Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Th3W5Ht2qa7cZFYSvBket9A9tmI.roa
File:                     Th3W5Ht2qa7cZFYSvBket9A9tmI.roa (raw, json)
Hash identifier:          ry0uhzE6nnuY3byGCiC8VSywjuIMXN9wZRZ/am+c+M4=
Subject key identifier:   4E:1D:D6:E4:7B:76:A9:AE:DC:64:56:12:BC:19:1E:B7:D0:3D:B6:62
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       33
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Th3W5Ht2qa7cZFYSvBket9A9tmI.roa
Signing time:             Tue 11 Oct 2022 01:58:18 +0000
ROA not before:           Tue 11 Oct 2022 01:58:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     45675
IP address blocks:        219.111.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:58:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=4E1DD6E47B76A9AEDC645612BC191EB7D03DB662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:90:ec:86:5f:38:5c:61:3f:80:82:d3:ea:
                    76:86:ab:8f:f8:89:27:1a:dc:dd:99:05:e0:99:e5:
                    5f:f9:f1:dc:67:bf:63:da:ad:9a:07:bc:86:46:a8:
                    88:58:df:1d:59:fa:a9:44:c1:28:22:e9:bd:08:bd:
                    a3:1e:9c:e0:80:43:28:fb:b3:32:f7:c0:cd:e0:a6:
                    55:1c:89:6d:55:4d:5c:2e:a9:8d:de:de:c5:20:d6:
                    d8:26:88:33:54:88:c1:42:00:15:37:93:8d:93:e1:
                    bb:ca:53:e2:d3:d1:ca:64:f2:38:03:77:77:db:dd:
                    84:e6:d3:0b:b6:94:9a:fb:1b:42:04:05:3c:12:cc:
                    ed:a1:d3:2c:26:bd:05:7a:ef:b5:f1:bb:98:eb:f2:
                    56:a3:2b:a7:dd:ce:a0:b7:8f:32:e9:4c:10:3f:eb:
                    7a:64:79:b2:8b:57:b9:0e:db:6d:b1:c7:87:8c:19:
                    61:fe:d9:11:37:ab:d1:8e:3b:df:2e:cb:38:7b:5e:
                    c7:b8:31:1a:83:74:15:b5:87:43:87:f1:10:77:b6:
                    1d:18:1a:2f:3a:ea:38:26:38:22:75:d1:86:7d:2a:
                    a3:64:00:77:c7:0f:0e:14:a4:f0:e7:a9:10:5c:47:
                    43:c5:b3:8b:f6:aa:af:45:07:d0:f0:a1:c0:89:d9:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:D6:E4:7B:76:A9:AE:DC:64:56:12:BC:19:1E:B7:D0:3D:B6:62
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Th3W5Ht2qa7cZFYSvBket9A9tmI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:5e:c5:85:8d:fc:96:1d:e5:3d:3e:1f:9c:1d:11:bb:62:
         2d:19:f7:e7:96:3f:c1:6b:ff:ee:2c:a5:2b:3f:98:65:65:a1:
         7b:35:95:a0:d1:5e:b2:bb:a6:07:cc:41:61:6c:31:f7:16:18:
         90:1e:f2:a2:f5:3d:31:9a:1a:30:b5:e2:08:55:ea:18:6a:cd:
         0d:99:89:3f:02:72:41:e1:33:36:16:5d:f5:3a:51:6b:5f:62:
         ec:ba:3d:ab:77:0f:97:a7:f5:1f:78:b1:66:39:a6:47:3a:27:
         e7:68:54:48:d3:78:4e:a0:06:d7:5e:ac:57:e8:f4:67:44:15:
         47:91:21:ed:95:98:78:04:af:a6:1e:f1:80:a0:7f:51:9f:cc:
         af:2b:71:67:95:fc:52:80:4f:f3:b6:cb:8f:cd:69:7d:40:9c:
         cc:4c:95:a4:4a:dd:9b:33:69:29:d5:3b:17:e9:6f:10:9d:b7:
         84:7a:1b:6a:a0:7a:14:f3:77:cf:54:a2:c3:7c:39:16:00:50:
         54:9e:2d:41:c3:7a:f1:53:ad:90:f0:4b:a3:f0:3b:0f:87:9c:
         fc:02:78:89:d7:bc:2f:8e:ae:94:7b:bd:75:8e:d8:ec:ab:1a:
         28:63:95:39:41:6a:39:7f:b3:ef:24:8e:99:83:75:36:7a:e7:
         b5:8a:e2:b9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
NTgxOFoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNEUxREQ2RTQ3Qjc2QTlB
RURDNjQ1NjEyQkMxOTFFQjdEMDNEQjY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANuxkOyGXzhcYT+AgtPqdoarj/iJJxrc3ZkF4JnlX/nx3Ge/Y9qt
mge8hkaoiFjfHVn6qUTBKCLpvQi9ox6c4IBDKPuzMvfAzeCmVRyJbVVNXC6pjd7e
xSDW2CaIM1SIwUIAFTeTjZPhu8pT4tPRymTyOAN3d9vdhObTC7aUmvsbQgQFPBLM
7aHTLCa9BXrvtfG7mOvyVqMrp93OoLePMulMED/remR5sotXuQ7bbbHHh4wZYf7Z
ETer0Y473y7LOHtex7gxGoN0FbWHQ4fxEHe2HRgaLzrqOCY4InXRhn0qo2QAd8cP
DhSk8OepEFxHQ8Wzi/aqr0UH0PChwInZQncCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBROHdbke3aprtxkVhK8GR630D22YjAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvVGgzVzVIdDJxYTdjWkZZU3ZCa2V0OUE5dG1JLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNtvwDANBgkqhkiG9w0BAQsFAAOCAQEAqvxexYWN/JYd5T0+H5wdEbtiLRn3
55Y/wWv/7iylKz+YZWWhezWVoNFesrumB8xBYWwx9xYYkB7yovU9MZoaMLXiCFXq
GGrNDZmJPwJyQeEzNhZd9TpRa19i7Lo9q3cPl6f1H3ixZjmmRzon52hUSNN4TqAG
116sV+j0Z0QVR5Eh7ZWYeASvph7xgKB/UZ/MrytxZ5X8UoBP87bLj81pfUCczEyV
pErdmzNpKdU7F+lvEJ23hHobaqB6FPN3z1Siw3w5FgBQVJ4tQcN68VOtkPBLo/A7
D4ec/AJ4ide8L46ulHu9dY7Y7KsaKGOVOUFqOX+z7ySOmYN1NnrntYriuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org