Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CKfKgj1R4gnCP8j71jGHRBtrs2Q.roa
File:                     CKfKgj1R4gnCP8j71jGHRBtrs2Q.roa (raw, json)
Hash identifier:          0Ziclq9qQDhXyeRjg/eguq56YU/WW2iAYxUEz9KsZrc=
Subject key identifier:   08:A7:CA:82:3D:51:E2:09:C2:3F:C8:FB:D6:31:87:44:1B:6B:B3:64
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       AF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CKfKgj1R4gnCP8j71jGHRBtrs2Q.roa
Signing time:             Mon 24 Oct 2022 04:30:58 +0000
ROA not before:           Mon 24 Oct 2022 04:30:58 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        210.135.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:30:58 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=08A7CA823D51E209C23FC8FBD63187441B6BB364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:1b:2d:b5:2b:71:97:2c:b6:01:7b:cb:60:
                    94:8e:99:05:7a:3a:18:6d:f9:8a:b3:e7:a4:46:3d:
                    74:f7:20:f9:66:6c:f9:0e:12:8c:ce:86:b2:5a:7b:
                    7e:56:da:80:4f:9e:fe:4e:ca:77:af:84:95:e6:5b:
                    e1:15:15:d4:41:78:f4:e2:3e:4b:15:c6:45:e5:1a:
                    e2:c3:ff:e4:29:a9:f3:de:45:c5:20:b6:d1:36:cc:
                    2a:6b:38:de:ef:aa:99:e3:dd:72:24:15:d0:9d:28:
                    9e:61:67:b7:79:23:71:1c:6f:09:f6:38:13:1e:04:
                    59:41:02:ca:03:b5:12:14:2c:5c:b6:64:6d:13:5d:
                    13:c5:77:98:a1:ae:67:47:12:f0:97:e6:98:dd:f2:
                    90:cd:d7:18:e1:0a:72:cd:6f:84:81:77:88:d0:f3:
                    01:7b:da:6f:0c:34:0a:12:b1:4d:39:b7:75:cc:20:
                    b6:9e:87:54:d1:4f:48:26:e9:6f:58:21:23:b2:a3:
                    8b:f3:36:6e:ce:4a:07:fc:0b:74:dc:e3:c0:a1:73:
                    55:0d:f3:96:91:60:e6:a0:1a:aa:44:a5:b9:d8:13:
                    59:78:5b:b9:58:e9:d4:2e:f1:23:55:30:d5:8f:c6:
                    2c:14:d1:f1:ea:10:71:7d:6b:39:9f:0c:04:ca:0c:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:CA:82:3D:51:E2:09:C2:3F:C8:FB:D6:31:87:44:1B:6B:B3:64
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CKfKgj1R4gnCP8j71jGHRBtrs2Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.135.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:0a:93:94:c6:fe:21:7f:25:54:bc:99:1e:d1:7e:4b:27:
         e8:73:3b:07:3f:9b:2c:b9:92:9c:e6:07:4c:ed:e7:f6:a6:c9:
         d2:20:e7:a7:07:5c:2a:28:38:68:69:ed:64:e4:03:26:a0:ca:
         b1:76:32:c2:dc:1d:28:85:e5:cf:e1:6b:99:ca:5f:a2:77:de:
         bd:8a:c2:d3:62:2b:1e:7d:16:8a:37:94:78:88:35:25:5d:ad:
         e6:34:ac:d0:86:a2:c1:69:a0:be:f8:c8:10:8c:60:cb:d6:1e:
         3a:43:26:95:6c:94:e5:5f:4f:f7:ac:f5:77:be:dc:4c:ff:0c:
         78:c6:02:b8:f6:b5:bd:aa:27:a2:e7:52:66:18:5c:59:7d:ea:
         9e:d0:83:66:6d:b0:e2:a7:ce:a0:11:cb:f7:d6:69:f9:3a:e3:
         78:c6:51:30:96:73:7d:71:4e:72:f5:12:5f:e7:75:ed:8e:29:
         17:40:48:7c:88:67:d1:48:b6:48:a4:99:47:d4:4b:cd:8b:cb:
         a7:46:16:63:56:4a:88:14:f5:da:4d:3a:f1:2d:c9:db:00:4e:
         dc:0d:5e:13:86:17:20:cf:1b:e3:28:5f:c4:59:80:60:ef:4d:
         3b:d5:71:ac:67:05:2d:6c:43:fd:94:8c:c7:63:2e:4c:85:09:
         eb:18:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org