Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/z6E2QOwYA0VfcL45-uDE6-IfWoo.roa
File:                     z6E2QOwYA0VfcL45-uDE6-IfWoo.roa (raw, json)
Hash identifier:          LYhSTKOZYzYgDhNS+4/+MbZOfMau4lICYK8G0Evn3P0=
Subject key identifier:   CF:A1:36:40:EC:18:03:45:5F:70:BE:39:FA:E0:C4:EB:E2:1F:5A:8A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z6E2QOwYA0VfcL45-uDE6-IfWoo.roa
Signing time:             Mon 31 Oct 2022 01:56:15 +0000
ROA not before:           Mon 31 Oct 2022 01:56:15 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        122.102.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:56:15 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CFA13640EC1803455F70BE39FAE0C4EBE21F5A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:31:a3:53:a1:ed:b4:55:5b:03:ef:f9:be:
                    e0:2d:78:ff:13:e1:d8:20:2a:48:2e:9e:26:54:7f:
                    11:47:41:80:3e:84:78:87:6e:08:96:fe:9f:4c:00:
                    fd:49:c9:a4:ea:35:b7:99:44:ab:bd:5d:98:6f:50:
                    1d:05:74:43:d0:5c:a7:61:cc:27:02:d5:ae:6e:f4:
                    3f:a3:22:08:a9:fd:9e:7f:0e:08:69:4a:20:66:f8:
                    d9:bb:fb:ac:40:d3:ba:95:9a:36:e3:4e:26:48:da:
                    69:97:98:50:c5:cf:e9:ac:dd:a4:43:3b:b2:42:4f:
                    76:15:63:02:72:d4:22:ca:5f:c9:84:aa:d7:39:0b:
                    8c:c9:d3:81:37:69:5c:85:a3:e2:94:a3:0a:13:af:
                    1d:15:dc:a1:69:2a:8e:a3:7f:f8:fc:de:5f:c7:f7:
                    89:72:49:66:38:80:38:f9:c9:7a:6f:aa:6c:a0:f2:
                    e5:ee:a5:25:97:97:17:d1:71:03:bf:df:34:8c:4a:
                    b3:20:68:5c:66:03:01:35:cb:3d:a4:c2:22:0c:5d:
                    35:57:ed:cf:ce:7f:58:69:b8:43:b8:a1:b8:8a:df:
                    e4:42:55:26:5b:b4:f4:44:82:ba:43:5e:df:22:2c:
                    81:77:5f:cf:74:a8:a2:a9:d3:a1:60:a5:8c:05:8c:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A1:36:40:EC:18:03:45:5F:70:BE:39:FA:E0:C4:EB:E2:1F:5A:8A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z6E2QOwYA0VfcL45-uDE6-IfWoo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.102.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c6:06:89:07:9c:99:14:2b:5b:15:54:b5:64:ae:4a:3e:18:d7:
         88:cd:3d:3d:e2:bb:d7:82:80:31:10:da:6a:77:8f:2f:0b:1e:
         58:6b:75:d7:e2:0a:e7:05:53:2a:e9:37:83:90:35:c0:8c:b9:
         a3:9a:b2:61:64:66:36:99:c0:e1:c0:04:87:59:d2:fc:62:ae:
         e9:7a:f2:f1:2d:e8:34:b8:c1:a1:14:b3:d2:ca:79:21:85:2a:
         f8:ce:69:6f:a2:f7:8e:39:a0:05:ac:5c:a4:5e:c3:4f:a5:7e:
         10:5b:4d:39:6f:9f:c7:88:d7:93:2d:6c:67:30:11:30:0c:16:
         83:76:13:ff:b7:47:d5:b7:f1:01:5f:cf:f0:b5:45:38:69:70:
         cc:fa:1d:ca:9d:0f:f4:d8:a9:f7:4e:4a:a8:5f:64:13:eb:59:
         e9:be:18:66:fc:c1:b3:59:99:5e:01:67:7a:f6:07:b2:ed:29:
         d7:23:df:96:51:69:0a:77:6d:13:7d:d8:2e:01:2b:81:24:34:
         2d:86:35:70:c0:c2:67:13:1d:ea:73:f3:a8:64:4e:74:0b:e1:
         32:d2:52:63:51:4e:44:c7:6d:e8:5a:54:df:e7:3c:56:2f:c9:
         f8:6d:c3:7c:67:be:2e:f3:92:a4:24:46:cf:6c:ba:5a:f4:e3:
         d0:17:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org