Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/z3qUPCJ0FAknwfiHcqp_4YaKRDg.roa
File:                     z3qUPCJ0FAknwfiHcqp_4YaKRDg.roa (raw, json)
Hash identifier:          6h3S1QXEY3Y+X2W07lun4ZH50RuTPM0pVk3hIAYIYEU=
Subject key identifier:   CF:7A:94:3C:22:74:14:09:27:C1:F8:87:72:AA:7F:E1:86:8A:44:38
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z3qUPCJ0FAknwfiHcqp_4YaKRDg.roa
Signing time:             Mon 31 Oct 2022 01:50:17 +0000
ROA not before:           Mon 31 Oct 2022 01:50:17 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        119.24.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:50:17 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CF7A943C2274140927C1F88772AA7FE1868A4438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:d3:6d:b4:ae:2d:87:5e:c3:1f:db:59:bf:
                    5d:6b:f8:19:c7:5a:8c:26:ae:43:84:40:f2:1f:9e:
                    99:d1:b9:7d:69:a7:03:ed:37:08:ac:36:c8:a5:e3:
                    00:64:0c:1b:46:e5:bc:73:f7:7c:f3:b9:98:b0:d6:
                    44:42:64:74:4c:d7:a0:7a:ad:de:1b:b4:10:92:3c:
                    a7:74:3f:bb:98:d5:66:e4:5f:09:ae:87:78:7b:37:
                    ce:3f:b3:9e:2f:4b:84:af:67:90:28:da:30:74:94:
                    6e:8b:3a:4a:f5:94:38:20:d5:4c:ff:23:0f:65:9f:
                    0a:ed:ed:8a:0f:f7:66:97:51:98:76:7c:0e:dd:d4:
                    83:9d:95:2e:2e:4b:5b:d8:47:9d:ea:74:22:1c:f2:
                    6d:c1:3f:69:1e:d0:17:14:7a:50:3a:1e:41:b2:b2:
                    c9:b4:66:ca:04:f8:0b:98:f1:14:20:a6:0d:39:5d:
                    c5:42:a0:e7:7f:98:f9:be:94:86:fd:ab:ca:9f:8c:
                    05:7a:35:b3:d0:46:29:f2:1d:dc:98:ca:f6:32:c4:
                    24:f4:dd:92:a8:32:a8:c2:31:6d:dc:37:f2:5d:a6:
                    88:e9:a8:7d:0d:f2:da:11:6b:79:56:88:98:72:6a:
                    c8:63:b5:85:fc:65:cf:4f:90:9a:e8:05:c9:f5:cc:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:94:3C:22:74:14:09:27:C1:F8:87:72:AA:7F:E1:86:8A:44:38
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z3qUPCJ0FAknwfiHcqp_4YaKRDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c7:49:74:3a:13:f0:54:12:58:04:62:9f:95:12:30:93:cd:72:
         58:50:73:20:d1:62:96:79:88:45:9b:19:f9:ef:df:9e:e1:cc:
         1c:e4:be:ea:13:af:f0:13:9e:63:42:62:b6:d9:1f:65:a5:9d:
         9a:6d:83:fd:ab:96:2b:8c:55:f8:8d:d2:89:0a:f7:0e:71:4b:
         81:4a:0a:56:19:7c:42:9e:17:55:f3:dc:b9:68:3b:2e:fa:c3:
         a2:aa:86:fd:32:d2:3b:42:fd:cf:3c:aa:fd:3f:15:40:0a:64:
         b8:e2:46:39:92:c7:fe:a8:7f:15:20:2e:a2:00:90:ae:8a:a5:
         49:63:b3:81:9c:cb:42:ee:6e:b7:d0:7e:7f:1a:57:58:d3:35:
         ce:c8:7b:02:e7:fa:08:f1:aa:e0:bc:46:3f:d4:35:62:a9:30:
         0a:00:21:24:2c:19:13:fc:d5:17:57:01:16:60:dc:a4:eb:36:
         b5:b7:4f:97:d5:3f:58:bf:77:4a:1e:c7:38:81:85:0f:93:11:
         1f:ac:f6:15:85:29:32:8a:b1:32:8c:c3:e7:94:87:d1:38:08:
         cd:0b:ab:22:c3:98:15:6c:c3:1c:8d:24:b3:f5:cb:03:3a:b4:
         ac:9f:93:7c:4c:f8:51:48:a6:8a:7c:3d:15:ba:b8:2b:6a:7d:
         66:43:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org