslLIp4bU3e/3r
P2DWiMc4J2wW1D0nmHFnO763wxvtyhw/eHC1YWxcI23hd5F4UMjFYx3PBpvgE5CT
+gFMHvhqeBFrfUhWQ6Iq8lHJzUbFs5EXmcdGn+KsRyoBQeklT61SX+dqDgtMrzTm
/nFOMOrKXfiJwoAOJdSKbmZaPDefC5x06RYQewvxYiXOpZtKQwE/qDY7VyDLj0at
3Mfva7TUJz5g0CqbAcs93GFMv9INIFOi8oje6BWfB/LzYn6RT6vjH+drmvp5DIFb
53PMpu8T4JBJr2Z4m8eeuULIs0ChxCEkwAPvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU//psikArNGLYI553zRtdNNEwUsUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL19fcHNpa0FyTkdMWUk1NTN6UnRkTk5Fd1VzVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKTrAwDQYJKoZIhvcNAQELBQADggEBACjR8pwxrz3tycyrkM8Q6L7GjmQm
i4tXQTny2i7v5co5D4Q9yaarqAqvZnPN/H2RmBf2JhDjD/lgrI6tnfn7Y8bjJm1a
0lC5vsEw7PsHJNsKSYhpu69DOelm3ZKsD8pISwYWQZglD9TAV/U6muL5FCCG5zDK
9TWw5tPyAoJTUCO8JxuLy8HKXl+SXkWT9mIJ9cGqU1VYV60m02f450jLt/R+hrgy
vcxujj59LRaZ32YnurXv/5z8xHjvNDA+HMiklcSF6RyvuqOBwVX92N8TaA+YqWY7
2AT9QvFmZmMT970BBYS6VVZZ5WvZpkpinRMdrxb6/7fWq/3Am/r4aI/q33k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org