Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9CQKaqZCDFiAC_94AIV0dUIpy6k.roa
File:                     9CQKaqZCDFiAC_94AIV0dUIpy6k.roa (raw, json)
Hash identifier:          x6k574qs4zjkDeXh8hNz+VFPfOBpv2UJl7+47GMfvMQ=
Subject key identifier:   F4:24:0A:6A:A6:42:0C:58:80:0B:FF:78:00:85:74:75:42:29:CB:A9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       AE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9CQKaqZCDFiAC_94AIV0dUIpy6k.roa
Signing time:             Mon 24 Oct 2022 04:28:54 +0000
ROA not before:           Mon 24 Oct 2022 04:28:54 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        203.124.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:28:54 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F4240A6AA6420C58800BFF78008574754229CBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:00:72:29:30:9d:29:d7:7f:70:13:12:32:
                    37:7c:e9:d0:d0:71:b8:f2:79:71:47:42:2f:e4:43:
                    9c:98:49:3d:50:7d:57:8c:90:80:f4:16:32:db:0a:
                    9b:1d:31:42:86:fe:a9:36:c6:b2:dc:da:5b:93:d4:
                    29:16:ee:f8:04:75:43:c9:8e:64:fa:a9:b1:97:4b:
                    21:45:86:cc:ac:d5:26:51:c2:98:37:01:f0:33:11:
                    41:f2:7c:70:f3:ab:82:e8:fe:9e:6a:ec:fa:60:83:
                    15:76:4f:81:1d:fa:5c:3c:78:c6:f7:68:2d:44:60:
                    f9:57:b8:83:be:85:9f:b9:ac:67:2d:52:50:8c:2f:
                    74:8d:8f:3e:aa:7d:e1:6f:f8:41:8c:03:24:2b:c1:
                    62:97:50:e3:99:e2:35:27:f6:7d:56:a3:ba:f5:bb:
                    bf:32:b9:ed:83:b8:98:93:d2:5b:31:c3:c2:62:6a:
                    48:3d:01:55:f5:41:68:62:de:c7:a6:b8:82:7a:be:
                    5f:7a:e2:f2:d7:3e:21:e3:5e:aa:4b:a2:dc:2f:90:
                    6e:cb:f8:c1:d2:ad:68:6f:46:f8:eb:f9:72:58:21:
                    d6:a7:a3:87:6b:38:1a:f9:d4:c9:61:4a:32:b6:81:
                    ca:29:8b:8c:a7:d6:d1:ae:14:22:c0:8a:0d:f8:16:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:0A:6A:A6:42:0C:58:80:0B:FF:78:00:85:74:75:42:29:CB:A9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9CQKaqZCDFiAC_94AIV0dUIpy6k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:fa:12:4d:74:69:e5:21:5c:12:f9:bc:1b:da:2b:dd:1b:
         3a:14:b3:54:92:a2:e8:25:d4:8c:fb:5e:4b:54:31:a8:a8:3f:
         8e:5e:de:d3:f8:d6:de:4a:42:9d:b7:af:12:4a:ab:7d:f6:71:
         70:ad:c9:42:7e:10:aa:6a:fe:9a:9a:23:f3:98:0f:15:29:37:
         fe:66:4b:7b:ac:81:34:c9:90:88:96:da:c7:0b:09:a7:9f:34:
         13:1b:15:52:67:b5:45:fd:8e:2a:ed:0e:34:97:86:a9:80:e8:
         81:ed:d8:a9:f8:16:92:cd:1b:79:97:5a:cb:03:c6:c6:b4:f3:
         b6:24:a1:87:7f:43:5a:2b:31:f4:63:15:ff:c2:d8:12:8b:66:
         17:68:45:17:3b:e4:fd:3f:53:76:6a:93:f0:96:ed:ad:d9:6b:
         90:96:c5:44:64:89:8d:48:bc:f5:b8:81:2e:40:a2:f2:af:52:
         e2:41:75:47:15:c0:4b:d8:54:25:81:78:8d:c5:cf:48:e9:6a:
         25:88:48:a2:25:8b:73:b6:95:78:d8:19:ea:55:f6:57:ef:89:
         e5:ee:49:8e:d3:b2:a4:4d:eb:81:c1:29:fc:b3:49:e8:ef:c0:
         47:b5:b1:5d:5a:c0:94:b5:37:8c:7e:9d:df:86:a3:6d:2a:60:
         e6:d1:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org