Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rcusE9Krru9WXuh1152hdPhEPiQ.roa
File:                     rcusE9Krru9WXuh1152hdPhEPiQ.roa (raw, json)
Hash identifier:          q1EzlHHKxfu/iA2OrnXB3AvrzqOtgH9ClnUmuytahn4=
Subject key identifier:   AD:CB:AC:13:D2:AB:AE:EF:56:5E:E8:75:D7:9D:A1:74:F8:44:3E:24
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       24
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rcusE9Krru9WXuh1152hdPhEPiQ.roa
Signing time:             Tue 11 Oct 2022 01:36:05 +0000
ROA not before:           Tue 11 Oct 2022 01:36:05 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        223.165.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:36:05 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=ADCBAC13D2ABAEEF565EE875D79DA174F8443E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:4e:da:a0:77:f3:1c:7b:39:fd:4b:75:ac:
                    6f:a3:78:c8:bd:1e:7c:33:1f:2f:4b:20:3e:6e:e3:
                    4b:c6:2c:2c:a0:c6:f8:05:30:18:06:1e:14:52:b4:
                    24:65:ea:b5:ff:f8:ce:b7:c7:9b:af:af:3d:19:c3:
                    77:3b:92:6d:e1:51:ab:01:59:f6:84:f2:2f:0d:a6:
                    03:3e:c8:93:00:a9:64:1f:66:3d:80:a6:83:3b:02:
                    45:e3:a2:5e:83:95:6d:57:fb:bc:31:4b:78:36:16:
                    74:2a:a4:3c:a7:3b:95:a9:78:dc:3f:0f:69:06:48:
                    35:8a:b7:ce:90:1a:2c:bd:2e:b1:11:09:f7:0f:89:
                    13:6c:89:7e:4b:00:e8:56:93:1d:09:96:c5:c6:3a:
                    93:2a:c5:77:49:c9:13:57:cd:3f:50:28:32:bf:44:
                    2a:60:5c:fd:5c:f1:cb:8c:a7:dd:0b:9b:b8:de:69:
                    d2:b0:6c:8f:59:c7:db:53:c5:4b:c9:e3:3e:05:1b:
                    5d:9d:99:46:cc:f5:71:21:ca:6e:7c:02:a1:1c:ab:
                    22:ec:74:6d:42:a5:7e:d4:cd:fa:3c:d8:be:29:7d:
                    96:10:3c:cb:bb:6e:46:28:74:53:c0:e4:4e:9d:14:
                    1c:a6:35:b6:b4:ac:ef:79:a3:73:c1:4e:c6:17:d1:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:AC:13:D2:AB:AE:EF:56:5E:E8:75:D7:9D:A1:74:F8:44:3E:24
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rcusE9Krru9WXuh1152hdPhEPiQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ea:85:ae:28:d5:56:f6:ec:14:d4:bd:9a:06:e0:a3:6f:83:
         d2:ab:ca:4e:ee:c2:07:d6:fc:98:7e:74:9f:a2:07:91:4e:6b:
         82:f3:6b:cd:09:d3:f3:52:0b:76:cc:af:97:ad:c5:88:64:f2:
         c2:56:28:50:d6:1e:fd:e2:6e:3d:f4:d9:09:cb:de:f1:70:35:
         8d:5f:03:4b:a5:74:fc:a9:4a:32:8a:b1:10:45:5d:23:a0:2c:
         2b:fa:58:2f:a8:14:1c:df:1b:bd:c5:d5:8f:ed:36:6b:32:d5:
         27:ab:90:2b:f8:cb:a5:7b:0f:54:8a:cc:4e:89:d3:07:82:9c:
         f1:be:df:d5:bc:3a:d7:9a:b7:a8:48:4e:6c:6b:a5:5c:9d:17:
         4b:b2:a4:d8:67:5f:35:42:a6:1b:92:e3:db:6e:c3:72:ff:50:
         87:fd:06:b6:7e:92:b5:7c:81:67:d6:f5:ba:86:e7:a2:ec:20:
         1e:f8:20:9e:9c:a2:a7:b7:66:7c:0d:9a:ff:ae:8c:fb:af:ca:
         cb:8b:02:f5:9a:14:8e:8f:dc:17:72:f3:5a:bf:5e:b1:53:17:
         af:88:ac:0a:53:e5:05:87:6b:cd:17:e9:e6:f1:fb:02:98:18:
         c8:6c:31:98:ff:87:fa:2c:b4:9e:2b:30:94:6c:ea:3d:8c:5c:
         ad:e9:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org