Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/x6jWLcZwuc4rgTmCYT0VUNGvMs8.roa
File:                     x6jWLcZwuc4rgTmCYT0VUNGvMs8.roa (raw, json)
Hash identifier:          Hfe+TubaUSLDu1C6+l4KxJZCjNqoN/LNh7jpe2k+1eA=
Subject key identifier:   C7:A8:D6:2D:C6:70:B9:CE:2B:81:39:82:61:3D:15:50:D1:AF:32:CF
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       61
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/x6jWLcZwuc4rgTmCYT0VUNGvMs8.roa
Signing time:             Mon 17 Oct 2022 02:21:59 +0000
ROA not before:           Mon 17 Oct 2022 02:21:59 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18136
IP address blocks:        219.105.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:21:59 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C7A8D62DC670B9CE2B813982613D1550D1AF32CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:a8:54:e8:3a:ea:0b:d7:61:1f:03:dc:89:
                    29:65:dc:00:e9:41:59:b5:21:79:10:04:da:6b:95:
                    cd:6c:2c:75:ea:ac:3d:f0:61:f9:26:7b:09:c6:64:
                    ae:bf:3d:5e:b8:5f:26:7e:41:f4:8d:81:9e:c6:23:
                    04:fe:46:32:32:29:c5:cf:4c:fe:0e:16:da:13:71:
                    c6:5c:44:df:1f:20:33:53:88:cc:96:7a:98:90:17:
                    a3:b3:ac:53:bc:16:f1:26:20:49:38:db:41:ea:42:
                    86:62:7c:b7:7c:56:bf:12:15:ac:66:0d:4a:88:a2:
                    88:10:90:9f:56:c8:3a:98:79:56:33:00:aa:24:cb:
                    ab:7e:d6:e7:6a:39:ba:98:df:5c:61:24:dc:d0:96:
                    23:19:59:0c:45:38:a4:7b:4e:e8:8e:f2:b8:7f:34:
                    e7:2e:8a:33:03:ef:73:7a:41:f4:87:2c:80:82:e2:
                    f1:f8:31:9f:b9:b6:1c:b6:1e:68:cb:1f:f2:80:fe:
                    e9:61:f5:d6:86:d6:c5:9a:7e:f6:f1:69:c2:82:10:
                    88:68:c1:49:62:18:c6:33:16:6a:cc:1a:b6:79:a6:
                    f9:c9:6c:ed:e8:fd:e2:ab:5f:b7:5b:d7:d5:26:e4:
                    79:b0:d0:4c:38:16:14:92:9a:c1:ff:01:e8:66:c9:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:D6:2D:C6:70:B9:CE:2B:81:39:82:61:3D:15:50:D1:AF:32:CF
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/x6jWLcZwuc4rgTmCYT0VUNGvMs8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:cc:5b:bc:bc:02:cc:99:2c:64:2e:c3:0e:e1:5e:e3:ec:
         05:59:fb:38:4b:0c:34:8f:54:98:65:88:85:05:fb:4a:26:8c:
         7c:4e:73:b9:7b:0c:a3:71:81:52:1a:ae:21:75:10:86:0a:3e:
         47:9f:68:e3:39:57:97:65:cd:b2:44:40:f3:f8:3c:98:8d:59:
         fb:85:d5:a6:f5:0f:b0:2e:e2:e3:6c:e7:63:1a:f3:40:31:7a:
         1f:48:aa:44:ac:b9:93:17:54:4c:3f:88:62:1e:ee:08:58:b4:
         0e:66:91:a5:43:01:2c:fa:d0:d5:32:a7:46:94:94:79:aa:9a:
         bb:89:b9:70:15:6a:a6:e5:f3:cd:52:cd:fa:1f:ee:74:3d:55:
         a6:40:3f:3c:55:bd:6b:8b:32:90:fa:9d:a9:f2:77:3e:95:ad:
         ba:67:94:dd:59:6a:6e:8e:7d:33:50:eb:3b:b2:39:6c:d8:9b:
         2e:a4:4c:dc:be:bc:8d:a5:af:5a:f1:45:0e:d5:ca:d2:41:cb:
         18:49:6a:54:63:33:ca:07:45:58:20:36:86:7f:c5:20:14:ac:
         8a:24:3f:48:c4:c0:6d:bb:ec:f3:48:4f:91:26:cd:d0:47:10:
         c7:c6:a7:be:8d:0e:2c:6a:b0:e5:47:66:e5:78:00:f6:fa:c2:
         53:54:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org