Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/c99bTf1OP3GfAwh-PX6mck7TRFo.roa
File:                     c99bTf1OP3GfAwh-PX6mck7TRFo.roa (raw, json)
Hash identifier:          JRp7RzU0rzZ8b+9+prP0xOhZDRL9b0NvrvWYdVvWBS4=
Subject key identifier:   73:DF:5B:4D:FD:4E:3F:71:9F:03:08:7E:3D:7E:A6:72:4E:D3:44:5A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       8C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c99bTf1OP3GfAwh-PX6mck7TRFo.roa
Signing time:             Mon 24 Oct 2022 02:42:30 +0000
ROA not before:           Mon 24 Oct 2022 02:42:30 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        113.61.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:42:30 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=73DF5B4DFD4E3F719F03087E3D7EA6724ED3445A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:77:08:af:fc:52:02:a6:25:7a:ae:c9:29:
                    e3:fd:1d:03:bb:5e:86:22:4e:7c:39:59:8b:f0:d6:
                    a5:48:ca:c7:2a:7b:da:f0:db:03:03:bc:15:f9:c0:
                    9a:72:ed:d0:a8:12:75:96:a4:44:56:a7:30:3e:02:
                    88:bc:a2:11:a9:a1:14:49:d7:36:53:b4:74:82:dd:
                    77:6d:d8:c9:46:c5:5a:ff:c3:75:58:e9:c7:c8:a8:
                    a0:9f:fc:63:7c:84:d0:8a:bd:1e:23:2f:e0:65:a7:
                    1c:70:07:69:a9:e6:4d:b0:5e:2f:de:f5:03:b6:76:
                    ac:17:d0:7f:52:f3:33:1f:6b:66:02:78:56:1b:6a:
                    d3:ac:4b:a3:a6:5d:ae:fe:9f:b3:47:f9:b3:e5:e4:
                    67:da:27:bc:fc:7f:72:5f:d7:51:48:ee:a2:02:b2:
                    fa:f1:7d:1c:7a:13:dd:63:bf:a0:a0:57:85:2f:71:
                    16:31:77:8f:d1:33:45:ce:31:27:35:3d:b0:da:64:
                    5b:da:5d:99:97:f8:65:45:f6:62:7e:71:e2:95:7a:
                    b4:06:25:9d:7e:5a:8f:c0:9f:be:18:b1:c7:ef:42:
                    2a:8a:0d:9d:f0:22:3a:af:d5:b7:27:1e:17:2b:ac:
                    61:4e:d4:8a:ab:3c:18:4e:76:d4:89:e3:23:42:ff:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:5B:4D:FD:4E:3F:71:9F:03:08:7E:3D:7E:A6:72:4E:D3:44:5A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c99bTf1OP3GfAwh-PX6mck7TRFo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:31:5b:18:75:ec:64:8e:97:91:34:f3:70:fc:be:84:a3:1f:
         b1:1e:0f:ad:2a:81:9e:94:be:de:f1:d2:f8:bc:1b:cc:a8:e4:
         5b:57:11:f7:36:74:4e:cf:1c:13:19:ea:61:25:e3:f6:5c:b3:
         f1:ef:54:72:da:c3:d2:bd:49:fe:ac:e1:97:be:cc:ca:21:bd:
         62:dd:74:f3:67:d2:df:56:f8:7f:df:f2:32:b5:48:ee:0f:8a:
         3a:23:c4:54:fc:b5:bc:8b:49:8e:0c:a8:12:73:90:a6:0c:d9:
         32:19:8c:fd:6a:42:c2:92:95:f0:a1:40:d3:ae:ae:1e:a0:88:
         dd:be:ba:60:6a:29:17:2f:ec:98:90:ca:7a:2e:bd:c1:ca:90:
         76:d8:47:b0:20:30:1c:62:fd:60:57:f2:32:a0:57:fe:d5:ac:
         be:0a:5b:7c:ed:e5:32:90:fb:57:9c:8e:7c:07:9e:33:31:b8:
         be:9c:ba:85:fe:54:5f:33:97:0d:73:21:f9:c7:8f:94:25:bf:
         49:07:39:96:b4:a3:9e:96:b7:09:c5:c8:be:29:bc:8f:c8:60:
         6a:13:1c:13:05:f7:78:0d:ff:72:94:e6:a4:f7:ce:c5:24:37:
         35:da:43:90:9a:6e:9d:d5:82:ee:ae:bc:0e:c0:6d:b3:4a:6c:
         01:d9:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org