Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7iA0yeaU_O0lqaFblhX05WLgyx4.roa
File:                     7iA0yeaU_O0lqaFblhX05WLgyx4.roa (raw, json)
Hash identifier:          wZFKJyyLypl9LkXdJdPWD40Q+i9Rkx1w/+3pLzUt4Y0=
Subject key identifier:   EE:20:34:C9:E6:94:FC:ED:25:A9:A1:5B:96:15:F4:E5:62:E0:CB:1E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       7D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7iA0yeaU_O0lqaFblhX05WLgyx4.roa
Signing time:             Mon 24 Oct 2022 02:22:25 +0000
ROA not before:           Mon 24 Oct 2022 02:22:25 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        61.203.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:22:25 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=EE2034C9E694FCED25A9A15B9615F4E562E0CB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:d9:51:7e:14:aa:13:85:90:b8:59:2d:8c:
                    5b:53:b0:1e:b6:75:33:f3:82:e8:b2:2f:40:94:37:
                    eb:88:26:42:dd:03:61:16:5a:6c:ef:4e:c1:8e:07:
                    ee:48:cd:5d:a2:ce:f4:51:14:a0:4c:31:af:08:c9:
                    ca:7a:d5:af:fd:40:26:76:02:41:0c:fe:63:39:07:
                    75:b6:7c:c2:1c:d1:23:b9:3e:16:11:fd:96:d0:dc:
                    31:7c:7e:ab:ea:5f:16:3b:82:5b:ad:dc:0a:6c:95:
                    7a:38:8f:b8:f2:0f:0b:a4:2d:9f:2e:7f:e8:22:d1:
                    7d:56:92:d7:23:4c:4b:82:ee:bd:a1:80:d1:55:82:
                    66:e0:51:d0:ac:09:0f:90:7e:08:e5:53:61:a8:81:
                    fe:2f:89:57:38:45:6d:5a:e3:91:66:4e:a3:68:41:
                    42:0d:d4:b9:45:6b:81:a9:0c:ff:93:98:cf:95:e4:
                    ed:c6:78:fb:44:3a:c0:7f:fa:3b:5c:2d:48:2f:67:
                    04:5c:65:0c:00:aa:1c:3a:e7:68:96:3f:de:67:cf:
                    00:40:84:d8:bc:8b:0d:8e:29:3f:53:57:94:09:66:
                    c4:df:46:5c:c3:39:5a:fe:e1:21:21:fd:2c:41:fe:
                    80:be:17:11:6f:4e:73:a8:aa:59:ac:77:0f:f8:96:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:34:C9:E6:94:FC:ED:25:A9:A1:5B:96:15:F4:E5:62:E0:CB:1E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7iA0yeaU_O0lqaFblhX05WLgyx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:b4:a0:ee:43:04:33:aa:a3:f6:c7:53:96:7d:7a:1e:21:c6:
         8c:ce:b0:3b:3b:3b:0a:76:13:00:a4:62:fb:08:6a:f2:47:fc:
         96:58:89:8f:39:3f:d7:b2:91:cd:a4:11:16:0f:58:74:f8:e2:
         2f:a7:ce:ca:f6:2a:3d:16:fb:f7:ad:99:8f:27:3a:40:89:a3:
         a5:55:f4:a7:e0:6a:72:b1:c1:83:d1:00:1b:4a:05:33:90:12:
         38:39:17:1b:ea:88:37:a5:d7:8e:aa:e1:29:4b:ba:78:8f:d3:
         3e:f2:7a:01:a3:e5:d1:f2:6b:da:ce:5d:18:52:6e:d4:8f:d2:
         e5:5b:1e:e7:6d:f0:64:a5:57:d4:c0:66:ec:d6:f7:da:2b:74:
         45:c1:70:df:1a:c8:eb:0d:f0:b4:48:7a:ce:31:eb:e8:48:69:
         7c:b5:1e:bd:b4:b1:68:55:07:a3:48:10:c2:18:e0:0d:8e:a2:
         0a:d0:82:46:f2:0e:4d:0e:6c:dd:a9:c0:a2:97:b5:3a:8f:a1:
         77:c0:2d:b6:3b:d2:cd:a7:2c:d7:d0:63:50:be:e0:98:7c:4b:
         f0:72:1a:e2:19:66:8c:49:62:1b:99:97:03:94:fb:a3:99:65:
         04:08:02:1a:73:c2:43:41:03:90:ea:6c:36:d1:a6:f2:3c:8e:
         da:86:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org