Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DhCX6Ck4-1NcpvKA6gtULxfOAVM.roa
File:                     DhCX6Ck4-1NcpvKA6gtULxfOAVM.roa (raw, json)
Hash identifier:          t+eZHWtNhdNvYlrI7LlE+oP4zyP9osXRKhbY/ATqSxY=
Subject key identifier:   0E:10:97:E8:29:38:FB:53:5C:A6:F2:80:EA:0B:54:2F:17:CE:01:53
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       51
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DhCX6Ck4-1NcpvKA6gtULxfOAVM.roa
Signing time:             Mon 17 Oct 2022 01:57:41 +0000
ROA not before:           Mon 17 Oct 2022 01:57:41 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        113.197.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:57:41 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0E1097E82938FB535CA6F280EA0B542F17CE0153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:4d:7a:76:b4:3e:42:94:cc:a1:a3:59:57:
                    e5:83:1e:0d:07:dc:a0:90:55:9f:bd:49:2d:d9:af:
                    91:39:e4:ce:2c:a5:54:f9:d6:a6:e9:a9:1f:48:10:
                    96:b6:a2:27:16:a0:0d:a6:bd:d9:5e:dc:3e:fe:33:
                    a6:16:09:07:5c:93:db:3c:6a:be:fd:ba:f1:f5:f5:
                    14:3b:2c:32:5b:f9:2c:47:e1:54:29:a7:6e:b7:49:
                    26:7e:67:3d:23:8e:32:0e:58:29:97:4e:e1:a6:76:
                    3a:e5:47:74:98:ea:14:97:c9:c3:24:43:d4:4a:2d:
                    63:d3:fc:ad:d2:e2:92:5f:25:3d:92:4c:c1:91:43:
                    52:c9:4d:18:17:d5:60:cb:dd:55:60:a7:4f:1c:ca:
                    06:c4:33:b9:4a:dc:13:39:1b:c2:31:08:cf:77:d5:
                    59:f7:55:e4:cb:47:bb:6e:d3:21:2a:d7:32:43:0a:
                    f7:23:52:77:1b:70:f3:67:ce:f4:81:21:9b:e8:b2:
                    ca:5d:01:7a:83:05:8f:2d:d6:56:ca:82:70:88:38:
                    88:d3:d1:7f:56:45:2b:fe:98:a0:25:c0:4c:da:38:
                    75:fc:1e:10:4d:2f:7c:75:88:8f:17:30:da:39:1b:
                    93:45:88:23:66:99:0e:39:4c:78:f6:73:c2:b5:3f:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:97:E8:29:38:FB:53:5C:A6:F2:80:EA:0B:54:2F:17:CE:01:53
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DhCX6Ck4-1NcpvKA6gtULxfOAVM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:16:ca:08:29:ee:79:94:9f:e9:3a:2a:36:8a:bf:96:86:46:
         7a:d8:8c:1a:b4:d1:7f:b5:9c:46:56:fb:55:77:ce:5a:58:f2:
         e1:0e:ef:30:66:23:41:73:d4:2d:8a:2e:88:cf:11:df:34:09:
         ba:cb:3e:95:d6:9e:4d:ef:1b:8f:e2:31:9c:b8:b4:c7:b9:f1:
         03:14:2c:f4:b9:2a:9c:1b:2e:5e:5c:6a:57:e5:ff:ba:a1:ae:
         30:87:99:95:a2:77:ac:ee:2c:3a:13:f3:d2:ee:3f:27:4d:8d:
         79:1e:d2:c9:fa:e8:51:36:ab:68:9b:4d:31:af:ce:cb:ff:de:
         2c:ab:ff:9a:20:8d:52:1e:7b:0c:86:db:d6:af:64:49:a7:38:
         57:06:22:ba:61:90:25:3f:2d:bb:3d:51:26:da:7a:71:c7:44:
         a6:99:85:3d:d8:a7:6f:09:a5:37:f3:e5:5c:39:80:54:93:0f:
         e1:fe:16:99:e5:27:28:87:a3:ab:4f:61:c0:3f:7d:8a:40:92:
         59:87:a9:53:b8:b3:64:0b:58:ae:ed:aa:45:b3:b8:ca:a0:e2:
         70:5f:f6:49:b3:40:51:8b:d2:0b:6c:75:06:f4:b8:fa:f1:3c:
         9c:cb:9f:a3:6d:8d:43:9f:39:34:1d:62:f5:8c:0f:97:92:39:
         0f:ec:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org