Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9wiBQzyUgx9Fl89pI4wZ0hxF2aQ.roa
File:                     9wiBQzyUgx9Fl89pI4wZ0hxF2aQ.roa (raw, json)
Hash identifier:          XnHnxLwgXtIH9Rlp2bQ+UQuJNoOGHArIo3vvBCeKH64=
Subject key identifier:   F7:08:81:43:3C:94:83:1F:45:97:CF:69:23:8C:19:D2:1C:45:D9:A4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       68
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9wiBQzyUgx9Fl89pI4wZ0hxF2aQ.roa
Signing time:             Mon 17 Oct 2022 02:31:53 +0000
ROA not before:           Mon 17 Oct 2022 02:31:53 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23788
IP address blocks:        175.111.120.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:31:53 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F70881433C94831F4597CF69238C19D21C45D9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ee:8e:a8:a0:a0:a6:e4:2e:99:4c:ed:10:96:
                    4d:a8:ce:55:58:85:c5:e6:e6:41:4e:6a:59:16:ec:
                    0c:6c:4a:23:40:46:ee:8c:46:51:58:8b:fe:e2:26:
                    0f:4f:e8:0d:70:d4:5c:d8:fd:35:26:aa:fb:b5:fa:
                    e9:9b:6f:e0:c0:2d:31:14:0d:70:b4:32:f0:f7:1e:
                    3d:f9:70:ca:80:d8:8c:3f:78:cf:f7:2b:14:f0:19:
                    69:c1:b1:2b:eb:4b:a4:8c:d1:aa:e2:94:6d:1b:04:
                    e5:af:b4:8a:0c:95:93:2f:77:41:c6:0d:f4:dd:c2:
                    87:0b:22:af:0c:0c:11:bd:57:6a:ad:4e:2a:73:ab:
                    73:db:ac:a0:fd:db:c9:0d:57:75:1e:88:f9:08:fd:
                    80:8c:2b:69:8d:97:42:80:9d:39:36:08:c9:84:5d:
                    81:34:c7:56:ff:8f:0a:fd:1c:53:b5:08:dd:8f:f8:
                    a5:67:c8:da:b1:ec:1b:2b:b9:74:31:fc:bd:6e:5d:
                    dc:d9:24:c3:7c:68:e1:08:6a:7c:03:3d:72:30:9d:
                    94:4e:a4:d8:ce:5d:72:65:20:ca:61:4d:f6:f1:ac:
                    e1:4d:76:6a:37:ad:84:a6:7c:46:19:5c:bf:94:22:
                    b1:08:0e:9c:3a:0c:2d:c5:9a:cb:98:a0:e6:66:6c:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:08:81:43:3C:94:83:1F:45:97:CF:69:23:8C:19:D2:1C:45:D9:A4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9wiBQzyUgx9Fl89pI4wZ0hxF2aQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:ee:4c:d7:e0:9f:e7:dc:75:d5:ec:60:43:dd:93:71:ac:
         99:95:83:95:5c:82:29:dc:d7:a4:08:f9:da:bb:f2:d7:3e:46:
         22:f0:99:8b:5f:be:79:a4:e9:81:b5:09:42:64:1f:63:55:c5:
         dc:14:62:a7:58:54:20:59:58:fd:e6:e2:2f:83:29:3a:05:b1:
         55:ad:48:04:30:10:b7:e5:46:d6:88:50:67:ff:bc:d7:08:ca:
         1a:7f:6a:d2:c7:75:94:04:3f:9b:02:bf:84:79:64:67:9c:f7:
         cd:8b:4e:1c:8a:f2:43:ba:d0:88:3e:af:a2:ae:e5:a2:33:17:
         81:5c:52:f2:05:22:e5:19:f2:53:c5:95:f6:d5:80:08:51:47:
         79:ad:a9:49:16:dd:93:d3:2b:32:c2:4f:96:7a:72:d3:8f:c3:
         e8:ce:13:a5:6e:c3:1d:cd:18:d8:c7:75:35:66:4d:51:88:2e:
         22:ff:27:38:69:da:74:3f:f6:4c:ab:82:b5:b2:e9:b0:e4:3d:
         36:0b:36:c9:11:00:42:23:b3:0c:73:49:78:38:09:fd:d4:e2:
         45:08:1e:84:a1:58:83:b8:ed:b3:33:4e:b8:e2:9d:f5:ba:20:
         5e:07:f2:3a:05:7b:d1:e3:36:12:65:7b:0e:ba:b0:e6:5d:20:
         ae:bd:14:c6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAy
MzE1M1oXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRjcwODgxNDMzQzk0ODMx
RjQ1OTdDRjY5MjM4QzE5RDIxQzQ1RDlBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOTujqigoKbkLplM7RCWTajOVViFxebmQU5qWRbsDGxKI0BG7oxG
UViL/uImD0/oDXDUXNj9NSaq+7X66Ztv4MAtMRQNcLQy8PcePflwyoDYjD94z/cr
FPAZacGxK+tLpIzRquKUbRsE5a+0igyVky93QcYN9N3ChwsirwwMEb1Xaq1OKnOr
c9usoP3byQ1XdR6I+Qj9gIwraY2XQoCdOTYIyYRdgTTHVv+PCv0cU7UI3Y/4pWfI
2rHsGyu5dDH8vW5d3Nkkw3xo4QhqfAM9cjCdlE6k2M5dcmUgymFN9vGs4U12ajet
hKZ8Rhlcv5QisQgOnDoMLcWay5ig5mZsf7sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT3CIFDPJSDH0WXz2kjjBnSHEXZpDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvOXdpQlF6eVVneDlGbDg5cEk0d1owaHhGMmFRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA69veDANBgkqhkiG9w0BAQsFAAOCAQEAn/HuTNfgn+fcddXsYEPdk3GsmZWD
lVyCKdzXpAj52rvy1z5GIvCZi1++eaTpgbUJQmQfY1XF3BRip1hUIFlY/ebiL4Mp
OgWxVa1IBDAQt+VG1ohQZ/+81wjKGn9q0sd1lAQ/mwK/hHlkZ5z3zYtOHIryQ7rQ
iD6voq7lojMXgVxS8gUi5RnyU8WV9tWACFFHea2pSRbdk9MrMsJPlnpy04/D6M4T
pW7DHc0Y2Md1NWZNUYguIv8nOGnadD/2TKuCtbLpsOQ9Ngs2yREAQiOzDHNJeDgJ
/dTiRQgehKFYg7jtszNOuOKd9bogXgfyOgV70eM2EmV7Drqw5l0grr0Uxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org