Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2787/gIb7LXJu1UXQpZ9cVsC-SZUaCwo.roa
File:                     gIb7LXJu1UXQpZ9cVsC-SZUaCwo.roa (raw, json)
Hash identifier:          yCN3/QMp33VIistceY2UmZngA84b7PqJd8EoQgODofA=
Subject key identifier:   80:86:FB:2D:72:6E:D5:45:D0:A5:9F:5C:56:C0:BE:49:95:1A:0B:0A
Certificate issuer:       /CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
Certificate serial:       2A
Authority key identifier: FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/gIb7LXJu1UXQpZ9cVsC-SZUaCwo.roa
Signing time:             Sun 01 May 2022 01:30:34 +0000
ROA not before:           Sun 01 May 2022 01:30:34 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59128
IP address blocks:        192.50.220.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
        Validity
            Not Before: May  1 01:30:34 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8086FB2D726ED545D0A59F5C56C0BE49951A0B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ae:bc:ff:bf:0a:58:83:28:91:39:85:72:f8:
                    14:df:66:91:9a:e9:cf:b5:23:90:10:dc:7f:0a:2f:
                    23:3b:67:40:c5:4d:a0:40:5a:1e:76:c3:c0:a8:67:
                    63:50:b4:99:0a:f9:51:36:9a:35:98:dd:b3:b9:78:
                    49:dc:b9:f2:e4:98:3f:4b:96:29:29:35:b8:1f:f6:
                    c1:22:94:27:00:91:57:94:0c:c3:b5:cb:82:57:55:
                    cb:47:36:88:7b:39:2a:e4:c0:02:fd:5d:f3:a4:6b:
                    96:a8:ef:f3:da:f6:d9:f5:5a:df:45:cb:f7:cb:99:
                    1a:ed:2f:49:7b:ad:55:6e:0c:3c:78:e5:b3:04:cd:
                    fb:18:a2:a2:67:5e:8d:74:01:71:16:83:9e:d5:f1:
                    4c:82:0e:a7:d7:d6:b7:76:24:95:cc:8c:c0:ac:77:
                    be:34:19:55:2e:cd:ec:2d:08:13:ba:a9:a3:52:96:
                    e0:3a:6a:fb:15:f2:06:b4:8a:25:82:e4:7d:b0:3d:
                    be:27:6d:7a:5e:4a:d9:fc:53:e1:9b:2e:27:48:9e:
                    e8:9a:58:db:63:e7:91:b1:5c:ed:f9:2e:98:7a:36:
                    db:a8:06:c6:75:52:1c:30:69:5f:67:5c:07:bb:06:
                    e7:e1:70:86:94:31:8a:95:d2:8a:af:87:42:88:8e:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:86:FB:2D:72:6E:D5:45:D0:A5:9F:5C:56:C0:BE:49:95:1A:0B:0A
            X509v3 Authority Key Identifier:
                keyid:FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/gIb7LXJu1UXQpZ9cVsC-SZUaCwo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6e:b7:32:cf:98:1a:56:18:c3:72:b8:d8:f2:35:01:37:ae:
         e5:3a:6d:e4:f5:3c:a0:25:21:36:53:c0:9e:fe:6e:54:65:2d:
         4d:79:2b:14:30:b4:3c:51:92:57:ce:48:9b:fd:62:58:e7:c2:
         db:ee:8f:4a:fd:78:2b:e7:01:91:65:87:f6:9e:e1:84:69:86:
         7f:09:e4:ec:80:17:30:1e:4c:5c:ae:d9:86:cd:ea:85:d7:0a:
         50:90:e4:49:40:e6:b7:37:68:7b:de:bb:c4:d6:38:ef:ef:f9:
         1e:49:fe:68:e8:d8:68:2b:a6:92:63:48:57:b2:78:0c:55:8a:
         88:d0:10:51:13:5b:0e:a4:c6:ce:f4:6d:d4:98:6a:e2:2d:b6:
         8a:61:6c:3d:a5:45:5c:3d:79:9e:8d:c7:6f:d9:50:40:2e:6a:
         9c:d9:20:33:2f:17:43:8f:8c:02:da:f1:f1:f3:2f:0e:30:a7:
         3b:e4:ba:1e:70:fe:f7:0a:b9:8b:71:5f:b7:8c:67:06:6c:bd:
         61:65:17:68:25:3b:bf:d5:d6:b9:4f:a7:40:86:8a:7b:1f:68:
         39:2a:89:a0:39:73:80:91:78:e6:01:70:98:68:31:12:aa:09:
         65:8e:5c:07:29:70:b9:a4:78:de:d7:16:b4:51:b2:05:78:62:
         58:e8:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org