Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/79My7HIpVMsNH7NNT85TuGbMWus.roa
File:                     79My7HIpVMsNH7NNT85TuGbMWus.roa (raw, json)
Hash identifier:          I52fx5qa13snlIXHROCsDnNfwrzofRULWFbwDz8Etlw=
Subject key identifier:   EF:D3:32:EC:72:29:54:CB:0D:1F:B3:4D:4F:CE:53:B8:66:CC:5A:EB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       8B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/79My7HIpVMsNH7NNT85TuGbMWus.roa
Signing time:             Mon 24 Oct 2022 02:42:29 +0000
ROA not before:           Mon 24 Oct 2022 02:42:29 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        113.61.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:42:29 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=EFD332EC722954CB0D1FB34D4FCE53B866CC5AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:24:67:a6:a9:31:2e:8a:a9:06:62:a2:6f:
                    3f:ee:0a:9b:e6:23:3b:46:87:28:1f:81:e6:6c:3d:
                    e9:f2:15:96:f1:d3:3d:66:ef:d5:7a:7f:88:3e:1b:
                    b6:4c:8a:db:83:27:7b:2f:26:59:2d:10:69:2c:3d:
                    59:b9:1d:9a:6d:89:cf:f0:dd:8b:11:5e:81:57:23:
                    a5:49:d3:01:24:01:a9:c1:99:e9:3e:94:dc:e3:28:
                    13:f9:35:bf:8b:08:42:60:56:2e:05:04:5b:ee:ca:
                    76:d7:31:e0:05:14:7b:38:aa:06:c0:27:80:47:f7:
                    99:4b:4a:82:86:fb:08:d8:e4:40:42:e0:d9:08:3a:
                    19:80:8e:90:91:29:26:04:06:fa:de:0d:00:4c:9a:
                    e6:81:92:1a:64:0a:98:ec:eb:c4:0f:92:73:e0:4e:
                    d6:22:20:fb:19:3d:f6:99:f0:c3:e1:e1:f0:8a:93:
                    6a:ea:b1:44:f6:a2:2e:94:9c:fc:86:52:6d:be:fe:
                    ed:a7:e8:22:66:fc:10:4c:45:86:3a:fa:8d:48:a1:
                    53:a4:bb:3e:47:d9:ed:87:eb:6b:84:61:d7:12:f3:
                    60:90:0a:13:71:c9:cf:f8:0c:e1:07:07:4a:e6:2c:
                    0e:d3:17:e5:78:fc:64:b9:51:52:ff:a9:bd:47:63:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D3:32:EC:72:29:54:CB:0D:1F:B3:4D:4F:CE:53:B8:66:CC:5A:EB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/79My7HIpVMsNH7NNT85TuGbMWus.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:ef:b5:00:d2:9d:4d:9b:b9:3c:1e:03:98:2c:41:49:3e:0e:
         f2:94:32:ce:3d:3c:54:80:89:1f:ab:59:0f:be:4b:45:1b:25:
         30:0f:20:f0:d3:62:f2:a7:b8:ee:75:ed:c9:50:0c:a7:8a:49:
         33:79:4e:22:e0:d6:49:7e:aa:ec:9a:0d:4f:db:7a:34:a1:df:
         04:ba:e2:80:80:9d:53:71:d7:21:51:cc:62:df:27:ec:20:8b:
         23:a8:44:d5:ed:96:bd:76:0d:38:36:20:6c:a9:16:26:f0:a4:
         f5:cf:de:ff:69:4c:f3:f1:aa:f6:26:27:b0:20:ac:af:be:84:
         c0:eb:4c:05:68:9c:c7:5b:4e:37:e2:ca:21:d9:70:d7:72:e1:
         69:53:3f:92:4f:28:5f:b3:0f:ad:03:37:38:83:62:af:89:f4:
         26:66:e6:36:5a:b4:c8:63:d5:20:23:41:c0:9d:0e:9d:14:71:
         77:bc:14:42:b8:e7:8c:92:2a:96:9a:5d:df:66:34:e0:8b:3d:
         b6:dd:81:40:47:60:ca:56:02:0b:c7:11:98:10:2b:8d:a4:81:
         d1:7d:d8:a1:b1:39:34:32:be:5b:40:c5:fc:c4:ba:8e:41:08:
         db:42:ea:a5:a4:b2:6d:55:bf:22:4c:fa:56:84:cd:d8:82:85:
         90:3c:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org