Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/X17iWCtNKlT59gv1QcNfsk0PqSc.roa
File:                     X17iWCtNKlT59gv1QcNfsk0PqSc.roa (raw, json)
Hash identifier:          lJqbEJfNgnHU1EVK0WjHd3rhBCbE4PDXuLZ7jYA1zuk=
Subject key identifier:   5F:5E:E2:58:2B:4D:2A:54:F9:F6:0B:F5:41:C3:5F:B2:4D:0F:A9:27
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       DE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/X17iWCtNKlT59gv1QcNfsk0PqSc.roa
Signing time:             Mon 31 Oct 2022 02:08:17 +0000
ROA not before:           Mon 31 Oct 2022 02:08:17 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        211.124.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:08:17 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5F5EE2582B4D2A54F9F60BF541C35FB24D0FA927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:04:6d:a7:5a:e6:cc:7e:a9:02:78:cb:89:
                    13:d2:08:d6:fa:8f:c3:59:fa:80:62:53:63:90:ea:
                    0a:35:4b:75:87:87:c3:e2:75:2e:f7:63:a1:2d:ff:
                    9f:50:7d:8d:0e:78:b0:00:a6:c0:9e:f3:e2:f0:73:
                    9b:6e:02:9c:10:e3:71:ee:5d:23:9e:b1:ef:b3:34:
                    6a:de:cd:2a:f2:f4:64:1c:47:60:fe:47:ca:d2:e9:
                    22:d7:fc:1f:e9:13:40:d0:b4:24:89:f0:9d:6d:80:
                    97:e3:19:a8:cf:75:63:0c:36:1d:9f:f2:b1:de:45:
                    1d:b5:51:63:9d:8b:2c:80:fc:5f:0d:02:e3:6b:4c:
                    34:50:a3:7c:df:d8:68:6b:49:73:a1:ea:ce:e6:0e:
                    80:4d:70:3e:b0:2d:22:19:06:02:db:d4:df:c8:f0:
                    ec:27:8e:b8:4a:71:11:15:ed:5b:96:47:84:0c:8b:
                    a7:ba:2e:aa:1e:a4:e6:da:ed:7e:cb:03:07:32:c8:
                    6b:42:1b:0c:ab:e1:03:9b:11:25:32:c9:77:11:a0:
                    49:6e:47:1a:d9:ae:fa:0e:8e:93:b7:4f:e9:06:4a:
                    94:7d:e3:30:76:ff:cf:94:52:4a:fe:9c:f0:cf:c3:
                    69:20:a6:9b:95:aa:d7:42:fd:35:58:00:bb:60:9a:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:E2:58:2B:4D:2A:54:F9:F6:0B:F5:41:C3:5F:B2:4D:0F:A9:27
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/X17iWCtNKlT59gv1QcNfsk0PqSc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:3b:13:93:93:6b:44:74:80:dc:6e:c5:e2:e4:77:c7:ce:
         94:d7:fb:2a:84:b3:76:a4:8d:55:80:a3:a6:59:76:4d:fe:78:
         1c:74:ed:14:b4:9f:ea:ac:61:64:da:45:15:aa:78:4f:f9:60:
         8b:8d:d0:74:cd:12:35:2a:48:f4:b8:05:57:b2:12:0b:a2:ef:
         83:cc:9b:bb:d1:17:68:bd:76:82:8a:d4:22:a7:42:de:a2:4d:
         fa:66:67:7c:84:c2:32:50:a4:6b:25:73:07:54:1d:20:22:ea:
         a4:6e:05:30:47:b4:c1:99:d0:fc:df:86:2d:b9:54:c8:43:59:
         18:d1:f5:4e:c0:aa:6b:10:20:71:8e:67:c1:75:80:71:11:cd:
         a9:94:1b:80:bd:b8:a6:5f:4e:75:d7:3c:c4:7e:87:3c:e6:fb:
         5a:76:90:f2:32:b9:be:b4:e1:c8:55:fd:d2:ff:08:67:67:6e:
         d1:aa:89:22:c0:44:0b:fe:a9:2d:06:a4:8d:41:9d:b2:86:8f:
         81:60:f9:85:d9:e2:84:63:53:88:00:4b:dd:ff:4e:c8:51:85:
         5e:7e:5e:41:4b:75:b5:da:3f:2a:77:e9:9b:7d:f2:94:14:c1:
         53:ba:1e:cb:9d:0a:0b:8b:c3:c4:77:0e:27:d7:0c:83:01:98:
         f2:33:89:6f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMzEw
MjA4MTdaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVGNUVFMjU4MkI0RDJB
NTRGOUY2MEJGNTQxQzM1RkIyNEQwRkE5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw9wRtp1rmzH6pAnjLiRPSCNb6j8NZ+oBiU2OQ6go1S3WHh8Pi
dS73Y6Et/59QfY0OeLAApsCe8+Lwc5tuApwQ43HuXSOese+zNGrezSry9GQcR2D+
R8rS6SLX/B/pE0DQtCSJ8J1tgJfjGajPdWMMNh2f8rHeRR21UWOdiyyA/F8NAuNr
TDRQo3zf2GhrSXOh6s7mDoBNcD6wLSIZBgLb1N/I8OwnjrhKcREV7VuWR4QMi6e6
LqoepOba7X7LAwcyyGtCGwyr4QObESUyyXcRoEluRxrZrvoOjpO3T+kGSpR94zB2
/8+UUkr+nPDPw2kgppuVqtdC/TVYALtgmk8LAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUX17iWCtNKlT59gv1QcNfsk0PqScwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1gxN2lXQ3ROS2xUNTlndjFRY05mc2swUHFTYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDTfDANBgkqhkiG9w0BAQsFAAOCAQEAHTY7E5OTa0R0gNxuxeLkd8fOlNf7
KoSzdqSNVYCjpll2Tf54HHTtFLSf6qxhZNpFFap4T/lgi43QdM0SNSpI9LgFV7IS
C6Lvg8ybu9EXaL12gorUIqdC3qJN+mZnfITCMlCkayVzB1QdICLqpG4FMEe0wZnQ
/N+GLblUyENZGNH1TsCqaxAgcY5nwXWAcRHNqZQbgL24pl9Oddc8xH6HPOb7WnaQ
8jK5vrThyFX90v8IZ2du0aqJIsBEC/6pLQakjUGdsoaPgWD5hdnihGNTiABL3f9O
yFGFXn5eQUt1tdo/Knfpm33ylBTBU7oey50KC4vDxHcOJ9cMgwGY8jOJbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org