Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_K6rZWkgKpBzhK0DzSL2Nd3zFXg.roa
File:                     _K6rZWkgKpBzhK0DzSL2Nd3zFXg.roa (raw, json)
Hash identifier:          mQlW4KcfB24V+wvQ/D5O7vZfYj4i1EFFNcarbbfMIlo=
Subject key identifier:   FC:AE:AB:65:69:20:2A:90:73:84:AD:03:CD:22:F6:35:DD:F3:15:78
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       7A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_K6rZWkgKpBzhK0DzSL2Nd3zFXg.roa
Signing time:             Mon 24 Oct 2022 02:14:16 +0000
ROA not before:           Mon 24 Oct 2022 02:14:16 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        61.205.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:14:16 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=FCAEAB6569202A907384AD03CD22F635DDF31578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:cd:30:de:59:75:3e:22:02:2f:34:b1:a8:
                    86:cd:70:10:7f:2a:24:76:58:10:33:15:9f:3a:e9:
                    1f:6d:84:c4:27:80:23:10:54:fb:c4:ef:c3:e9:86:
                    01:fc:da:5c:fe:da:74:56:4c:1f:ba:63:ac:2a:66:
                    3c:54:7c:9e:9f:81:b5:79:44:7e:64:0e:6f:fb:fb:
                    35:62:29:c0:28:b5:a8:ea:f5:66:54:89:d3:a5:e1:
                    73:7f:71:ae:51:bb:f3:25:5e:76:e0:57:7c:de:47:
                    3e:0a:f8:52:e1:f8:21:2c:7f:eb:93:72:0c:c9:f9:
                    47:13:a3:02:d4:6a:4f:3d:15:11:02:22:19:1c:7f:
                    40:b2:53:78:15:17:7d:0f:9a:33:4a:6a:57:32:ac:
                    00:98:34:bf:29:5b:95:c7:87:ac:c7:d7:ec:f3:06:
                    f7:b1:d1:ca:a7:f1:5e:05:e0:3e:be:e6:4b:ac:33:
                    d3:c4:cd:f3:19:3c:ce:3b:63:a2:8b:44:f1:b6:73:
                    f7:e7:e9:5a:d2:4b:42:e5:70:19:0c:be:36:bb:e4:
                    05:ee:50:e5:88:ee:5a:dc:47:54:7d:8c:e8:66:0a:
                    76:c2:45:72:98:54:3b:ee:1b:cf:b5:81:bb:57:8e:
                    42:7f:45:47:41:21:ad:09:dc:49:a7:a8:9a:3a:da:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:AB:65:69:20:2A:90:73:84:AD:03:CD:22:F6:35:DD:F3:15:78
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_K6rZWkgKpBzhK0DzSL2Nd3zFXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c9:58:5e:79:aa:a9:29:fd:0b:ae:1a:e3:76:43:10:d6:59:5f:
         a0:f2:d1:c0:55:99:57:67:d9:ac:cd:5b:e2:00:81:89:bc:2c:
         26:64:bc:79:5f:d0:48:65:2f:c8:44:cd:46:3b:b7:c7:91:0d:
         d3:9f:a5:95:23:79:95:b0:59:df:fc:d0:8c:9b:2d:b3:a8:45:
         1e:b1:dc:4b:9b:9a:a4:15:4e:06:d0:36:9c:35:4f:f6:ec:d4:
         72:90:e0:aa:fa:f1:15:8d:b6:f4:43:46:e8:3c:52:ed:21:cd:
         42:f6:2d:cb:57:88:b8:09:de:f8:a1:f3:d2:94:6d:0b:0a:f3:
         6e:74:f0:80:e8:0d:d4:95:e4:f0:12:cc:44:8a:5b:87:77:95:
         ee:3f:f9:09:b9:df:43:2e:dc:7c:2d:0e:2c:9a:93:0a:70:0d:
         19:53:43:a0:b7:b4:44:fc:89:3b:7a:8e:fe:b5:69:fe:85:77:
         cb:ca:36:b2:32:d1:fb:63:b3:8b:62:f9:cd:dc:1e:4a:ce:45:
         d3:96:90:45:4a:85:1a:94:57:ea:37:72:07:de:79:11:91:72:
         09:ee:61:ca:52:4a:df:95:4a:1e:e8:ef:31:4c:57:c3:da:c0:
         4b:7f:c2:a9:04:8e:c1:0a:7a:06:2a:fb:12:0f:e4:35:5e:3a:
         7e:b8:a3:07
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAyNDAy
MTQxNloXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRkNBRUFCNjU2OTIwMkE5
MDczODRBRDAzQ0QyMkY2MzVEREYzMTU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMFvzTDeWXU+IgIvNLGohs1wEH8qJHZYEDMVnzrpH22ExCeAIxBU
+8Tvw+mGAfzaXP7adFZMH7pjrCpmPFR8np+BtXlEfmQOb/v7NWIpwCi1qOr1ZlSJ
06Xhc39xrlG78yVeduBXfN5HPgr4UuH4ISx/65NyDMn5RxOjAtRqTz0VEQIiGRx/
QLJTeBUXfQ+aM0pqVzKsAJg0vylblceHrMfX7PMG97HRyqfxXgXgPr7mS6wz08TN
8xk8zjtjootE8bZz9+fpWtJLQuVwGQy+NrvkBe5Q5YjuWtxHVH2M6GYKdsJFcphU
O+4bz7WBu1eOQn9FR0EhrQncSaeomjra0tsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT8rqtlaSAqkHOErQPNIvY13fMVeDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvX0s2clpXa2dLcEJ6aEswRHpTTDJOZDN6RlhnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBj3NgDANBgkqhkiG9w0BAQsFAAOCAQEAyVheeaqpKf0LrhrjdkMQ1llfoPLR
wFWZV2fZrM1b4gCBibwsJmS8eV/QSGUvyETNRju3x5EN05+llSN5lbBZ3/zQjJst
s6hFHrHcS5uapBVOBtA2nDVP9uzUcpDgqvrxFY229ENG6DxS7SHNQvYty1eIuAne
+KHz0pRtCwrzbnTwgOgN1JXk8BLMRIpbh3eV7j/5CbnfQy7cfC0OLJqTCnANGVND
oLe0RPyJO3qO/rVp/oV3y8o2sjLR+2Ozi2L5zdweSs5F05aQRUqFGpRX6jdyB955
EZFyCe5hylJK35VKHujvMUxXw9rAS3/CqQSOwQp6Bir7Eg/kNV46frijBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org