Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/pF7XIQM0nbOFisYCskGlveGwSbA.roa
File:                     pF7XIQM0nbOFisYCskGlveGwSbA.roa (raw, json)
Hash identifier:          OYv1NAOoSa7bqghuInNDfTvfqcr6zQrYDVuIl5pahjM=
Subject key identifier:   A4:5E:D7:21:03:34:9D:B3:85:8A:C6:02:B2:41:A5:BD:E1:B0:49:B0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       CB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pF7XIQM0nbOFisYCskGlveGwSbA.roa
Signing time:             Mon 31 Oct 2022 01:42:09 +0000
ROA not before:           Mon 31 Oct 2022 01:42:09 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        61.46.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:42:09 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=A45ED72103349DB3858AC602B241A5BDE1B049B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:8c:7f:86:a8:de:a2:a4:70:08:65:fe:2f:
                    1b:c7:54:99:68:1f:0d:6f:ae:05:29:60:12:2a:5c:
                    59:89:24:79:08:87:fc:17:03:a3:87:8a:d7:5c:bd:
                    0b:f8:c4:98:0c:e2:19:27:e8:ee:69:af:4f:39:38:
                    c0:f9:84:f0:1a:db:cc:e9:10:d3:e7:62:c4:0b:04:
                    77:7e:68:7f:81:35:e4:ff:12:fc:85:d3:45:aa:61:
                    2a:50:09:76:26:e5:d2:30:62:f4:51:c4:4b:10:c7:
                    8f:c6:e8:ff:a3:e1:24:f6:9d:1c:4f:7c:0c:a0:f9:
                    16:b7:d1:bd:2b:78:c7:b7:ca:b4:ca:55:e3:41:4a:
                    f4:aa:b9:18:cc:6d:26:b0:f0:dc:ce:a6:26:e0:65:
                    ba:51:e8:98:5d:1f:c0:49:06:39:71:2f:23:19:9a:
                    c2:7b:14:41:3b:a0:62:97:fc:8f:38:7a:f3:72:76:
                    34:e7:db:f8:14:04:78:3c:7d:9f:98:5b:13:ae:2b:
                    06:7b:8a:bb:05:dc:7b:3f:12:83:f1:fd:8b:09:d1:
                    42:6c:b1:cd:7c:63:66:f2:2e:2f:92:dd:a2:30:a1:
                    a8:dc:78:34:a0:45:52:81:ef:fd:30:e4:92:52:01:
                    33:ac:75:52:a7:7c:0b:d6:7d:e4:80:ea:63:01:b9:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5E:D7:21:03:34:9D:B3:85:8A:C6:02:B2:41:A5:BD:E1:B0:49:B0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pF7XIQM0nbOFisYCskGlveGwSbA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:88:ed:8a:54:be:54:ee:12:d6:38:aa:03:8e:f4:40:c6:
         52:ca:94:2e:b0:11:fb:49:2e:92:29:3c:7b:8a:d9:60:9a:3a:
         d2:19:f5:8b:d6:61:6e:dc:3c:ce:5f:79:52:9f:4c:3d:87:14:
         ff:d5:c4:13:db:f8:e5:fc:96:e0:9b:bb:2e:a5:21:61:22:67:
         84:c4:47:13:36:7d:0e:81:6c:90:9d:71:82:73:35:06:8d:28:
         64:83:eb:16:bc:ca:44:ec:c4:87:10:08:69:04:0d:fe:8a:2f:
         df:4f:03:c2:f9:f9:5e:e7:d9:c6:7c:47:20:8e:69:6c:fd:79:
         25:c2:4a:4d:c7:9e:1f:bf:1b:2d:d7:9b:af:9a:66:3a:ba:74:
         39:60:6c:6d:f3:4b:fb:21:4c:92:1f:05:bc:4a:79:01:cb:bc:
         2f:f8:3a:04:cd:0a:8b:24:96:1c:18:f8:e8:b6:9e:e9:0a:23:
         8a:6b:78:e4:34:51:94:d8:da:7d:35:07:03:d2:99:d2:1f:24:
         d9:8d:c8:20:df:42:a1:11:c5:ab:60:72:fd:d1:79:a4:04:04:
         d6:fa:5f:96:ba:f5:9d:2e:1f:ea:fc:76:ad:dc:be:2a:c6:f6:
         1b:57:ce:77:ca:50:0e:99:ad:34:04:dd:bc:6f:34:e2:45:8d:
         60:93:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org