Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/wBHbK-D1A6MAGdCaTRjBCp4oQfU.roa
File:                     wBHbK-D1A6MAGdCaTRjBCp4oQfU.roa (raw, json)
Hash identifier:          GBwqshcssa6+kD0EpwSgmcGC7EJbuKkqI4X613K37k4=
Subject key identifier:   C0:11:DB:2B:E0:F5:03:A3:00:19:D0:9A:4D:18:C1:0A:9E:28:41:F5
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       06
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/wBHbK-D1A6MAGdCaTRjBCp4oQfU.roa
Signing time:             Thu 20 Oct 2022 06:20:25 +0000
ROA not before:           Thu 20 Oct 2022 06:20:25 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        117.18.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:20:25 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=C011DB2BE0F503A30019D09A4D18C10A9E2841F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:91:4e:12:a7:43:80:62:5e:51:30:8b:e9:
                    6b:b5:25:d8:a5:50:7c:16:52:f4:b8:6a:41:1f:44:
                    cf:73:b8:b0:a1:d5:ee:7c:65:9f:f2:fe:26:13:72:
                    2e:75:ee:2b:c0:47:0a:f1:af:81:af:99:7c:cd:07:
                    ce:70:73:40:ba:81:b9:8f:61:fb:c5:2a:19:9c:06:
                    12:fc:b1:99:f7:02:c8:3a:06:df:01:fd:e9:42:08:
                    e0:30:0b:83:26:67:93:6b:c1:d9:42:a0:f2:89:a9:
                    a6:45:ff:14:66:30:95:56:3b:6d:48:56:ea:b2:a4:
                    6f:b5:ec:e2:24:2c:87:d6:3e:7a:78:b4:a0:0b:84:
                    a8:ab:9e:fa:30:52:d7:f2:3b:37:9f:69:a2:77:3f:
                    b4:e2:d2:62:17:19:9b:ef:30:49:f3:03:97:df:ea:
                    18:82:58:a1:b9:7f:ff:bf:64:6a:b4:5a:70:8e:79:
                    a3:79:62:23:89:b4:83:9e:db:d6:b9:f9:1f:d8:86:
                    4b:3c:be:f7:00:ee:6e:d5:e6:81:8f:6a:20:cc:d4:
                    e2:57:32:9b:a0:1a:17:50:8e:d6:af:b6:76:e2:79:
                    b0:97:35:92:f4:d2:b3:00:3f:7d:7f:ff:f2:97:e6:
                    34:1d:38:b2:45:7c:c6:ae:d2:74:b8:de:a0:b3:4e:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:DB:2B:E0:F5:03:A3:00:19:D0:9A:4D:18:C1:0A:9E:28:41:F5
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/wBHbK-D1A6MAGdCaTRjBCp4oQfU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:b9:e1:4c:be:8d:ae:ad:5f:f8:30:88:81:a8:0d:e8:f2:25:
         74:97:11:98:f6:80:14:28:6e:c1:f1:94:38:1e:7c:6f:25:0e:
         4e:62:60:e5:77:d9:57:59:f2:ae:9c:b7:6c:25:3f:09:8c:69:
         0a:fb:8b:56:21:76:f8:65:9c:45:1e:87:e4:11:78:01:53:a1:
         24:89:e1:ed:47:f6:20:f0:c6:d5:7f:a8:72:64:ca:26:d4:51:
         7c:e6:c5:e2:01:1c:6c:a8:71:3f:66:18:f7:3c:14:30:16:f3:
         39:fe:3e:22:8a:79:d7:8d:86:73:b3:32:4e:98:3d:5a:47:e6:
         7f:a7:ee:02:db:9b:b0:8a:b5:30:0d:74:02:17:f1:7c:35:bd:
         3f:39:62:1b:61:e6:5c:cf:73:a1:da:46:59:35:90:37:30:86:
         e3:1f:ce:4c:6e:95:69:8e:49:65:ca:a4:b5:9f:16:5c:4d:06:
         69:3e:f0:7c:6a:1c:ed:04:cd:2f:25:2f:22:47:9e:50:f5:9e:
         06:5f:e7:ec:76:02:9b:08:67:30:9b:28:39:d9:26:6a:c9:9e:
         dd:6f:65:e4:46:a1:37:82:7b:cd:1d:e3:d4:14:b9:bb:70:89:
         af:96:57:a2:cb:be:b5:29:be:a8:07:b2:da:f4:db:e8:68:a6:
         c8:ab:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org