Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cEgG3LqHqoJkguEtT0Cw7w8KO7A.roa
File:                     cEgG3LqHqoJkguEtT0Cw7w8KO7A.roa (raw, json)
Hash identifier:          2Gv6891Kele04XqkskRbFxLtaVrqURXmfjW0ulM3fPI=
Subject key identifier:   70:48:06:DC:BA:87:AA:82:64:82:E1:2D:4F:40:B0:EF:0F:0A:3B:B0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       46
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cEgG3LqHqoJkguEtT0Cw7w8KO7A.roa
Signing time:             Mon 17 Oct 2022 01:41:46 +0000
ROA not before:           Mon 17 Oct 2022 01:41:46 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9378
IP address blocks:        180.131.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:41:46 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=704806DCBA87AA826482E12D4F40B0EF0F0A3BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:14:b7:ac:0e:68:ec:dc:6e:ac:83:ec:0e:
                    db:4d:f5:75:d6:f0:6d:ed:70:e9:39:b0:5c:b5:41:
                    8a:2f:a8:41:0f:96:f0:ef:cc:ad:d6:b3:5a:a1:de:
                    8b:73:48:62:db:ee:38:18:ce:bb:13:a2:33:e5:01:
                    8b:d1:e7:b1:87:ca:db:e6:cb:65:2b:7d:6c:7a:12:
                    ae:7f:36:50:34:12:a0:9b:66:8d:19:f6:1c:51:f4:
                    4e:a4:a3:6b:6e:f6:e6:03:f7:27:0e:ed:86:b0:60:
                    70:85:25:29:5e:6b:59:ce:7d:bc:68:ed:27:ee:51:
                    25:ed:b4:fc:99:84:a5:39:58:aa:67:e0:6b:cc:28:
                    49:8d:82:5f:90:1f:5f:61:5f:fa:9a:42:b6:ac:05:
                    8f:7e:00:c4:02:ca:d7:9a:16:4a:f3:ca:c1:93:1d:
                    01:3f:52:03:fb:9b:a7:fb:c9:48:15:c1:65:49:2a:
                    d3:69:a7:6b:a8:10:c1:0b:6c:5a:d7:d1:82:03:fe:
                    de:36:73:dd:24:00:a9:66:64:59:7a:17:86:93:38:
                    20:fa:dd:0c:4b:52:64:27:6b:78:11:6f:6e:96:c9:
                    7b:e3:84:d9:46:4f:28:16:5c:24:d9:d6:78:5f:c1:
                    ed:7b:ea:f0:e5:5e:bf:8d:0e:32:8d:f9:0c:86:a0:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:06:DC:BA:87:AA:82:64:82:E1:2D:4F:40:B0:EF:0F:0A:3B:B0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cEgG3LqHqoJkguEtT0Cw7w8KO7A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c9:0f:98:1f:7d:e9:33:8b:39:ec:07:8f:ab:30:f1:a2:e5:06:
         8b:ea:dc:d3:0f:2d:de:87:df:20:fa:ed:b4:dd:e8:a6:92:6b:
         65:e5:76:9d:e4:ea:ad:61:69:cc:ac:c9:87:f2:09:da:1d:7b:
         5a:66:06:96:39:3a:8a:34:43:71:55:f3:dd:73:0b:94:bb:25:
         95:62:81:e9:4f:03:3c:18:d2:d8:95:d7:6f:0b:9f:8b:8f:f7:
         db:f5:ba:8c:d9:35:a8:a8:9d:58:57:db:5a:e9:85:c3:49:17:
         f2:0e:d1:9b:3e:78:b0:08:9a:65:66:12:1e:6c:b1:d9:1e:41:
         cc:a7:56:15:62:3d:c6:02:1a:4b:24:9b:71:be:50:a4:90:3e:
         86:8b:dd:d5:b2:95:79:0c:5c:2b:09:98:4c:50:87:34:14:b0:
         d7:e0:f2:f7:18:1a:93:c5:3b:fe:23:84:fa:02:c3:fd:3a:e2:
         1b:b3:d5:48:12:8b:ea:fb:1c:cc:7f:78:e5:9c:8b:28:84:3f:
         eb:db:33:46:af:c3:26:e2:29:b2:0b:5a:cf:ca:ed:27:41:84:
         cc:d6:d3:97:bc:df:e5:7c:66:0a:fe:79:69:77:e5:a9:ef:23:
         81:86:a4:f4:54:78:3b:4b:62:59:d7:a1:35:a9:b8:56:14:0a:
         89:de:dc:59
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAx
NDE0NloXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNzA0ODA2RENCQTg3QUE4
MjY0ODJFMTJENEY0MEIwRUYwRjBBM0JCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALAxFLesDmjs3G6sg+wO2031ddbwbe1w6TmwXLVBii+oQQ+W8O/M
rdazWqHei3NIYtvuOBjOuxOiM+UBi9HnsYfK2+bLZSt9bHoSrn82UDQSoJtmjRn2
HFH0TqSja2725gP3Jw7thrBgcIUlKV5rWc59vGjtJ+5RJe20/JmEpTlYqmfga8wo
SY2CX5AfX2Ff+ppCtqwFj34AxALK15oWSvPKwZMdAT9SA/ubp/vJSBXBZUkq02mn
a6gQwQtsWtfRggP+3jZz3SQAqWZkWXoXhpM4IPrdDEtSZCdreBFvbpbJe+OE2UZP
KBZcJNnWeF/B7Xvq8OVev40OMo35DIags80CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRwSAbcuoeqgmSC4S1PQLDvDwo7sDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvY0VnRzNMcUhxb0prZ3VFdFQwQ3c3dzhLTzdBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7SDmDANBgkqhkiG9w0BAQsFAAOCAQEAyQ+YH33pM4s57AePqzDxouUGi+rc
0w8t3offIPrttN3oppJrZeV2neTqrWFpzKzJh/IJ2h17WmYGljk6ijRDcVXz3XML
lLsllWKB6U8DPBjS2JXXbwufi4/32/W6jNk1qKidWFfbWumFw0kX8g7Rmz54sAia
ZWYSHmyx2R5BzKdWFWI9xgIaSySbcb5QpJA+hovd1bKVeQxcKwmYTFCHNBSw1+Dy
9xgak8U7/iOE+gLD/TriG7PVSBKL6vsczH945ZyLKIQ/69szRq/DJuIpsgtaz8rt
J0GEzNbTl7zf5XxmCv55aXflqe8jgYak9FR4O0tiWdehNam4VhQKid7cWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org