Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/f-erOAGnd91711yN2xDifyrk7tU.roa
File:                     f-erOAGnd91711yN2xDifyrk7tU.roa (raw, json)
Hash identifier:          rdRTj9VViNY+mkxmgrkvYF1Tfet2lMYwqWJ5q6WL1cI=
Subject key identifier:   7F:E7:AB:38:01:A7:77:DD:7B:D7:5C:8D:DB:10:E2:7F:2A:E4:EE:D5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       CC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f-erOAGnd91711yN2xDifyrk7tU.roa
Signing time:             Mon 31 Oct 2022 01:43:50 +0000
ROA not before:           Mon 31 Oct 2022 01:43:50 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        61.46.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:43:50 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7FE7AB3801A777DD7BD75C8DDB10E27F2AE4EED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:bf:85:d5:0f:7c:59:8a:4b:44:6b:2e:ab:
                    2f:05:3a:42:cd:b4:3d:ea:36:6a:2c:b8:3f:26:82:
                    03:4f:df:79:28:b8:28:15:7f:47:30:3b:de:96:fa:
                    55:60:5f:05:ba:6d:02:cf:d3:ce:68:34:20:34:fb:
                    c9:59:6f:79:28:72:b3:cd:3d:03:2f:8f:5b:18:d6:
                    16:99:5f:ae:6b:69:5a:62:6e:22:38:d2:69:8e:ee:
                    bd:12:1c:e3:ef:c5:f3:79:1c:55:2f:f3:99:07:b9:
                    c5:8d:be:81:a1:74:b6:0f:3b:26:58:f2:ca:9f:a8:
                    46:01:a8:70:71:00:95:af:ff:62:55:07:e2:b5:45:
                    72:01:6b:d5:a9:98:e7:11:da:97:2e:78:ea:c1:d4:
                    09:25:4c:fa:6f:c7:90:85:93:be:e4:1d:51:74:a2:
                    b5:b9:a3:0d:5c:22:12:75:7f:e5:5a:f6:65:f0:8d:
                    a8:1a:55:37:98:8c:cf:70:24:db:c2:c0:e9:d9:cd:
                    97:d7:f7:45:1e:6e:28:b4:89:60:07:f7:6e:d4:6f:
                    7f:56:74:7a:3b:c0:e6:77:23:84:50:a9:c3:1a:2b:
                    02:93:c5:65:ad:98:d5:f0:bc:40:5a:5d:b1:d4:64:
                    f9:46:85:84:d8:36:db:bf:9d:cf:bd:9f:86:cc:21:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:AB:38:01:A7:77:DD:7B:D7:5C:8D:DB:10:E2:7F:2A:E4:EE:D5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f-erOAGnd91711yN2xDifyrk7tU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:8c:c5:77:9c:13:a6:7c:3c:3a:9e:c1:76:9f:fb:14:10:57:
         46:b6:a9:df:1c:bb:f5:5b:cc:6d:53:ce:43:e7:6b:48:08:06:
         b2:e8:8e:3d:de:23:7a:69:e7:5a:11:c5:f1:c1:61:3e:23:35:
         91:89:c9:5c:20:bf:d1:c9:f2:f2:88:39:4a:77:80:21:91:29:
         c7:ff:39:61:de:86:d9:19:f6:50:14:80:f7:0e:30:11:b2:57:
         1f:e0:20:02:40:34:82:14:6f:22:3d:6c:96:6d:cc:cb:f3:0c:
         62:cb:65:8b:07:d8:4c:51:da:4b:64:7c:db:4c:66:52:8d:95:
         f8:fb:3c:d0:8f:70:e6:a9:bd:f4:51:2a:72:92:13:dd:05:32:
         16:0b:f8:55:54:b2:5d:84:65:fa:ed:e0:c9:68:5c:9f:d8:92:
         13:ef:cd:2f:18:54:1c:09:a0:49:08:3d:c1:02:5b:d9:77:d5:
         78:f6:a8:6a:2a:99:e9:cf:2b:a7:bf:2a:2f:9c:d8:ec:37:a5:
         69:d3:45:02:56:7e:46:7a:c1:31:34:ec:e7:35:b0:58:5b:f7:
         cc:f6:1e:b3:e7:71:ec:ae:e3:a1:e9:ab:26:f3:be:bc:cd:22:
         e4:81:3c:73:8b:56:95:6d:6c:7d:dc:f3:a3:d8:25:ff:39:07:
         b7:bb:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org