Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZcgjcposEVU_tGXxiKx7XgbmQAs.roa
File:                     ZcgjcposEVU_tGXxiKx7XgbmQAs.roa (raw, json)
Hash identifier:          NnJU3+6gE9OtLeeg6xq7i02X6GD/l5QNnuJQMhPC4w4=
Subject key identifier:   65:C8:23:72:9A:2C:11:55:3F:B4:65:F1:88:AC:7B:5E:06:E6:40:0B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       87
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZcgjcposEVU_tGXxiKx7XgbmQAs.roa
Signing time:             Mon 24 Oct 2022 02:36:44 +0000
ROA not before:           Mon 24 Oct 2022 02:36:44 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        112.137.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:36:44 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=65C823729A2C11553FB465F188AC7B5E06E6400B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:19:40:df:ed:a7:30:20:4a:04:b5:4e:a5:
                    fa:38:24:e7:fa:41:cd:df:02:a8:05:a9:52:9d:1a:
                    d9:4f:bf:f2:61:a1:68:f1:9a:44:56:dc:f3:ae:e6:
                    e3:0c:01:9c:7c:38:b5:7b:2f:d8:74:33:ad:df:ed:
                    08:c0:a8:4a:e1:e4:05:13:d3:fb:e2:ab:71:6f:2f:
                    c4:09:6b:80:ae:ee:e8:8e:1e:79:09:65:eb:ed:02:
                    6e:0d:22:af:24:9f:45:33:7a:2a:cf:d3:ee:1c:3a:
                    01:0b:17:f8:2c:4f:78:06:80:af:c0:09:8c:cc:09:
                    72:72:78:e4:41:f5:99:f4:af:72:07:20:a3:38:48:
                    36:4c:8b:25:ca:3f:e7:7d:9d:98:b8:9c:4a:c7:2d:
                    4e:97:f0:d9:25:72:2e:9e:53:3b:60:08:a8:41:01:
                    8a:4c:82:11:6c:ae:0a:86:ad:f9:61:2a:5f:35:86:
                    c1:65:d4:73:9e:3a:28:02:e6:31:1d:f7:f9:bc:de:
                    79:b9:74:3c:bb:b3:ab:16:48:96:bc:d8:6b:8c:bf:
                    4e:a6:33:f3:a2:e7:ea:54:71:b7:14:33:c7:d9:83:
                    e5:e8:a5:e2:ad:95:57:75:f0:72:46:24:70:d2:a2:
                    64:a3:aa:9a:0d:26:f5:71:61:dd:cf:68:e3:1e:9e:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C8:23:72:9A:2C:11:55:3F:B4:65:F1:88:AC:7B:5E:06:E6:40:0B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZcgjcposEVU_tGXxiKx7XgbmQAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:d0:79:9c:7e:f9:db:b7:bf:c6:c1:93:9f:1e:05:ce:cd:81:
         35:f8:3e:9f:ca:37:bb:f9:59:83:ac:c3:83:46:a1:d3:9c:59:
         ad:b6:08:5a:5d:db:c9:fd:e0:9a:1b:64:d5:53:0a:9f:00:96:
         db:1a:0f:4a:4d:0b:4c:29:29:d5:b4:34:e1:a2:3e:59:36:0c:
         4c:28:8d:58:c9:fa:43:92:c4:5a:e0:de:5b:2d:d6:bb:48:1c:
         18:ce:ed:45:a6:34:3d:fb:4d:1e:7b:03:0e:44:b5:88:b3:19:
         c2:13:6e:94:8f:5e:a6:17:74:04:8b:71:47:af:b3:9b:a9:80:
         20:b6:72:ba:c5:47:10:44:e5:1e:df:4e:32:d5:a1:d0:80:06:
         d2:03:28:3c:67:89:9f:d2:15:71:91:cf:1e:96:18:57:be:ea:
         6e:a7:18:ce:60:25:29:f9:5a:67:89:04:97:5f:27:6b:99:d1:
         2b:72:a1:aa:a5:22:a9:47:b9:99:67:01:4b:fd:2f:28:5a:b4:
         29:ce:a3:a6:a3:ff:ec:49:bb:c7:67:54:77:c6:52:c1:84:19:
         69:85:29:84:36:d2:65:ff:d1:d8:d6:17:1f:c9:2a:9d:99:f1:
         88:f6:24:54:65:29:40:f4:fa:c2:21:31:7b:2c:cb:ad:b9:a3:
         c6:c6:2f:58
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
MjM2NDRaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1QzgyMzcyOUEyQzEx
NTUzRkI0NjVGMTg4QUM3QjVFMDZFNjQwMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/YxlA3+2nMCBKBLVOpfo4JOf6Qc3fAqgFqVKdGtlPv/JhoWjx
mkRW3POu5uMMAZx8OLV7L9h0M63f7QjAqErh5AUT0/viq3FvL8QJa4Cu7uiOHnkJ
ZevtAm4NIq8kn0UzeirP0+4cOgELF/gsT3gGgK/ACYzMCXJyeORB9Zn0r3IHIKM4
SDZMiyXKP+d9nZi4nErHLU6X8Nklci6eUztgCKhBAYpMghFsrgqGrflhKl81hsFl
1HOeOigC5jEd9/m83nm5dDy7s6sWSJa82GuMv06mM/Oi5+pUcbcUM8fZg+XopeKt
lVd18HJGJHDSomSjqpoNJvVxYd3PaOMeng/RAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZcgjcposEVU/tGXxiKx7XgbmQAswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1pjZ2pjcG9zRVZVX3RHWHhpS3g3WGdibVFBcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARwiSAwDQYJKoZIhvcNAQELBQADggEBAI7QeZx++du3v8bBk58eBc7NgTX4
Pp/KN7v5WYOsw4NGodOcWa22CFpd28n94JobZNVTCp8AltsaD0pNC0wpKdW0NOGi
Plk2DEwojVjJ+kOSxFrg3lst1rtIHBjO7UWmND37TR57Aw5EtYizGcITbpSPXqYX
dASLcUevs5upgCC2crrFRxBE5R7fTjLVodCABtIDKDxniZ/SFXGRzx6WGFe+6m6n
GM5gJSn5WmeJBJdfJ2uZ0StyoaqlIqlHuZlnAUv9LyhatCnOo6aj/+xJu8dnVHfG
UsGEGWmFKYQ20mX/0djWFx/JKp2Z8Yj2JFRlKUD0+sIhMXssy625o8bGL1g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org