Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DnRf4_-DpsboY2VjV93KcDTGAUs.roa
File:                     DnRf4_-DpsboY2VjV93KcDTGAUs.roa (raw, json)
Hash identifier:          TIECCOmLBWVmHSsuhiBmYVM/iqXECOoYwr0JYkjP/pA=
Subject key identifier:   0E:74:5F:E3:FF:83:A6:C6:E8:63:65:63:57:DD:CA:70:34:C6:01:4B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       E7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DnRf4_-DpsboY2VjV93KcDTGAUs.roa
Signing time:             Mon 31 Oct 2022 02:20:27 +0000
ROA not before:           Mon 31 Oct 2022 02:20:27 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        14.193.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:20:27 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0E745FE3FF83A6C6E863656357DDCA7034C6014B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:bb:db:fc:05:7b:ef:33:50:b7:a5:b6:8b:
                    62:9b:ef:5e:af:62:a6:ab:35:6f:f1:c7:c2:c8:14:
                    59:b0:a7:b9:03:56:4a:68:2a:9f:d3:1d:6f:a5:69:
                    b5:e1:47:3f:17:da:b9:ed:92:40:de:b5:7a:c8:e0:
                    30:be:1f:c5:0e:98:29:ff:dc:47:0b:7b:31:22:a7:
                    f8:82:bf:ad:85:ca:b3:92:b1:67:49:e2:c2:6b:ce:
                    62:75:fe:16:30:cc:5f:c0:ce:9f:f4:3a:bc:00:1b:
                    88:31:c1:4c:06:6e:ed:6d:8b:16:e7:51:3f:ff:aa:
                    5e:66:26:f1:39:c1:20:0a:4b:f0:03:e3:10:bc:5a:
                    9c:d5:e0:f6:e3:fb:e9:d1:12:21:c2:bd:41:3e:a3:
                    7d:6b:2f:f1:db:f6:f5:4f:a7:0d:62:26:ed:64:76:
                    59:18:d5:5d:95:2c:e6:ad:58:12:dc:3f:77:e2:0c:
                    e5:7d:27:6b:cd:3d:76:3d:93:cc:70:97:74:42:20:
                    66:eb:57:fe:7b:05:15:06:eb:0f:75:de:6e:bc:03:
                    1a:54:0d:04:d2:d4:e1:ee:b4:6d:bf:65:1f:0b:1b:
                    33:ef:b1:6d:5f:c1:f0:19:7c:4f:81:cc:81:42:9f:
                    94:e1:31:8f:e5:0d:07:6a:fa:13:27:c6:40:58:14:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:5F:E3:FF:83:A6:C6:E8:63:65:63:57:DD:CA:70:34:C6:01:4B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DnRf4_-DpsboY2VjV93KcDTGAUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:cb:4b:bc:6c:3c:07:84:d9:b8:10:5a:46:b5:10:f0:66:
         5c:68:8b:5e:f4:c0:76:7c:da:a0:b3:f8:6b:07:e7:d0:3b:1c:
         93:1d:87:e7:0a:fe:8d:b1:0f:21:b5:e4:c4:b3:28:b4:5b:ba:
         10:78:a1:06:dc:fd:17:06:38:27:04:81:63:3c:6b:c2:ce:48:
         d5:af:0a:10:09:e0:60:fb:f3:65:ca:f5:30:cd:bd:90:1d:66:
         bf:ce:7e:ef:12:80:e8:d7:a7:3a:ca:ee:99:4a:12:99:27:bf:
         c3:83:5b:de:d1:71:69:7e:e5:9a:dc:49:35:86:82:2e:19:1f:
         77:78:8c:1a:b0:3b:b5:24:6b:57:16:eb:a3:76:9f:85:27:73:
         d8:d7:00:36:74:61:3b:bf:89:e9:1d:f7:b1:85:a0:5a:29:85:
         ff:c8:8d:df:6a:11:d6:36:2a:47:7d:dc:32:33:3e:e9:00:97:
         18:1e:e8:8d:02:f0:b2:43:09:b7:5a:5c:d2:18:a6:a2:ed:b6:
         ff:8a:02:7f:fe:df:da:15:55:27:39:b4:13:f7:c6:bc:50:23:
         5b:e8:d4:e1:6b:38:b0:e6:9a:e6:87:74:3a:91:5a:14:d4:a5:
         40:04:b2:b8:c7:f3:9d:e4:5f:b0:52:0c:62:a1:92:36:e2:80:
         6a:0b:a5:48
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMzEw
MjIwMjdaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBFNzQ1RkUzRkY4M0E2
QzZFODYzNjU2MzU3RERDQTcwMzRDNjAxNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4g7vb/AV77zNQt6W2i2Kb716vYqarNW/xx8LIFFmwp7kDVkpo
Kp/THW+labXhRz8X2rntkkDetXrI4DC+H8UOmCn/3EcLezEip/iCv62FyrOSsWdJ
4sJrzmJ1/hYwzF/Azp/0OrwAG4gxwUwGbu1tixbnUT//ql5mJvE5wSAKS/AD4xC8
WpzV4Pbj++nREiHCvUE+o31rL/Hb9vVPpw1iJu1kdlkY1V2VLOatWBLcP3fiDOV9
J2vNPXY9k8xwl3RCIGbrV/57BRUG6w913m68AxpUDQTS1OHutG2/ZR8LGzPvsW1f
wfAZfE+BzIFCn5ThMY/lDQdq+hMnxkBYFMthAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUDnRf4/+DpsboY2VjV93KcDTGAUswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0RuUmY0Xy1EcHNib1kyVmpWOTNLY0RUR0FVcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAOwTANBgkqhkiG9w0BAQsFAAOCAQEAijfLS7xsPAeE2bgQWka1EPBmXGiL
XvTAdnzaoLP4awfn0Dsckx2H5wr+jbEPIbXkxLMotFu6EHihBtz9FwY4JwSBYzxr
ws5I1a8KEAngYPvzZcr1MM29kB1mv85+7xKA6NenOsrumUoSmSe/w4Nb3tFxaX7l
mtxJNYaCLhkfd3iMGrA7tSRrVxbro3afhSdz2NcANnRhO7+J6R33sYWgWimF/8iN
32oR1jYqR33cMjM+6QCXGB7ojQLwskMJt1pc0himou22/4oCf/7f2hVVJzm0E/fG
vFAjW+jU4Ws4sOaa5od0OpFaFNSlQASyuMfzneRfsFIMYqGSNuKAagulSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org