Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vvq0munuN5x8nNOXh1K8Ziuzv1E.roa
File:                     vvq0munuN5x8nNOXh1K8Ziuzv1E.roa (raw, json)
Hash identifier:          a+QpSDZt2ue20El+N/GCgWzAFeud/X0YSBD9wiQWsXQ=
Subject key identifier:   BE:FA:B4:9A:E9:EE:37:9C:7C:9C:D3:97:87:52:BC:66:2B:B3:BF:51
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       32
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vvq0munuN5x8nNOXh1K8Ziuzv1E.roa
Signing time:             Tue 11 Oct 2022 01:56:24 +0000
ROA not before:           Tue 11 Oct 2022 01:56:24 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        219.100.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:56:24 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BEFAB49AE9EE379C7C9CD3978752BC662BB3BF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:5e:77:7b:cb:e4:c9:0f:3f:4a:0c:eb:f8:
                    2b:6a:44:bb:03:63:80:12:a5:5a:e8:4b:31:39:8a:
                    f1:e9:85:1b:90:3f:85:9a:06:0f:76:93:c1:14:f3:
                    e8:2e:00:de:fe:d9:22:b5:31:06:34:23:8a:4c:19:
                    fd:60:64:fe:95:18:43:4f:eb:54:07:00:8e:c0:40:
                    c6:66:b4:f3:2b:fa:b0:e9:5e:74:4a:50:38:ce:15:
                    81:2d:7d:1c:ee:88:53:47:fc:3b:16:9b:a5:56:f2:
                    9e:60:71:f3:c5:58:b5:8e:da:64:9e:75:4c:60:5c:
                    a3:13:29:af:9f:25:d8:be:14:34:38:4a:60:7b:82:
                    5e:69:78:0e:a9:41:61:fc:88:c2:be:62:ed:3f:a9:
                    c8:74:44:62:45:36:de:7a:63:0d:2f:72:02:c0:0f:
                    88:e2:42:d3:f7:6b:16:49:b8:53:2c:d4:ac:8a:aa:
                    6a:78:b2:8f:01:44:38:41:73:0e:d8:b2:8e:e6:39:
                    d2:90:19:85:39:de:30:61:2c:90:28:f1:97:30:05:
                    09:25:16:37:de:bc:d0:09:5d:2b:9f:9d:2d:41:b7:
                    fa:ec:45:3c:96:64:f4:2e:1a:2f:b8:2e:a7:62:27:
                    15:20:4a:f0:d8:92:93:62:32:3c:d9:42:b5:95:aa:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FA:B4:9A:E9:EE:37:9C:7C:9C:D3:97:87:52:BC:66:2B:B3:BF:51
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vvq0munuN5x8nNOXh1K8Ziuzv1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:af:74:40:bd:ec:0d:83:bf:9b:49:e5:08:66:18:8d:81:ea:
         f2:a3:f9:ce:03:3d:ac:42:f9:f6:61:4a:11:10:58:a5:38:5d:
         71:80:9d:d1:f5:ee:a7:50:39:95:fb:c2:9f:92:82:de:0c:17:
         02:45:de:57:c5:cf:23:b3:77:e4:3e:ab:8c:32:9d:d1:43:b8:
         aa:ee:bf:3b:60:74:0e:42:45:2e:9f:c8:62:2f:eb:cc:db:f4:
         77:28:16:ad:9a:e4:8e:22:d4:28:d2:48:13:d6:c1:91:d7:a3:
         60:59:00:8a:ef:f4:ce:c3:88:4c:c3:b4:29:2d:dd:e2:9f:39:
         df:d7:65:0a:ed:61:95:bd:4e:b7:34:11:db:a5:b7:ef:8d:85:
         f7:d6:14:c5:0d:e4:2a:89:3b:02:08:3b:e8:7c:9e:b4:dd:54:
         d2:df:09:12:0d:36:ad:57:67:aa:14:59:72:89:5f:b2:28:f9:
         7c:a7:80:59:8e:a1:52:bc:ab:6f:6a:f5:ff:31:a0:1f:80:64:
         4e:8a:f5:1d:1b:c0:8e:0a:e2:ba:e7:97:16:79:78:2e:e7:ce:
         50:2a:8a:d9:9e:86:f6:35:ab:0f:ef:e2:28:06:9d:9a:e1:ef:
         ab:cd:fb:b7:ce:72:bd:57:eb:12:89:3c:71:88:50:53:bb:e2:
         80:aa:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org