Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tUbjFapefZUIrUSCqSmxIdugo2w.roa
File:                     tUbjFapefZUIrUSCqSmxIdugo2w.roa (raw, json)
Hash identifier:          qqvlpeDV5GSnOPjkuZ4hJhmC0auQyHgJDidsXGK85ds=
Subject key identifier:   B5:46:E3:15:AA:5E:7D:95:08:AD:44:82:A9:29:B1:21:DB:A0:A3:6C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       DC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tUbjFapefZUIrUSCqSmxIdugo2w.roa
Signing time:             Mon 31 Oct 2022 02:06:05 +0000
ROA not before:           Mon 31 Oct 2022 02:06:05 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        180.220.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:06:05 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B546E315AA5E7D9508AD4482A929B121DBA0A36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:3c:fe:60:6d:42:a5:52:b5:ed:48:41:09:
                    93:16:b4:3a:9d:4e:c6:1a:87:33:69:71:6f:1c:ad:
                    7c:80:ea:a9:fb:69:fe:50:ba:d6:0e:00:b0:87:76:
                    b5:ae:f4:47:72:7d:ed:34:84:30:cc:f5:65:d7:bd:
                    32:8c:1c:7b:8b:4f:90:40:8b:f5:5b:92:a7:e8:13:
                    94:dd:42:26:80:61:2c:09:b3:31:de:50:07:a8:0f:
                    f5:fc:6e:b3:fe:4d:1c:c4:4a:22:a1:b6:91:ff:4a:
                    d9:77:76:84:f0:82:ae:84:f6:bf:18:e8:0d:95:8e:
                    be:f0:fd:a8:60:44:59:76:b8:6c:f4:a0:98:53:32:
                    71:e1:50:22:d7:6f:cc:d9:2d:7b:fc:b1:76:88:bc:
                    31:3c:e2:f9:0e:27:ba:ea:26:5f:51:b9:19:41:77:
                    ef:0a:bd:96:e6:68:2a:15:a1:af:7b:35:ca:12:ee:
                    c4:c6:4f:f4:89:f0:3d:27:ef:16:e0:e6:c5:8e:12:
                    73:32:0f:ec:04:e8:c2:7c:46:e7:6d:67:cc:6d:b2:
                    70:73:31:02:ec:9f:a8:d3:f8:e3:fb:f8:0b:10:de:
                    f3:83:7c:5c:10:da:e0:0a:14:f8:f3:d9:96:3d:78:
                    92:fc:a6:3d:01:44:24:c6:2c:fd:91:bf:a1:fd:b8:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:E3:15:AA:5E:7D:95:08:AD:44:82:A9:29:B1:21:DB:A0:A3:6C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tUbjFapefZUIrUSCqSmxIdugo2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         60:79:6d:11:cd:db:e2:5a:fc:3e:a4:6e:c9:bb:49:34:f6:c4:
         b1:45:1f:ed:34:d3:bf:d1:75:2a:1c:48:66:62:c8:13:04:8a:
         20:d9:94:f6:78:ac:da:6c:25:0e:78:fb:23:50:0b:37:57:04:
         a0:6a:8c:f6:fe:f6:db:2a:92:7c:07:91:96:ca:53:8e:13:4a:
         84:68:63:6c:0c:eb:ad:f6:41:2e:f9:a2:9b:bb:21:5a:44:31:
         54:61:dd:5d:d4:5b:5c:42:45:e1:e8:bd:f8:88:67:24:48:74:
         ac:2a:db:f8:07:6e:a5:3b:e3:a1:5b:6c:c9:6f:30:00:cb:dc:
         04:b1:da:32:07:77:7a:ca:38:b6:96:d4:58:13:46:5d:4c:8c:
         27:57:f1:ac:d9:ab:f0:aa:56:cf:0e:e2:41:6c:75:90:c0:64:
         8f:52:a7:6a:0b:84:61:ad:80:30:84:51:70:3f:53:a1:d8:c1:
         a5:51:a8:c2:71:a9:ac:2f:35:d5:74:ae:09:24:78:64:ec:af:
         cc:49:24:a9:2f:9d:fb:7e:90:f7:d6:a6:6f:62:67:58:f7:f5:
         87:3f:93:81:17:fc:52:e6:3e:72:1b:9e:1a:de:2b:82:92:de:
         80:54:02:c7:d4:db:17:0b:43:c8:06:16:84:31:9a:31:68:9e:
         15:92:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org