Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zF2m8VwjLUq2GnbWMkfocFVbJXg.roa
File:                     zF2m8VwjLUq2GnbWMkfocFVbJXg.roa (raw, json)
Hash identifier:          BtFDoSZ6W8Rk212j2mw/FQCIVpi5+bDVQad4Eh69ZzU=
Subject key identifier:   CC:5D:A6:F1:5C:23:2D:4A:B6:1A:76:D6:32:47:E8:70:55:5B:25:78
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       F8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zF2m8VwjLUq2GnbWMkfocFVbJXg.roa
Signing time:             Thu 24 Nov 2022 01:05:31 +0000
ROA not before:           Thu 24 Nov 2022 01:05:31 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        61.206.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov 24 01:05:31 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=CC5DA6F15C232D4AB61A76D63247E870555B2578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:ce:3c:9a:ef:52:09:70:c3:7d:85:d1:1b:
                    e5:20:8f:ec:30:64:fd:a8:4b:68:f2:1b:2b:93:2c:
                    b8:8a:9d:4c:2f:ba:cc:b1:2b:80:8c:70:a7:c2:75:
                    9f:44:cf:ef:8e:33:ff:fe:c5:21:97:96:d4:74:c7:
                    ed:c3:d3:fa:e2:f6:77:97:47:7d:74:0a:59:66:bd:
                    2d:6c:34:d3:f9:1b:58:8b:6f:92:d0:19:dd:02:d0:
                    56:cc:28:b4:48:cb:15:8e:98:35:a7:10:49:44:33:
                    46:24:88:ec:7d:a5:8b:14:28:3a:f0:90:84:fd:ec:
                    1c:1e:e6:e4:38:ff:9a:b5:47:8c:95:9c:95:a5:bf:
                    42:8c:a3:ad:90:17:99:c1:66:2b:76:36:3e:9d:29:
                    01:38:ef:51:4a:cd:bd:84:d7:a4:bf:b9:26:1a:89:
                    53:a5:0c:86:38:0c:b0:55:10:79:3d:1f:a1:37:51:
                    bb:b8:5e:91:be:72:92:52:ac:e4:21:14:af:5a:4f:
                    86:44:4a:4e:26:1f:0f:cb:ed:a8:65:1c:8e:89:9e:
                    5f:9c:25:9c:9a:70:ca:48:32:b0:5a:38:42:41:33:
                    97:aa:36:cd:0a:d4:29:06:fd:d8:1b:5f:db:56:91:
                    08:24:3a:c9:e2:97:d0:99:87:bb:1b:c4:95:a9:15:
                    6a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:A6:F1:5C:23:2D:4A:B6:1A:76:D6:32:47:E8:70:55:5B:25:78
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zF2m8VwjLUq2GnbWMkfocFVbJXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:78:c3:37:78:65:72:2e:95:0e:91:e8:b3:3e:ae:8c:8a:
         c5:76:ab:7a:3f:36:f2:3e:3b:48:9d:98:1f:ed:66:6c:7b:db:
         c0:a8:90:49:30:33:36:d3:76:ee:00:7e:8d:dc:1b:3f:96:57:
         01:f6:2e:53:cd:f5:b2:fa:73:55:1f:64:f1:db:b3:98:92:3b:
         f3:a0:9c:fe:78:64:df:84:2c:05:d4:ce:c3:70:4d:89:14:3f:
         e7:cd:a8:ce:9c:1f:1d:f5:7c:ed:84:10:d3:15:cd:49:da:4f:
         91:8b:7c:2a:63:ec:75:fb:7f:4e:67:67:46:4e:89:59:3f:df:
         00:80:80:d0:4a:98:0f:11:04:6e:91:09:71:ec:90:70:35:2a:
         0b:4d:33:26:bd:8a:09:3e:07:38:12:56:c1:4e:36:db:6e:c0:
         e6:16:5a:2d:4e:e0:6f:3b:0f:5c:73:a0:eb:8a:fe:e6:2a:0c:
         57:c5:7b:97:1e:25:3f:b0:de:00:74:45:8d:50:bd:09:69:d0:
         bc:61:47:df:74:b0:1b:2e:77:57:00:5e:c4:2b:39:15:13:3c:
         9c:c9:a9:fe:7c:94:03:d0:a8:59:25:1a:75:e3:b0:95:d4:7a:
         02:b3:2c:8b:73:7e:da:8d:57:75:98:c0:be:a1:e3:f4:5d:66:
         7c:f2:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org