Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6djgvsGG5nJmvQUHqfzeo8cLGGY.roa
File:                     6djgvsGG5nJmvQUHqfzeo8cLGGY.roa (raw, json)
Hash identifier:          L90LKSvv+qKbEdkIECiCtxMb/EnonIVPmBxucBvCuhE=
Subject key identifier:   E9:D8:E0:BE:C1:86:E6:72:66:BD:05:07:A9:FC:DE:A3:C7:0B:18:66
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       67
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6djgvsGG5nJmvQUHqfzeo8cLGGY.roa
Signing time:             Mon 17 Oct 2022 02:29:46 +0000
ROA not before:           Mon 17 Oct 2022 02:29:46 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        119.82.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:29:46 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E9D8E0BEC186E67266BD0507A9FCDEA3C70B1866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:b8:aa:90:a6:30:c2:98:53:a7:a4:46:26:
                    49:68:3e:4c:4a:3c:d4:07:4a:3d:8f:66:94:1f:2e:
                    cc:17:dc:7a:9f:48:5f:1f:21:a2:1a:92:e0:4c:3a:
                    6f:f1:c5:0c:65:79:45:b1:2d:e7:30:f7:d7:2d:01:
                    7d:35:01:7b:8a:d1:3b:aa:a7:d0:06:28:99:8e:a1:
                    c2:2b:9f:db:78:a4:05:a6:3d:b2:dd:1d:78:cb:84:
                    63:c8:07:9a:11:19:ef:8c:96:0b:30:a3:05:9f:46:
                    96:b2:03:89:42:53:5e:1e:b1:f5:4a:0f:6c:0d:ae:
                    9c:66:ab:6b:6c:f3:80:7b:49:a0:4f:47:6a:a1:04:
                    3e:6f:a3:a9:43:47:3e:61:02:9c:23:f7:d6:fd:33:
                    73:2a:d5:4b:d3:2a:a4:03:86:92:5d:a6:31:41:ef:
                    03:b0:25:56:05:20:45:db:e8:bd:3f:7c:49:42:24:
                    57:95:5e:9a:2a:d9:20:f2:f7:5c:cf:28:0b:05:14:
                    14:43:2b:35:6e:a2:ae:37:e1:6b:e1:43:1f:d4:36:
                    83:8a:57:75:09:82:b6:77:8c:5f:e2:43:9e:b7:51:
                    22:c8:11:b4:94:62:d3:05:7b:d7:02:76:21:59:cf:
                    93:9b:46:4b:58:24:e9:1e:34:4f:4e:d5:d9:5c:74:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D8:E0:BE:C1:86:E6:72:66:BD:05:07:A9:FC:DE:A3:C7:0B:18:66
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6djgvsGG5nJmvQUHqfzeo8cLGGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.82.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:39:56:ae:a0:e4:f4:66:23:04:77:d4:4f:91:c6:76:f1:
         2f:9d:1b:b8:ca:d0:6c:45:c3:59:f5:65:f4:ff:9c:f3:32:ac:
         d6:4a:dd:7b:2d:11:83:3a:be:28:79:2a:3e:c3:af:4e:9c:8b:
         a4:62:1d:c9:e3:14:b0:f6:23:61:2f:94:da:0b:96:8d:29:d5:
         a1:42:d4:03:86:f8:4a:cd:3b:f5:11:48:4d:73:e3:55:9a:40:
         b0:85:64:2d:cb:fb:1a:22:2d:ba:7e:15:88:83:53:3d:41:21:
         59:63:dc:25:f7:4a:76:12:af:47:58:b8:23:39:8b:48:0f:30:
         df:2a:98:69:a1:4d:d7:8c:92:7c:8e:24:8c:34:b7:f2:61:4f:
         5a:ea:0a:30:12:bb:3f:f7:39:96:94:88:86:bd:1f:0e:60:da:
         55:90:a1:44:53:96:be:77:1f:08:9c:b5:aa:0d:3d:26:60:3c:
         0a:7a:b0:a8:94:91:de:c6:e6:f7:f9:fb:fe:27:f8:6e:ea:6b:
         87:24:57:9f:2a:f8:1e:8c:dc:e9:70:d9:a9:11:54:31:2d:d3:
         9b:04:fd:68:9c:51:eb:6f:3c:f1:fe:0e:6a:66:4c:95:0b:77:
         96:44:7e:67:8d:a9:f0:3a:8c:44:37:cf:5e:b0:40:20:61:69:
         48:20:df:28
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAy
Mjk0NloXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRTlEOEUwQkVDMTg2RTY3
MjY2QkQwNTA3QTlGQ0RFQTNDNzBCMTg2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMP8uKqQpjDCmFOnpEYmSWg+TEo81AdKPY9mlB8uzBfcep9IXx8h
ohqS4Ew6b/HFDGV5RbEt5zD31y0BfTUBe4rRO6qn0AYomY6hwiuf23ikBaY9st0d
eMuEY8gHmhEZ74yWCzCjBZ9GlrIDiUJTXh6x9UoPbA2unGara2zzgHtJoE9HaqEE
Pm+jqUNHPmECnCP31v0zcyrVS9MqpAOGkl2mMUHvA7AlVgUgRdvovT98SUIkV5Ve
mirZIPL3XM8oCwUUFEMrNW6irjfha+FDH9Q2g4pXdQmCtneMX+JDnrdRIsgRtJRi
0wV71wJ2IVnPk5tGS1gk6R40T07V2Vx0iWMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTp2OC+wYbmcma9BQep/N6jxwsYZjAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvNmRqZ3ZzR0c1bkptdlFVSHFmemVvOGNMR0dZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHdSwDANBgkqhkiG9w0BAQsFAAOCAQEAkNk5Vq6g5PRmIwR31E+RxnbxL50b
uMrQbEXDWfVl9P+c8zKs1krdey0Rgzq+KHkqPsOvTpyLpGIdyeMUsPYjYS+U2guW
jSnVoULUA4b4Ss079RFITXPjVZpAsIVkLcv7GiItun4ViINTPUEhWWPcJfdKdhKv
R1i4IzmLSA8w3yqYaaFN14ySfI4kjDS38mFPWuoKMBK7P/c5lpSIhr0fDmDaVZCh
RFOWvncfCJy1qg09JmA8CnqwqJSR3sbm9/n7/if4buprhyRXnyr4Hozc6XDZqRFU
MS3TmwT9aJxR62888f4OamZMlQt3lkR+Z42p8DqMRDfPXrBAIGFpSCDfKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org