Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/W-kYt_-ENQ8UqY-1RkatgwnQy6g.roa
File:                     W-kYt_-ENQ8UqY-1RkatgwnQy6g.roa (raw, json)
Hash identifier:          Bzx9clFlB/3N1X6e+xmpLJnAuXUa9WSqfTEhroBrvhk=
Subject key identifier:   5B:E9:18:B7:FF:84:35:0F:14:A9:8F:B5:46:46:AD:83:09:D0:CB:A8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       3B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/W-kYt_-ENQ8UqY-1RkatgwnQy6g.roa
Signing time:             Mon 17 Oct 2022 01:23:26 +0000
ROA not before:           Mon 17 Oct 2022 01:23:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        27.113.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:23:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5BE918B7FF84350F14A98FB54646AD8309D0CBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:b9:50:56:ac:dd:d0:a4:4c:03:46:6c:ca:
                    6a:49:95:93:12:b0:c7:27:11:e8:2b:17:66:42:6f:
                    2b:f0:54:8e:f7:24:92:5b:ba:54:0b:f6:20:a5:dc:
                    75:bf:37:b4:8e:a4:52:0b:a7:e8:8e:4c:fc:32:b0:
                    c0:58:09:95:56:64:74:cb:72:e5:ea:a5:77:c5:29:
                    a6:40:c1:6b:96:2b:62:b7:ac:ff:63:eb:67:ef:8f:
                    e3:d8:ce:05:dd:22:65:1d:58:c1:45:0a:bc:2e:0f:
                    a8:13:1f:04:dd:76:a2:4d:3f:92:af:d3:d8:b1:db:
                    1e:13:9a:09:5b:ae:82:fe:6d:12:06:26:05:74:11:
                    05:98:82:67:96:77:0f:4a:c6:47:c8:e8:9c:68:63:
                    82:f0:1d:e9:47:6e:45:a6:11:fb:05:c7:ac:0f:40:
                    d7:d3:bb:09:de:60:6f:ba:6a:1e:e3:d9:6e:51:a2:
                    7f:05:2d:ba:ad:52:6c:e9:a7:ef:74:51:64:da:2c:
                    11:fd:ff:d1:e6:08:1c:1e:0c:05:b2:de:55:fd:e9:
                    f8:47:ec:ff:de:89:9b:44:c3:d2:00:a0:d9:3d:06:
                    dd:c0:12:ce:4f:e1:5c:db:c6:2d:d9:94:b2:14:55:
                    2d:08:30:92:78:23:86:20:e6:b6:1a:9c:9c:7c:3d:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:18:B7:FF:84:35:0F:14:A9:8F:B5:46:46:AD:83:09:D0:CB:A8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/W-kYt_-ENQ8UqY-1RkatgwnQy6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:95:4a:6e:99:5a:0f:82:ba:7a:07:ce:57:87:13:08:77:d5:
         30:10:69:6d:c0:13:6b:77:16:b9:99:6d:c5:08:22:0a:db:51:
         21:75:46:15:db:f0:51:86:9c:93:57:5e:ad:aa:d2:39:12:12:
         3f:a9:d3:25:40:77:7d:b5:ed:2f:8f:a8:76:a7:9c:7e:e9:74:
         03:ef:5c:8d:d8:d9:3c:65:fb:21:97:7b:ad:e7:da:25:f1:49:
         c3:7f:3b:b5:bc:ce:1f:97:fb:73:82:2b:84:12:13:23:c4:de:
         ce:65:4c:e7:bb:01:cf:73:d3:8e:d4:21:96:0d:e8:b0:f9:f1:
         6e:66:7e:78:1f:22:8a:88:ce:14:f6:71:2f:eb:89:ca:68:f0:
         7a:df:eb:71:65:10:1f:30:16:c3:19:58:c3:89:6f:4a:a5:3b:
         01:c2:b2:56:84:da:bb:0b:66:73:f1:33:c0:3b:50:fb:d0:46:
         13:3a:4e:d5:43:ad:a8:08:09:b5:bc:35:a5:75:6c:b9:e8:13:
         37:80:79:b8:f8:f2:a2:c8:12:df:a4:1c:03:f2:75:ea:19:ea:
         d1:ee:1f:ec:ea:8f:d4:55:47:d0:70:81:02:90:90:92:1d:8d:
         da:96:33:fc:7a:56:dc:eb:29:d6:e7:cf:85:3f:09:2a:f5:6a:
         f0:26:ac:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org