Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CBrBsUIFptS-hb-KN6RTSMsAkgc.roa
File:                     CBrBsUIFptS-hb-KN6RTSMsAkgc.roa (raw, json)
Hash identifier:          J2t8E5ecitUzVJYeGEuAbg8c3tvrctRV/I/BvMQoKH8=
Subject key identifier:   08:1A:C1:B1:42:05:A6:D4:BE:85:BF:8A:37:A4:53:48:CB:00:92:07
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       97
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CBrBsUIFptS-hb-KN6RTSMsAkgc.roa
Signing time:             Mon 24 Oct 2022 02:58:33 +0000
ROA not before:           Mon 24 Oct 2022 02:58:33 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        123.98.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:58:33 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=081AC1B14205A6D4BE85BF8A37A45348CB009207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:5b:d8:f1:4a:ac:ce:2e:09:72:3d:c0:e7:
                    1e:77:7e:cf:91:0e:cb:e2:0f:ae:a1:45:bd:c9:2f:
                    17:3b:05:a5:1c:21:21:3a:74:f1:b6:00:8f:7d:39:
                    04:ee:97:16:39:19:43:31:62:a8:40:ff:b8:fa:4c:
                    2c:dd:48:75:f8:01:3f:52:07:35:c7:c8:ff:b9:8b:
                    96:9d:11:8d:63:b1:1a:3a:3e:c8:97:34:77:fb:a5:
                    27:9e:e5:37:cf:f0:5d:5e:62:f2:a6:7e:ed:8e:ca:
                    3e:45:82:90:c6:d6:f2:97:22:99:21:98:d7:b5:6a:
                    0c:42:8c:8b:af:5f:34:c5:19:51:ff:40:f9:12:a6:
                    f5:71:b2:b2:b1:52:f2:e5:a0:64:d1:54:9b:3d:cc:
                    2a:66:7b:cf:18:05:35:e9:ff:bc:45:a9:ed:56:c7:
                    63:90:98:2c:a9:39:95:c9:67:e0:2a:62:20:eb:2d:
                    67:bd:cf:21:3f:1d:f6:7c:a0:35:c5:51:c2:45:ed:
                    45:40:e0:0b:15:49:54:64:95:26:ea:5d:5e:c1:2f:
                    98:09:29:01:e2:09:eb:b5:92:b8:a2:05:3d:a4:b5:
                    ef:bc:d5:c4:c0:e0:20:f0:48:0c:13:eb:e8:91:1b:
                    ce:a8:09:81:71:d3:62:b5:26:57:0e:88:94:cd:3e:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1A:C1:B1:42:05:A6:D4:BE:85:BF:8A:37:A4:53:48:CB:00:92:07
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CBrBsUIFptS-hb-KN6RTSMsAkgc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:9d:c7:e9:ae:36:da:d4:a7:2c:85:80:a9:7e:e1:13:b9:f5:
         7c:09:a7:93:a3:6d:d2:28:e6:70:2e:28:97:c3:71:79:da:a0:
         22:bc:67:0c:59:21:47:0a:5d:70:a1:5b:87:ed:fc:72:16:1f:
         38:37:52:d0:e4:b1:e1:97:0f:da:24:79:4f:81:a5:96:7b:c4:
         2c:18:04:87:ba:c4:61:5e:ab:0b:8a:4e:d8:f9:b4:3a:09:89:
         e9:d7:c0:14:24:f1:72:d0:b8:ef:57:2a:74:8a:e6:07:20:95:
         5a:92:c2:b2:5a:0a:de:5f:ca:80:7b:e8:c2:1f:55:12:4e:47:
         76:0c:41:db:43:ca:06:d5:7b:62:ff:50:58:be:b5:88:1f:79:
         f0:6f:c1:49:d5:03:1f:c5:d5:ae:20:ef:6f:29:61:af:54:d8:
         de:4f:44:ee:77:9a:b4:3f:fb:80:19:e4:c8:58:fe:4d:ec:94:
         76:6c:82:32:d7:07:fa:f6:8d:db:6f:54:c0:20:80:c3:e0:df:
         df:b5:da:af:ed:22:a6:62:d5:8a:b1:bf:de:4c:6e:c0:9b:bb:
         ab:0e:8d:48:5e:30:23:b2:bd:7a:42:e9:a2:a4:94:50:64:91:
         bf:70:ca:49:e7:21:d3:f4:1b:77:6c:51:6c:28:63:fa:a2:bf:
         5b:76:3f:62
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
MjU4MzNaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4MUFDMUIxNDIwNUE2
RDRCRTg1QkY4QTM3QTQ1MzQ4Q0IwMDkyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdblvY8Uqszi4Jcj3A5x53fs+RDsviD66hRb3JLxc7BaUcISE6
dPG2AI99OQTulxY5GUMxYqhA/7j6TCzdSHX4AT9SBzXHyP+5i5adEY1jsRo6PsiX
NHf7pSee5TfP8F1eYvKmfu2Oyj5FgpDG1vKXIpkhmNe1agxCjIuvXzTFGVH/QPkS
pvVxsrKxUvLloGTRVJs9zCpme88YBTXp/7xFqe1Wx2OQmCypOZXJZ+AqYiDrLWe9
zyE/HfZ8oDXFUcJF7UVA4AsVSVRklSbqXV7BL5gJKQHiCeu1kriiBT2kte+81cTA
4CDwSAwT6+iRG86oCYFx02K1JlcOiJTNPjAFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCBrBsUIFptS+hb+KN6RTSMsAkgcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0NCckJzVUlGcHRTLWhiLUtONlJUU01zQWtnYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAV7YuAwDQYJKoZIhvcNAQELBQADggEBAIadx+muNtrUpyyFgKl+4RO59XwJ
p5OjbdIo5nAuKJfDcXnaoCK8ZwxZIUcKXXChW4ft/HIWHzg3UtDkseGXD9okeU+B
pZZ7xCwYBIe6xGFeqwuKTtj5tDoJienXwBQk8XLQuO9XKnSK5gcglVqSwrJaCt5f
yoB76MIfVRJOR3YMQdtDygbVe2L/UFi+tYgfefBvwUnVAx/F1a4g728pYa9U2N5P
RO53mrQ/+4AZ5MhY/k3slHZsgjLXB/r2jdtvVMAggMPg39+12q/tIqZi1Yqxv95M
bsCbu6sOjUheMCOyvXpC6aKklFBkkb9wyknnIdP0G3dsUWwoY/qiv1t2P2I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org