Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/f2BQzYqtWRNA0qg8issvncRczaw.roa
File:                     f2BQzYqtWRNA0qg8issvncRczaw.roa (raw, json)
Hash identifier:          ZaCsmZph2zJVWRH5Uji7cUPvGmMNlFayG4X3Y2SfKCY=
Subject key identifier:   7F:60:50:CD:8A:AD:59:13:40:D2:A8:3C:8A:CB:2F:9D:C4:5C:CD:AC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       4B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f2BQzYqtWRNA0qg8issvncRczaw.roa
Signing time:             Mon 17 Oct 2022 01:49:35 +0000
ROA not before:           Mon 17 Oct 2022 01:49:35 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.179.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:49:35 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7F6050CD8AAD591340D2A83C8ACB2F9DC45CCDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:9d:67:68:b1:56:22:9a:03:b4:7e:13:ea:
                    67:24:06:03:ba:c7:bb:17:f8:87:d9:97:b5:11:ea:
                    45:5c:5a:43:a0:32:01:38:f7:ac:ab:92:24:ad:ed:
                    6c:6a:dc:a5:6e:96:47:a8:9f:42:de:50:6c:b3:30:
                    24:0a:b9:41:4a:a3:dd:2c:11:d4:f4:73:44:d8:f2:
                    bb:f3:ba:02:f3:5f:54:5a:05:37:55:30:18:e9:1a:
                    1f:a3:c9:35:c8:22:12:73:4c:9a:84:d1:61:ab:5a:
                    a8:b9:e5:75:1d:3d:30:ee:32:75:ad:35:a7:a4:31:
                    d6:d9:f9:04:3a:04:38:6d:5f:fb:3e:3a:0d:d1:a6:
                    bb:44:5c:50:49:49:25:6f:57:c8:ec:ce:99:bc:e7:
                    0e:3a:e8:86:b4:36:aa:fb:26:dd:cf:e6:7d:d2:70:
                    dc:d3:a8:12:ff:a8:ef:f9:e8:cf:5e:75:f1:be:ea:
                    11:f9:4e:8c:67:28:8c:5d:a7:52:61:f5:59:a3:9d:
                    e3:1a:2f:c3:22:0e:bd:7a:48:66:6c:88:d7:c9:18:
                    d0:8d:ec:ca:5e:6e:7e:ca:4f:a4:77:95:15:9c:f7:
                    10:47:2c:80:09:c9:2a:3b:0a:6a:25:c1:0a:92:25:
                    17:4f:c7:52:cb:b9:b1:a2:44:57:14:c9:d0:23:6d:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:60:50:CD:8A:AD:59:13:40:D2:A8:3C:8A:CB:2F:9D:C4:5C:CD:AC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f2BQzYqtWRNA0qg8issvncRczaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:3d:f7:b5:a1:34:a1:8a:6d:b1:7c:0e:de:12:79:bc:26:ca:
         c6:be:32:91:3a:3a:e5:ea:34:87:04:5c:22:ea:ff:f0:73:fa:
         e1:ab:6f:59:8e:91:50:40:90:47:de:c1:a6:9e:17:8d:46:7d:
         b5:42:33:c8:65:7f:87:aa:16:ca:f1:08:2d:af:41:de:35:fc:
         cb:35:ff:07:5b:1a:62:8a:b6:9a:cb:d4:b1:6b:d9:2d:82:c1:
         ff:6d:63:35:82:53:25:67:02:e3:f7:db:95:53:9d:a1:73:a3:
         94:f1:8a:b6:fd:30:89:a9:f0:1e:46:5b:b5:83:2b:a9:dd:fb:
         6a:2b:2c:76:87:c1:c0:25:7f:56:dc:f9:a4:c1:cf:6d:c7:3d:
         58:97:58:e8:dd:a0:16:be:a0:d3:13:2c:f5:61:59:45:1c:f7:
         c4:0a:84:58:4d:67:a4:90:98:6b:34:bc:37:02:b5:0b:2c:f2:
         f4:95:06:4b:16:8c:02:e3:d5:19:63:45:ca:03:57:1e:ce:19:
         82:96:9c:0b:97:d9:95:82:7e:1d:15:9f:ac:4e:5f:7d:14:2b:
         29:cf:44:19:37:0e:4b:f0:5a:73:6c:9f:67:1e:e9:13:97:2a:
         68:de:6a:93:10:fa:6e:b9:35:e7:35:12:6f:af:a2:2a:c8:2b:
         67:1b:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org