Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/w1f4q_hebc-b2IZg71jPHRzk79Y.roa
File:                     w1f4q_hebc-b2IZg71jPHRzk79Y.roa (raw, json)
Hash identifier:          7BC2kgapUyXKsBzT1NofuXilDCo3gures//kKdTqzng=
Subject key identifier:   C3:57:F8:AB:F8:5E:6D:CF:9B:D8:86:60:EF:58:CF:1D:1C:E4:EF:D6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       9B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/w1f4q_hebc-b2IZg71jPHRzk79Y.roa
Signing time:             Mon 24 Oct 2022 04:06:48 +0000
ROA not before:           Mon 24 Oct 2022 04:06:48 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        180.92.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:06:48 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C357F8ABF85E6DCF9BD88660EF58CF1D1CE4EFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:27:74:fb:de:18:f1:12:0c:80:7c:51:22:
                    0f:af:04:86:b1:54:8e:74:9b:3b:57:e4:bf:e7:05:
                    27:25:bd:0d:24:88:39:77:40:9f:c3:5e:73:b4:ff:
                    14:46:55:73:e6:60:da:1b:48:c5:c7:87:6d:c0:08:
                    ca:ea:3d:06:a6:80:a8:42:86:af:75:a7:59:59:36:
                    d9:2b:2f:6d:4b:21:17:80:3c:c3:dd:7c:37:3d:11:
                    e9:09:d8:d1:85:9f:38:f9:d5:91:74:94:cf:6b:77:
                    55:49:ea:4b:ca:6f:ed:58:6d:59:64:43:57:37:bb:
                    1e:00:93:28:0b:23:57:f7:2f:35:6c:f6:4b:bc:e4:
                    1b:21:5e:13:cf:75:e7:36:71:0f:c9:7f:17:bf:fd:
                    de:86:9a:42:67:9a:3b:5b:0e:b8:c9:70:2e:60:eb:
                    df:3b:76:2d:d8:4f:c0:1c:71:b7:cb:3f:7f:f0:e8:
                    14:ab:c3:44:e3:19:33:6b:3f:7d:1a:9e:b7:4f:85:
                    4d:46:de:51:ba:82:eb:c1:2a:41:18:4c:2c:60:9b:
                    ae:5f:d1:0e:b1:ac:72:6f:8d:7a:7c:db:6b:28:27:
                    71:62:e7:b4:83:b6:6f:3e:1a:97:05:d7:31:c4:8d:
                    5f:84:05:c8:37:6b:48:c2:9c:2a:37:d2:30:8f:bf:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:57:F8:AB:F8:5E:6D:CF:9B:D8:86:60:EF:58:CF:1D:1C:E4:EF:D6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/w1f4q_hebc-b2IZg71jPHRzk79Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:4b:7d:55:be:35:ac:b5:2b:83:c6:6a:51:4f:3a:7d:7c:
         bf:fd:2f:f6:c9:f5:9b:6c:91:c7:68:36:e6:ac:85:14:66:28:
         80:92:6b:44:e6:e1:45:fa:bf:1f:cf:64:9c:51:83:ae:5d:a3:
         4d:e3:b7:91:d5:20:2b:42:16:82:61:89:66:73:49:e7:f9:f2:
         4e:5b:ff:fc:b9:8c:f3:b7:70:fe:06:73:d7:32:94:b7:ae:46:
         87:9b:c9:0d:e3:e2:5a:e7:35:08:95:d8:28:1e:41:a6:b0:81:
         12:e4:df:0c:bb:c5:c3:49:e8:7a:ee:a5:72:5e:21:c8:2c:0f:
         41:24:5b:24:c9:96:0e:45:df:10:c9:16:f7:32:b2:65:63:b2:
         69:42:d5:be:62:b0:9e:cd:7b:37:07:62:24:91:f1:03:d3:65:
         f3:85:fc:79:98:54:0f:2d:75:38:2c:ba:bc:40:d9:51:8e:f6:
         3c:be:35:c0:ed:f4:f1:d2:12:f5:62:47:9f:be:1a:51:9e:d4:
         6d:56:97:6e:17:21:11:7e:36:61:5e:d2:1f:66:58:8b:0b:76:
         d2:31:6e:77:f3:e8:c4:df:12:0d:ec:58:ed:37:f9:26:72:4a:
         5e:63:41:ee:cd:a5:81:78:aa:00:4b:23:f4:0f:da:c2:fa:81:
         05:3b:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org