Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eRoh3WlM_FBMg7fOohg4FCtGOkI.roa
File:                     eRoh3WlM_FBMg7fOohg4FCtGOkI.roa (raw, json)
Hash identifier:          rB4CzVk21RAGu4ZMsWM6xRmO4/wqgNQiEPWUlGq90zo=
Subject key identifier:   79:1A:21:DD:69:4C:FC:50:4C:83:B7:CE:A2:18:38:14:2B:46:3A:42
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       34
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eRoh3WlM_FBMg7fOohg4FCtGOkI.roa
Signing time:             Tue 11 Oct 2022 02:00:21 +0000
ROA not before:           Tue 11 Oct 2022 02:00:21 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        219.111.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 02:00:21 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=791A21DD694CFC504C83B7CEA21838142B463A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:2a:27:69:23:c7:3e:bd:32:db:9b:27:b3:
                    d9:ab:c4:7e:41:47:f5:c3:95:b8:bc:9d:f6:a3:c5:
                    c1:f9:aa:59:db:14:3b:50:39:5d:9e:9e:12:97:89:
                    d7:2e:3d:47:8c:b9:8a:59:9f:ef:bb:2e:33:09:08:
                    e0:6e:17:0a:36:b4:db:f1:fe:8c:b5:d5:3e:57:ef:
                    4f:69:75:60:fc:0b:42:94:b3:90:12:44:83:f4:17:
                    e9:a6:dd:12:92:05:2b:bd:b2:91:cf:f6:65:64:b2:
                    05:e7:a8:9d:a9:62:f1:10:50:fe:9f:8c:34:05:4d:
                    9b:b6:ad:9a:81:1a:43:ec:5f:d0:41:b1:62:54:dc:
                    66:0a:03:bd:18:fb:3f:4a:f7:0d:49:79:41:14:be:
                    4e:52:95:d9:3e:a7:37:47:2d:a8:82:4f:c2:54:b9:
                    aa:01:fa:1b:1f:c3:b8:a3:21:b8:75:ef:5b:56:d8:
                    b2:d4:e0:71:dd:e8:25:18:ed:5e:0b:a0:3c:d6:2e:
                    08:04:5f:39:06:57:75:a8:93:dd:0e:74:19:64:b7:
                    51:62:12:f9:10:8a:b3:b3:6d:d3:98:f2:85:71:a4:
                    eb:aa:a6:e7:e3:cd:7b:db:89:37:54:4f:42:a1:3e:
                    f9:b0:7f:95:52:87:6f:e2:cb:96:45:5c:d6:5b:77:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1A:21:DD:69:4C:FC:50:4C:83:B7:CE:A2:18:38:14:2B:46:3A:42
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eRoh3WlM_FBMg7fOohg4FCtGOkI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:7f:42:e1:13:78:fe:e6:cc:ee:a4:92:0e:3f:38:e1:36:ee:
         cf:e8:aa:f4:3f:fc:c6:f6:f8:30:6c:a5:9f:1f:28:61:22:0c:
         47:a6:cb:09:3e:b3:a6:13:bd:05:15:6e:21:62:83:73:0d:5a:
         5b:67:89:4e:63:f2:a4:d8:2e:85:74:93:d6:3c:76:cc:1b:72:
         aa:f4:c6:96:e7:28:f6:81:8b:13:27:b1:4c:de:e7:33:d8:d1:
         e8:6f:45:99:28:a7:ce:3a:33:17:62:ec:e2:09:12:f6:6b:54:
         aa:56:ad:fb:6f:c5:af:3b:00:82:10:63:f5:ab:2a:4c:4d:32:
         9a:71:21:6a:57:d8:c2:0c:13:ec:eb:5d:b5:b7:31:07:5b:58:
         a5:7d:e4:0e:4f:81:7f:7f:3d:cd:ea:fa:84:fa:15:f7:37:17:
         c4:99:82:14:f0:05:d5:d4:ab:57:44:e9:43:34:e1:ff:5d:b1:
         48:9e:01:e5:44:6e:61:55:6b:90:89:15:6a:b2:d3:34:ea:d2:
         36:8e:a4:79:0e:b6:4f:38:d8:dd:ea:25:f8:e4:74:c8:27:5a:
         f3:2a:17:c2:d9:46:45:01:81:ae:0c:a9:ec:60:62:e8:54:f6:
         2f:32:3a:84:06:90:3a:ca:d7:5d:fc:58:b2:4c:76:96:ef:61:
         38:cd:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org