Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nhK-Sh1jFo97dJpDMYj1GyYuFyI.roa
File:                     nhK-Sh1jFo97dJpDMYj1GyYuFyI.roa (raw, json)
Hash identifier:          TKFj41Yb5/sEOeU4HZ1kaNcDHHM1AybLMGepl2bcp0k=
Subject key identifier:   9E:12:BE:4A:1D:63:16:8F:7B:74:9A:43:31:88:F5:1B:26:2E:17:22
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       1A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nhK-Sh1jFo97dJpDMYj1GyYuFyI.roa
Signing time:             Tue 11 Oct 2022 01:12:08 +0000
ROA not before:           Tue 11 Oct 2022 01:12:08 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        114.142.128.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:12:08 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=9E12BE4A1D63168F7B749A433188F51B262E1722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:12:0e:66:5b:a0:12:58:58:0f:bd:3a:c0:
                    b0:56:2e:df:bc:17:25:a6:80:d7:17:c1:7d:a5:1e:
                    d6:46:78:7f:4e:0e:6f:1c:fc:c3:b8:e7:6d:8c:cc:
                    db:c1:e0:1c:0c:01:2b:0d:e9:82:2d:ba:6c:0d:26:
                    87:f9:4f:58:16:c5:93:1b:99:62:3a:d8:78:c3:dd:
                    d7:88:43:f6:d2:ad:b2:73:7a:a5:52:e2:5d:c3:ad:
                    b0:b7:df:6b:55:d0:64:46:52:5d:9c:b7:9f:24:93:
                    e4:be:c1:9d:22:24:60:40:af:45:92:0f:64:41:c6:
                    3a:e6:cb:51:9b:a8:14:ac:ec:0a:fa:7b:c2:78:59:
                    cd:07:94:75:7b:ea:15:3a:f0:d6:44:88:a3:cc:f4:
                    46:38:39:54:a4:5e:6a:52:19:92:a7:df:a5:93:d3:
                    93:53:42:87:9f:08:e4:83:ed:ce:1a:10:df:6d:05:
                    7e:3f:96:4b:83:ad:d1:b1:2a:00:70:1e:03:a1:86:
                    5d:06:aa:8d:94:b3:a3:41:33:14:9e:78:3a:eb:ab:
                    c1:9b:61:e3:96:92:46:5e:93:49:fb:c1:e8:bb:0a:
                    0f:73:66:87:72:92:55:a3:cd:19:93:bd:ce:9d:9c:
                    71:65:d0:9a:4b:ed:77:f4:e5:f3:cf:4f:7d:9b:f8:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:BE:4A:1D:63:16:8F:7B:74:9A:43:31:88:F5:1B:26:2E:17:22
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nhK-Sh1jFo97dJpDMYj1GyYuFyI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d1:ee:e4:f7:4b:02:9e:65:a2:5e:b1:fa:bc:53:13:4b:13:bc:
         61:c8:2f:b5:07:9f:05:31:10:ec:ea:c2:82:0a:3f:69:d7:5b:
         df:44:43:54:89:3c:37:7d:35:eb:b0:d3:91:db:8c:f6:28:7e:
         c5:e1:91:78:ac:1b:08:78:82:fe:d7:f7:15:73:b7:76:cb:8c:
         2d:6a:77:c6:95:f9:e7:3d:90:32:09:92:68:c5:ea:02:a7:6d:
         c5:63:cc:82:02:87:13:42:6b:b9:9c:fa:48:f2:9d:b4:74:09:
         a8:f4:91:94:b9:0b:88:3a:f0:41:92:46:52:21:7a:f0:e7:76:
         7c:47:3a:6a:dc:f3:10:f8:e3:5f:73:39:c8:2f:9e:f9:fe:67:
         5d:f7:f0:1b:34:1c:31:ee:47:6b:07:a5:38:cd:9d:9e:fc:96:
         49:8c:a6:1c:ea:b5:f5:9b:24:e5:e5:0f:31:93:19:25:c3:43:
         7e:66:d5:c1:f0:d6:fc:76:8f:b4:12:cf:6b:ad:85:06:a6:58:
         9a:b5:15:31:f6:e2:77:1a:a5:d0:6b:64:6e:eb:70:2b:81:02:
         f9:33:01:56:70:4b:e5:37:e2:4e:95:cd:7a:dc:17:21:75:09:
         4c:ee:18:c0:77:c3:87:71:e8:f5:e3:48:1e:52:e2:de:fc:e1:
         4f:d2:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org