Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/OfAhbzL4v-8D48RxjMwq1pp5Yxg.roa
File:                     OfAhbzL4v-8D48RxjMwq1pp5Yxg.roa (raw, json)
Hash identifier:          0Iz1EQz8WXAyx5yfhksqiguT1S8lTuq/SJHQ5R/17Fo=
Subject key identifier:   39:F0:21:6F:32:F8:BF:EF:03:E3:C4:71:8C:CC:2A:D6:9A:79:63:18
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       C6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OfAhbzL4v-8D48RxjMwq1pp5Yxg.roa
Signing time:             Mon 24 Oct 2022 04:53:01 +0000
ROA not before:           Mon 24 Oct 2022 04:53:01 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        223.223.208.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:53:01 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=39F0216F32F8BFEF03E3C4718CCC2AD69A796318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:ed:ec:0f:fb:4a:5c:00:aa:02:f1:d9:36:
                    d2:1d:82:f8:1c:31:ab:7d:24:4f:7e:be:39:24:b9:
                    e4:87:48:43:df:18:5b:20:d6:11:62:ba:b5:57:fb:
                    a8:af:06:9c:8c:6f:c7:13:de:20:96:24:79:b4:50:
                    8e:b2:f7:8e:17:5c:55:77:ee:f3:31:30:a6:6c:8a:
                    d6:39:b8:5e:4a:bf:85:67:3a:cc:4e:f3:b8:f5:5d:
                    76:bb:a4:32:f5:16:f4:0c:4e:b1:aa:98:78:2e:88:
                    c3:7d:02:2e:da:31:74:ec:82:41:95:0e:3b:cd:a6:
                    cf:f7:d5:04:95:61:46:31:5a:f1:5c:a7:f3:a6:75:
                    f2:1e:b3:f7:47:43:b3:cd:83:99:fd:1b:93:39:6c:
                    f7:86:fd:8d:de:0e:ee:81:95:7d:ea:a8:0f:e8:99:
                    75:2c:41:d6:46:03:18:a7:73:ee:c5:66:c5:1f:78:
                    16:8e:c0:6b:13:87:be:1c:16:09:63:3a:2a:35:dc:
                    d1:8a:c0:19:f9:ed:a8:c9:8d:8d:6a:35:ec:62:c4:
                    94:26:68:e9:2a:d9:1d:11:84:65:f9:5b:04:45:b9:
                    9d:ee:2a:1d:49:7c:a4:0c:40:f1:6c:74:3e:3d:02:
                    2b:8c:f6:21:22:ad:a8:fb:44:e0:dd:0e:f4:03:df:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F0:21:6F:32:F8:BF:EF:03:E3:C4:71:8C:CC:2A:D6:9A:79:63:18
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OfAhbzL4v-8D48RxjMwq1pp5Yxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.223.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:51:87:c6:b7:08:82:b2:f8:b9:e0:1f:9a:68:85:a2:98:6d:
         72:d0:2d:ec:8a:eb:19:38:f5:47:08:e2:03:b3:e1:14:f3:72:
         30:9c:2a:fc:c2:43:b7:1c:38:79:90:77:ad:d1:88:8a:29:a7:
         85:72:e8:17:d1:98:fb:60:e8:f4:b2:91:64:aa:ff:6c:65:8e:
         09:7e:fd:93:0f:ec:e7:b6:02:be:8a:ff:da:e6:ff:f4:4f:c1:
         69:d9:b6:3b:a8:d5:9d:2c:94:8c:dd:88:68:4a:db:d7:7b:f4:
         3f:22:03:44:d9:91:44:76:13:8d:be:b4:92:d4:97:a6:ef:70:
         c5:b6:7b:98:f7:e5:cc:96:ac:e9:8e:3d:56:f4:ae:79:68:7d:
         a1:64:92:a6:52:01:d2:4a:fa:94:62:5b:ac:e1:15:ff:5a:09:
         f9:4e:b5:b0:7f:a6:06:a3:8f:1d:7e:36:5b:5f:f7:ef:15:ea:
         3d:8c:30:b4:d3:bc:b2:df:62:8f:2f:6d:7b:25:b7:bf:7d:47:
         53:c3:70:07:d9:8c:ba:0f:00:bd:8b:c8:e1:86:46:98:72:98:
         af:66:1f:82:d3:77:6c:db:ac:9b:a2:33:13:d0:1b:0e:3c:ec:
         bb:b0:0a:7c:49:cc:d0:0d:5c:81:5d:6e:fb:0f:ee:be:07:4f:
         f4:c4:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org