Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DfWs9gxiltKOzU2dwBmV4acLcbg.roa
File:                     DfWs9gxiltKOzU2dwBmV4acLcbg.roa (raw, json)
Hash identifier:          K3ZlMGJF5Yb+Sl+VY7bfVwSQtLbWXz+Q9R2NhHWoQQE=
Subject key identifier:   0D:F5:AC:F6:0C:62:96:D2:8E:CD:4D:9D:C0:19:95:E1:A7:0B:71:B8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       F3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DfWs9gxiltKOzU2dwBmV4acLcbg.roa
Signing time:             Mon 31 Oct 2022 02:34:23 +0000
ROA not before:           Mon 31 Oct 2022 02:34:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        122.255.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:34:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0DF5ACF60C6296D28ECD4D9DC01995E1A70B71B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b1:47:b8:9b:2d:9c:59:e7:d3:78:a2:8f:a2:
                    70:b8:3d:c3:fb:3d:6c:5a:9a:be:d2:73:a1:2c:bd:
                    7e:e1:5c:e2:e7:0d:61:16:9c:2c:88:bf:10:68:6c:
                    c4:a2:28:a5:8f:fe:0c:3f:2c:41:ea:09:c8:bd:a1:
                    b0:18:db:86:e9:25:45:88:2f:6c:b1:36:82:8c:76:
                    bc:ce:f8:62:78:3e:6f:7a:e4:9a:be:6d:97:6a:75:
                    8f:98:8f:64:48:e9:84:57:4e:5f:6b:a3:69:39:ff:
                    2f:fb:b6:d9:78:20:c4:e5:b7:1d:7b:ae:ae:60:86:
                    5e:0b:7b:c1:82:f8:e5:f0:95:03:38:93:bf:dc:1a:
                    9e:b4:6c:80:56:96:b8:05:79:2b:e5:14:5b:3d:55:
                    ae:8a:d1:43:1a:41:02:5a:31:3f:f7:82:45:fe:05:
                    f4:b3:40:46:8c:03:9f:5a:1e:37:a9:39:38:3d:6e:
                    ca:1c:ee:f9:b6:55:53:ac:3d:09:d4:2c:76:9a:7a:
                    b4:66:1e:4a:06:91:b6:0b:7d:50:cc:ab:da:22:59:
                    40:d0:72:7b:61:26:e9:7a:4b:a8:a0:b2:65:83:f3:
                    d1:d2:93:ee:66:bd:a9:14:e4:57:0b:57:16:be:0e:
                    e8:50:4a:24:f9:de:01:56:1a:73:b1:76:2a:56:20:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F5:AC:F6:0C:62:96:D2:8E:CD:4D:9D:C0:19:95:E1:A7:0B:71:B8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DfWs9gxiltKOzU2dwBmV4acLcbg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ed:28:58:97:22:fe:20:ed:e6:18:d7:38:df:1a:36:0e:ef:76:
         da:de:7f:e4:d0:23:d0:c8:40:58:a4:fc:3b:65:78:fa:90:e3:
         bc:e4:1f:ad:40:b1:11:f6:ee:3e:b5:b2:2d:ee:ba:e2:09:46:
         4a:d7:d5:77:63:a5:10:80:9b:55:eb:9c:84:bc:51:95:dd:65:
         10:33:b6:c0:b1:b2:0b:1b:5e:da:3c:e3:3b:d5:7a:2f:15:af:
         ad:51:f1:97:6d:d5:1b:23:a4:0d:98:12:83:d2:25:b0:0a:ec:
         a0:8b:fc:63:a2:74:ee:42:24:cd:dd:35:b5:3f:f2:59:bf:37:
         fe:8b:56:67:9c:78:fd:44:2e:10:29:1b:3e:a6:9e:c6:9c:55:
         4e:53:e8:84:06:1b:7a:c4:0e:39:ef:3a:f2:ac:33:25:16:92:
         5e:fc:b4:be:6e:e6:4b:13:1e:3c:58:17:7b:80:88:ed:4f:5a:
         fb:1a:0b:6c:1c:e6:75:fb:e7:e6:71:c8:c3:a7:b4:c3:a4:3c:
         ba:3e:3b:3d:ad:03:eb:0a:9b:96:c7:0c:e5:91:72:f7:fd:0a:
         ae:b9:91:0d:96:3f:7f:29:74:85:52:1a:8d:1e:67:6b:b1:8e:
         65:fc:21:e4:b5:b5:c1:60:77:05:75:9f:6a:ae:5f:2a:18:a3:
         be:c3:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org