Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/_NuBAb2NyjSoS6CjQwEwzXzPKcw.roa
File:                     _NuBAb2NyjSoS6CjQwEwzXzPKcw.roa (raw, json)
Hash identifier:          6aKF1SvYoKHppcPerz3zDdX5ilB/NJxRoY/K/kXtP1c=
Subject key identifier:   FC:DB:81:01:BD:8D:CA:34:A8:4B:A0:A3:43:01:30:CD:7C:CF:29:CC
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       50
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/_NuBAb2NyjSoS6CjQwEwzXzPKcw.roa
Signing time:             Mon 01 May 2023 01:31:10 +0000
ROA not before:           Mon 01 May 2023 01:31:10 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     16625
IP address blocks:        115.69.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: May  1 01:31:10 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=FCDB8101BD8DCA34A84BA0A3430130CD7CCF29CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:32:a4:5f:a6:c3:cf:fa:ee:02:49:dd:09:83:
                    35:3a:f4:fc:ed:86:37:c6:ca:98:01:77:dd:c3:a1:
                    a4:11:1b:c0:e5:f5:9e:02:37:bd:bb:9d:0f:b2:ce:
                    84:f0:a4:9e:06:06:58:de:30:ba:4c:ff:a5:e5:70:
                    d0:dd:80:28:69:e1:e1:9d:01:99:f4:52:3c:be:33:
                    cd:4e:c1:d7:20:60:d8:e2:55:7b:29:a6:92:27:42:
                    28:3d:02:22:b4:2a:07:cb:c9:3e:5c:ea:c9:5f:6e:
                    50:97:1e:c5:9f:6a:76:2d:0b:d9:d0:00:24:c5:62:
                    29:9b:9c:e4:53:cb:2c:29:b9:17:d2:53:fd:e9:4d:
                    5f:8e:1f:77:fd:67:e2:7c:8b:27:6a:f1:d0:fb:c4:
                    30:4d:67:1a:27:80:55:f0:94:e5:4e:d5:dd:44:aa:
                    0a:40:5d:14:1a:51:cd:1d:e7:a6:b3:48:2e:5f:a0:
                    2a:24:62:90:22:15:e4:c8:8a:1b:18:6f:c6:5b:ff:
                    c9:be:a7:0b:da:80:fc:3f:ff:46:11:c0:50:0a:a8:
                    03:54:a2:9b:7d:f7:92:51:8b:f5:6b:f2:cb:02:fc:
                    8c:7e:87:c8:68:2d:f9:65:fa:59:5d:1a:0d:67:d4:
                    c0:28:07:94:fc:47:8c:33:c4:eb:77:89:db:37:22:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:81:01:BD:8D:CA:34:A8:4B:A0:A3:43:01:30:CD:7C:CF:29:CC
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/_NuBAb2NyjSoS6CjQwEwzXzPKcw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:50:82:5b:6e:0f:d8:5d:fb:a0:2d:bf:b3:0e:db:5e:5a:1f:
         c6:4b:55:5e:63:e1:2e:b0:fb:61:33:16:e3:e7:5a:01:45:09:
         d2:d3:f7:82:42:aa:00:fe:9c:b1:de:f0:a6:42:8f:db:88:7b:
         1b:b4:74:3d:63:14:83:bd:06:01:2e:a2:67:00:11:a4:6c:18:
         a8:ec:f7:5e:4a:4c:a5:bf:b4:b8:fe:df:a4:81:c7:a8:73:43:
         a3:0f:8d:83:a8:00:f2:0b:57:16:ec:8a:e1:af:68:59:e8:a2:
         25:7a:f7:dc:a9:ee:d2:86:3f:b7:5b:f0:17:92:9a:96:53:f6:
         95:bf:da:6c:54:b9:96:d1:75:95:f1:77:58:09:af:93:7e:42:
         9e:89:22:25:3a:82:cb:eb:a8:73:b1:b8:26:e0:52:54:1d:4d:
         9a:57:d7:fa:72:48:b5:47:3b:08:80:b0:a7:5b:bc:53:e5:10:
         6d:c1:70:86:3f:c1:ea:7b:a6:7c:6c:f7:4d:77:81:86:e2:14:
         88:28:67:2e:e6:f0:20:c3:0d:dd:10:74:3a:f5:9f:dd:08:24:
         19:78:1a:cc:27:1d:5d:cd:4d:5b:fd:87:e1:7c:bb:9a:28:1b:
         d7:b4:19:40:05:f2:89:57:81:31:52:22:71:43:71:d5:74:04:
         94:dd:90:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org