Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MEH9lwsT9B-Qml7JQANVYNwQ2l4.roa
File:                     MEH9lwsT9B-Qml7JQANVYNwQ2l4.roa (raw, json)
Hash identifier:          C3ecuk3MrhuUF9ufIHvUBKcj4QiHUkfCLTpvTvJvLyY=
Subject key identifier:   30:41:FD:97:0B:13:F4:1F:90:9A:5E:C9:40:03:55:60:DC:10:DA:5E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       3E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MEH9lwsT9B-Qml7JQANVYNwQ2l4.roa
Signing time:             Mon 17 Oct 2022 01:31:30 +0000
ROA not before:           Mon 17 Oct 2022 01:31:30 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9378
IP address blocks:        61.215.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:31:30 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=3041FD970B13F41F909A5EC940035560DC10DA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:62:61:ac:54:f6:2c:ea:2e:2e:fe:7d:d6:
                    e6:5b:b1:80:35:2d:bf:08:00:c8:19:92:65:60:e8:
                    fd:87:47:8d:18:39:a1:b2:f5:ab:42:c3:9a:ae:be:
                    98:64:b0:af:dd:19:d3:56:84:41:81:5f:fb:25:af:
                    9b:8a:66:75:49:34:00:9a:ac:38:f4:0f:f2:4c:24:
                    38:df:88:f8:81:45:80:9a:19:8e:eb:5f:73:d1:8b:
                    e1:72:9a:c1:a7:78:19:a6:15:f1:8c:99:b2:9e:dc:
                    68:ef:a7:bf:0b:bd:df:18:0a:da:c4:83:63:c0:86:
                    4c:8d:05:10:f7:bd:28:ab:d9:4a:98:cb:fd:71:48:
                    1d:dc:3b:76:4b:1c:5c:3c:15:ed:65:f7:44:b4:f3:
                    35:72:9b:6c:6c:76:6f:e9:ea:eb:9f:93:94:35:a3:
                    5a:c8:64:cc:03:20:09:03:d7:b8:cc:78:70:a0:0b:
                    17:9b:4a:86:e5:de:17:8c:67:8b:79:e6:01:d3:f6:
                    3b:ae:b4:03:f8:09:2e:2d:a2:10:2d:e2:72:c6:9d:
                    85:98:b9:f8:9f:52:11:7e:0f:c1:6e:37:0c:cb:4d:
                    ae:3a:71:bc:75:c8:da:24:30:d7:86:3b:7e:a0:ab:
                    3b:b5:fb:fc:73:a3:57:f9:90:ea:a0:41:01:da:ad:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:FD:97:0B:13:F4:1F:90:9A:5E:C9:40:03:55:60:DC:10:DA:5E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MEH9lwsT9B-Qml7JQANVYNwQ2l4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:d7:8f:12:85:77:8f:df:3b:4e:42:04:e5:d4:8d:fd:7b:32:
         c1:f0:73:34:25:1f:72:b7:8f:92:1d:0c:a4:c1:56:ba:8b:bb:
         b7:01:7d:48:6f:5f:d3:f0:3e:a7:06:29:ff:cf:dd:4f:2b:22:
         ff:3d:40:e1:07:99:e5:85:06:d5:60:05:14:ca:a4:45:d0:50:
         c2:cc:ef:ff:00:f5:e9:90:ca:6d:5b:24:e9:c0:47:b7:7c:07:
         07:2d:ea:4a:89:2b:98:c6:7a:10:47:45:91:c1:cf:93:79:a9:
         fc:73:b6:49:51:68:09:42:0a:10:7f:28:c9:47:1a:2f:f4:e0:
         d7:25:54:d3:ef:7e:bf:d7:4b:7c:2f:a1:e4:d1:40:52:58:37:
         d1:62:b1:58:a8:af:6b:40:5c:3f:91:32:95:fa:9c:52:dd:52:
         54:77:06:cd:88:cc:b1:70:93:e8:7d:46:65:a0:88:f4:9f:59:
         b8:bd:a2:72:80:6f:8d:1d:d3:d6:36:46:4f:0c:63:20:d6:b2:
         21:84:08:ea:c6:ff:11:8c:22:15:e6:0b:08:09:21:dc:7c:fa:
         c4:46:84:61:7a:7d:2f:df:8e:ec:ef:fa:d5:e9:bf:0b:a6:64:
         32:64:ad:3a:72:88:76:77:a7:03:52:51:45:f3:cd:7c:e1:59:
         90:ee:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org