Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_f0q01-I-O8H3XXSksHNDO3nk7Q.roa
File:                     _f0q01-I-O8H3XXSksHNDO3nk7Q.roa (raw, json)
Hash identifier:          lYKa54KmhvxRzFBtcoCVqEUb4MWijKbcQFVWq+WUQv0=
Subject key identifier:   FD:FD:2A:D3:5F:88:F8:EF:07:DD:75:D2:92:C1:CD:0C:ED:E7:93:B4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       2B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_f0q01-I-O8H3XXSksHNDO3nk7Q.roa
Signing time:             Tue 11 Oct 2022 01:48:03 +0000
ROA not before:           Tue 11 Oct 2022 01:48:03 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     18134
IP address blocks:        203.217.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:48:03 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=FDFD2AD35F88F8EF07DD75D292C1CD0CEDE793B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:64:38:c1:ec:88:56:9d:dd:15:68:d6:72:
                    95:ea:ce:2c:f5:5b:2d:76:79:33:f8:f0:f4:2a:97:
                    cd:35:28:33:52:e2:44:4d:9c:c8:5d:c3:9e:c9:52:
                    7f:b3:55:21:5f:9a:42:0e:9e:93:42:34:d1:4b:85:
                    7c:1c:80:72:47:ba:1a:cf:ec:a8:04:e6:20:29:5d:
                    93:46:33:3a:46:30:8a:4b:67:ff:b2:05:52:dd:9f:
                    e4:ce:88:2d:7b:2a:76:73:27:74:0a:02:c7:9a:aa:
                    6a:2e:ae:40:26:db:b6:fb:80:0b:14:d2:bf:ec:77:
                    fa:ce:01:7a:81:28:57:3b:a4:e4:7e:1d:61:d8:13:
                    a7:c2:a9:74:98:91:ed:ee:cc:0a:86:9d:52:ab:01:
                    31:e4:a9:8f:2c:0e:45:08:7e:c6:e7:af:c8:78:b5:
                    33:e9:18:fd:b5:ec:bd:16:60:d7:0d:5b:c6:d8:4c:
                    3f:87:2c:a1:13:6c:45:35:ce:ae:32:37:ce:3a:fd:
                    53:c7:39:14:c4:60:d7:f3:34:f4:11:4c:f0:04:92:
                    78:b7:51:7a:15:ae:60:cb:e8:cd:d0:db:12:4f:56:
                    e0:1c:60:fc:58:81:0a:d7:01:73:48:38:5f:4b:6f:
                    c9:9d:c3:3e:49:6a:8d:17:7a:69:87:9c:5c:0f:e3:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FD:2A:D3:5F:88:F8:EF:07:DD:75:D2:92:C1:CD:0C:ED:E7:93:B4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_f0q01-I-O8H3XXSksHNDO3nk7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:b9:c0:b5:26:4f:de:a0:67:82:97:24:8f:41:95:0c:55:
         71:83:d0:17:61:45:fd:fc:ed:1a:41:f3:cd:7f:d5:1b:8c:02:
         59:28:9c:a3:d8:e0:ab:20:99:50:f5:3b:92:b4:21:63:33:3e:
         82:07:c9:9b:cd:3a:58:cb:fe:3d:b9:d2:18:35:6e:40:15:c5:
         82:fd:0b:23:9d:29:35:9c:88:ff:5c:19:e8:3a:3a:0d:a3:c4:
         80:3a:3e:a7:7c:f5:c5:04:d1:8f:24:39:17:b2:f0:00:72:33:
         91:5a:29:93:4e:b0:c4:2c:35:21:04:d4:75:b8:e6:c8:75:5e:
         9d:2a:93:e4:fb:d6:60:5f:be:05:5c:3c:47:11:df:0c:63:bb:
         19:be:0a:7f:45:bd:81:51:db:e3:b0:ee:50:93:1e:dd:a5:85:
         e1:ba:85:21:31:d0:f5:8e:44:0f:52:7e:c3:33:18:bb:41:06:
         13:3d:0f:80:a3:0a:fc:0e:29:6e:ee:9e:8f:44:2b:9f:ca:3f:
         da:2b:65:12:f0:48:27:ef:3d:1d:70:89:bf:13:ba:9f:81:71:
         9e:69:33:09:8f:22:b7:42:02:14:a0:54:5e:b4:e6:b3:f7:f8:
         02:73:9b:e5:ba:eb:9a:8e:3c:3c:bd:c7:cd:52:f8:2e:08:ff:
         0c:c8:bc:ef
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
NDgwM1oXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRkRGRDJBRDM1Rjg4RjhF
RjA3REQ3NUQyOTJDMUNEMENFREU3OTNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOOqZDjB7IhWnd0VaNZylerOLPVbLXZ5M/jw9CqXzTUoM1LiRE2c
yF3DnslSf7NVIV+aQg6ek0I00UuFfByAcke6Gs/sqATmICldk0YzOkYwiktn/7IF
Ut2f5M6ILXsqdnMndAoCx5qqai6uQCbbtvuACxTSv+x3+s4BeoEoVzuk5H4dYdgT
p8KpdJiR7e7MCoadUqsBMeSpjywORQh+xuevyHi1M+kY/bXsvRZg1w1bxthMP4cs
oRNsRTXOrjI3zjr9U8c5FMRg1/M09BFM8ASSeLdRehWuYMvozdDbEk9W4Bxg/FiB
CtcBc0g4X0tvyZ3DPklqjRd6aYecXA/jF0cCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT9/SrTX4j47wfdddKSwc0M7eeTtDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvX2YwcTAxLUktTzhIM1hYU2tzSE5ETzNuazdRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsvZtDANBgkqhkiG9w0BAQsFAAOCAQEAtZ65wLUmT96gZ4KXJI9BlQxVcYPQ
F2FF/fztGkHzzX/VG4wCWSico9jgqyCZUPU7krQhYzM+ggfJm806WMv+PbnSGDVu
QBXFgv0LI50pNZyI/1wZ6Do6DaPEgDo+p3z1xQTRjyQ5F7LwAHIzkVopk06wxCw1
IQTUdbjmyHVenSqT5PvWYF++BVw8RxHfDGO7Gb4Kf0W9gVHb47DuUJMe3aWF4bqF
ITHQ9Y5ED1J+wzMYu0EGEz0PgKMK/A4pbu6ej0Qrn8o/2itlEvBIJ+89HXCJvxO6
n4FxnmkzCY8it0ICFKBUXrTms/f4AnOb5brrmo48PL3HzVL4Lgj/DMi87w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org