Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hNPXpPYysPGDfY_R2_8TAmztu9s.roa
File:                     hNPXpPYysPGDfY_R2_8TAmztu9s.roa (raw, json)
Hash identifier:          nK1DiFaQbnqn5fZqkodG0uee0XJxQweTnsBMX33CYP8=
Subject key identifier:   84:D3:D7:A4:F6:32:B0:F1:83:7D:8F:D1:DB:FF:13:02:6C:ED:BB:DB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       29
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hNPXpPYysPGDfY_R2_8TAmztu9s.roa
Signing time:             Tue 11 Oct 2022 01:46:01 +0000
ROA not before:           Tue 11 Oct 2022 01:46:01 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     18134
IP address blocks:        111.125.144.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:46:01 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=84D3D7A4F632B0F1837D8FD1DBFF13026CEDBBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:a2:e2:78:1b:72:b8:93:12:b8:5b:54:29:
                    cc:29:b9:3a:b4:ee:bb:8b:54:ee:c7:f4:72:5e:f5:
                    a5:e2:d8:16:fa:20:68:98:57:55:fa:87:f8:cb:64:
                    44:3b:0f:76:5b:87:8e:c5:2d:5c:26:69:31:85:b9:
                    70:e7:da:3d:ac:9c:d0:df:d0:8c:ac:93:86:6c:33:
                    38:02:50:dd:14:02:1c:72:32:8d:49:2e:17:82:32:
                    83:20:ed:36:86:82:f5:dd:72:0b:88:cf:68:22:7c:
                    bb:fe:d8:b4:78:62:c4:bf:dd:98:cf:b1:ab:59:84:
                    5f:e6:f0:62:4d:8f:26:b3:ff:b9:18:21:5e:4b:2b:
                    3c:29:cd:f2:76:ac:8a:4c:08:dd:69:bd:26:86:99:
                    cf:35:d3:8e:89:d6:d2:7d:e2:0c:fc:a7:02:74:07:
                    86:16:02:02:51:ea:27:33:a6:02:e5:de:aa:f6:27:
                    02:d5:56:62:85:ed:93:05:3b:15:1c:4d:5b:6c:d6:
                    f0:7f:07:20:1c:34:f0:65:b9:9c:10:d2:27:1e:37:
                    e5:f5:69:12:c8:5e:60:72:91:c6:e3:35:a6:ee:1d:
                    46:af:d9:f2:b7:6f:cd:b9:55:fc:91:9b:ee:fd:a9:
                    6d:0b:8b:ae:32:cf:28:b4:16:6b:82:cf:94:2f:d6:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D3:D7:A4:F6:32:B0:F1:83:7D:8F:D1:DB:FF:13:02:6C:ED:BB:DB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hNPXpPYysPGDfY_R2_8TAmztu9s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:04:03:89:db:a2:00:f9:1b:fb:3f:46:8b:d3:1b:60:95:
         6e:c8:b7:06:19:9a:48:ae:19:84:7f:ef:b9:1f:cf:e1:3d:d4:
         0d:75:84:e8:76:a8:ad:04:ff:27:b6:86:dd:ec:c0:a7:db:0f:
         25:7c:38:4c:c3:15:8b:26:89:85:f4:4a:6e:6b:8b:b5:80:f9:
         29:fd:73:bf:ca:54:1c:b7:c6:15:00:91:88:6b:b0:aa:e7:bf:
         f3:43:6b:85:f1:da:8a:b6:4f:a5:ae:3d:01:e6:a6:6c:20:b7:
         8c:67:ce:82:59:90:c8:f3:7e:5e:8c:fb:01:a0:b0:7c:6d:9f:
         7f:d0:f6:29:d4:b0:4e:79:21:25:9f:d1:51:d8:ca:0f:ce:b6:
         67:f9:38:de:2b:b4:03:8f:64:b8:28:0d:47:19:2b:f0:b3:50:
         02:7e:53:23:05:09:0e:e5:69:46:6f:8d:47:2e:57:33:ed:f5:
         3a:e1:5e:6d:03:55:50:f4:02:dd:1e:37:95:fd:15:d7:c3:81:
         2d:f8:9e:b4:38:7b:30:ce:f7:a3:8c:38:3d:7b:64:8c:9f:3e:
         e8:96:b1:2d:86:b2:ca:43:73:ea:68:52:6d:ee:95:bf:02:c1:
         6b:da:ac:c9:66:d1:0c:53:14:14:9f:dd:cc:d7:f3:d9:69:20:
         11:0a:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org