Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vHZentNitau8jJi15fRcluXIEcw.roa
File:                     vHZentNitau8jJi15fRcluXIEcw.roa (raw, json)
Hash identifier:          faWS/82gkze9oRIVqNuCRPcreYFJduj+F6Q7jXyNYRc=
Subject key identifier:   BC:76:5E:9E:D3:62:B5:AB:BC:8C:98:B5:E5:F4:5C:96:E5:C8:11:CC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       4D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vHZentNitau8jJi15fRcluXIEcw.roa
Signing time:             Mon 17 Oct 2022 01:51:35 +0000
ROA not before:           Mon 17 Oct 2022 01:51:35 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        218.45.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:51:35 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=BC765E9ED362B5ABBC8C98B5E5F45C96E5C811CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:18:65:0d:af:3a:69:7b:e9:bc:40:7d:38:
                    80:a9:a0:57:21:4c:be:79:b2:46:6e:e2:9f:36:ae:
                    01:dc:86:99:c9:be:87:8f:64:99:21:4c:37:36:76:
                    bc:32:dd:bd:44:f2:6b:78:71:23:fd:13:23:3d:72:
                    ef:a8:2d:80:5a:10:97:99:70:9f:24:87:03:18:68:
                    be:df:33:67:c3:1d:de:8a:0c:a5:52:ed:5c:13:d9:
                    d2:c7:e4:31:7a:74:e2:24:bc:3c:26:e4:81:41:e5:
                    ed:4e:0f:9b:de:33:41:f0:94:4a:e7:50:b2:96:17:
                    1f:cc:14:71:00:77:4f:54:24:51:57:44:c5:9b:d8:
                    b7:97:d6:96:45:fb:18:fe:7a:d8:76:87:ec:99:6e:
                    4a:48:67:c3:9f:42:df:0b:24:fc:0f:22:ff:de:5d:
                    c6:77:7a:b2:dd:0a:6d:30:a1:3d:53:6c:b9:8a:f3:
                    bb:2f:c3:2c:d2:9a:21:c5:d4:e8:75:e9:aa:6e:f4:
                    50:cf:77:9f:7e:22:41:bb:8e:83:49:3c:33:2f:88:
                    25:8e:e5:d9:57:fc:82:31:47:1a:3e:1d:7b:a4:8c:
                    69:d2:98:da:02:82:8b:a6:f0:b1:62:77:46:1b:90:
                    54:f2:d8:2a:d1:bd:9b:d0:06:c3:1b:06:56:2d:a8:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:5E:9E:D3:62:B5:AB:BC:8C:98:B5:E5:F4:5C:96:E5:C8:11:CC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vHZentNitau8jJi15fRcluXIEcw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:1e:6b:42:34:03:c6:ba:3e:0f:a2:a3:7a:84:43:ea:44:33:
         18:a3:9f:9c:49:8b:c9:e2:f8:79:02:24:a1:ab:66:1e:74:4d:
         03:25:0f:ca:e8:d6:1c:a7:3f:6a:b3:7a:97:26:cf:5f:52:ff:
         17:c6:9f:cb:16:3c:c4:c6:09:63:ac:86:53:a4:e7:4b:3e:98:
         9d:7f:8b:60:52:36:8b:d3:63:5e:c3:4a:10:62:35:5e:21:46:
         32:bc:0f:90:c7:f6:0a:98:85:77:b3:eb:62:3e:5f:84:48:a8:
         63:bc:98:e5:91:2b:cd:6e:ec:b3:20:b5:5b:89:2c:b2:43:b2:
         e3:39:85:f6:3b:6d:84:c1:18:f1:58:6e:c7:29:a8:95:fe:d0:
         f2:34:48:d1:2d:2b:a8:ac:51:20:35:a4:61:6f:f4:31:cf:83:
         10:7b:ba:85:8c:44:2b:ae:b2:95:04:64:f5:28:68:18:60:a4:
         68:45:0a:38:72:fe:ff:c0:6f:11:7c:d3:a8:04:d1:33:37:73:
         08:74:5e:35:d2:55:dc:ae:1a:93:24:14:ed:78:41:2b:74:12:
         3e:31:62:ad:8e:71:df:35:2e:fe:08:c5:38:65:7b:00:3d:ee:
         9d:45:d9:66:25:9d:c6:f9:0e:ce:ab:40:f7:d7:43:c7:c5:58:
         5b:50:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org