Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9rhhXIDKgE3eyZUmrWyi8PwZvB4.roa
File:                     9rhhXIDKgE3eyZUmrWyi8PwZvB4.roa (raw, json)
Hash identifier:          rWzhFzwam9B2LG/frT5rREQj7IurXgF45aaDPr0hyOg=
Subject key identifier:   F6:B8:61:5C:80:CA:80:4D:DE:C9:95:26:AD:6C:A2:F0:FC:19:BC:1E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9rhhXIDKgE3eyZUmrWyi8PwZvB4.roa
Signing time:             Mon 24 Oct 2022 04:17:11 +0000
ROA not before:           Mon 24 Oct 2022 04:17:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.43.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:17:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F6B8615C80CA804DDEC99526AD6CA2F0FC19BC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:cf:ea:e2:1c:09:23:e9:b0:80:21:28:0f:
                    f2:fd:d4:92:d9:a6:fc:cc:25:b9:21:49:80:c1:cd:
                    3c:78:8b:7f:d9:ab:ff:8f:c1:cf:80:71:71:60:f7:
                    44:11:fb:b1:7b:0f:c1:f2:13:5c:77:fe:ec:38:64:
                    1c:bf:af:b8:3c:c9:d0:7e:9c:67:b8:fe:cf:1f:7b:
                    8c:29:ce:a0:1e:dc:8e:d1:4f:52:00:a7:7b:05:13:
                    81:52:63:50:49:91:d3:23:fa:8f:9d:28:46:94:e2:
                    35:f2:72:5b:74:79:b1:72:c9:0a:f2:fc:b8:a6:ac:
                    17:8a:bd:c5:68:90:3b:94:fc:0d:d7:46:1e:2e:7f:
                    4e:99:52:c5:23:07:bb:b4:2c:4c:eb:5e:44:90:15:
                    f8:21:cd:ef:8d:36:19:6a:d2:df:a4:e5:9a:a0:b6:
                    95:ff:f0:a8:32:c0:29:af:84:79:47:d4:29:03:31:
                    8a:87:e5:a3:37:b0:c0:cc:59:ae:fa:bc:42:84:cd:
                    b6:48:6e:a5:7f:32:de:e4:0a:4e:a2:57:0e:90:c0:
                    54:65:c9:1b:c1:b2:2d:3e:e2:25:10:ca:b1:46:0b:
                    7d:14:70:cb:2e:40:35:8c:1c:5d:d6:6d:69:09:0c:
                    9b:33:61:6b:d1:6d:d1:4f:b7:c0:a6:2d:90:13:87:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:61:5C:80:CA:80:4D:DE:C9:95:26:AD:6C:A2:F0:FC:19:BC:1E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9rhhXIDKgE3eyZUmrWyi8PwZvB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:80:42:02:ad:01:56:bd:b5:ca:e0:9c:94:33:7c:0e:8e:dd:
         39:4a:35:63:44:81:f8:79:a8:d5:4c:61:c3:f1:50:19:5c:74:
         05:30:b8:d3:c8:9d:b4:6a:d4:5f:bf:4d:0d:4f:c4:c7:a7:31:
         de:e9:60:fa:e3:07:fc:2f:a7:d3:a7:a5:d2:0e:a0:f1:53:52:
         ba:61:e6:09:73:ed:c7:32:5e:fc:8a:56:a5:90:01:9a:b1:27:
         e7:38:ad:5b:f0:ed:c4:7b:0b:fe:8e:a5:55:f6:bf:b3:89:bf:
         b0:df:d7:2d:d6:a9:ce:6a:5b:46:68:21:fa:a1:28:d8:a6:00:
         39:25:d2:fc:49:11:dc:c3:08:7f:1d:97:cf:c3:ba:1b:90:52:
         15:7b:d1:61:92:b6:45:77:6d:97:c3:2f:04:97:86:d8:01:2e:
         4c:31:2a:0c:d2:bd:3c:9f:36:a5:ae:af:c6:65:41:7d:7c:e2:
         9d:64:dc:9f:aa:38:cb:0c:99:97:aa:19:d8:51:1a:5e:b3:28:
         95:56:7c:43:a4:34:ff:a9:c8:f2:8b:62:92:88:ba:cd:26:04:
         b0:db:3e:61:b0:00:8c:70:8b:e0:d2:f7:12:43:97:04:ea:5b:
         fd:3f:e6:42:16:6a:12:2c:56:48:f0:c0:d8:7b:43:e4:6f:5e:
         2e:cf:f4:4c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
NDE3MTFaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2Qjg2MTVDODBDQTgw
NERERUM5OTUyNkFENkNBMkYwRkMxOUJDMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCplM/q4hwJI+mwgCEoD/L91JLZpvzMJbkhSYDBzTx4i3/Zq/+P
wc+AcXFg90QR+7F7D8HyE1x3/uw4ZBy/r7g8ydB+nGe4/s8fe4wpzqAe3I7RT1IA
p3sFE4FSY1BJkdMj+o+dKEaU4jXyclt0ebFyyQry/LimrBeKvcVokDuU/A3XRh4u
f06ZUsUjB7u0LEzrXkSQFfghze+NNhlq0t+k5ZqgtpX/8KgywCmvhHlH1CkDMYqH
5aM3sMDMWa76vEKEzbZIbqV/Mt7kCk6iVw6QwFRlyRvBsi0+4iUQyrFGC30UcMsu
QDWMHF3WbWkJDJszYWvRbdFPt8CmLZAThzRzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9rhhXIDKgE3eyZUmrWyi8PwZvB4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzlyaGhYSURLZ0UzZXlaVW1yV3lpOFB3WnZCNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKKxAwDQYJKoZIhvcNAQELBQADggEBAH6AQgKtAVa9tcrgnJQzfA6O3TlK
NWNEgfh5qNVMYcPxUBlcdAUwuNPInbRq1F+/TQ1PxMenMd7pYPrjB/wvp9OnpdIO
oPFTUrph5glz7ccyXvyKVqWQAZqxJ+c4rVvw7cR7C/6OpVX2v7OJv7Df1y3Wqc5q
W0ZoIfqhKNimADkl0vxJEdzDCH8dl8/DuhuQUhV70WGStkV3bZfDLwSXhtgBLkwx
KgzSvTyfNqWur8ZlQX184p1k3J+qOMsMmZeqGdhRGl6zKJVWfEOkNP+pyPKLYpKI
us0mBLDbPmGwAIxwi+DS9xJDlwTqW/0/5kIWahIsVkjwwNh7Q+RvXi7P9Ew=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org