Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FNYZ5pVs1NniYuM1shRw93Hr7uY.roa
File:                     FNYZ5pVs1NniYuM1shRw93Hr7uY.roa (raw, json)
Hash identifier:          m79i6MGbBfUS7fLE409hDsPMJM4RqQkHeZ72r7YHJVM=
Subject key identifier:   14:D6:19:E6:95:6C:D4:D9:E2:62:E3:35:B2:14:70:F7:71:EB:EE:E6
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0115
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FNYZ5pVs1NniYuM1shRw93Hr7uY.roa
Signing time:             Sat 01 Jan 2022 01:31:22 +0000
ROA not before:           Sat 01 Jan 2022 01:31:22 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        110.74.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:22 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=14D619E6956CD4D9E262E335B21470F771EBEEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:7d:8c:5f:fd:bf:ce:2e:a4:dd:ee:e7:aa:
                    0d:fa:38:e2:44:8f:f4:2b:fd:ab:5e:02:27:d1:6f:
                    65:cb:c0:2f:2e:1d:f5:72:70:73:2b:67:cf:f9:4a:
                    3d:52:05:80:a9:c5:5b:c1:7e:9b:01:72:1a:5a:fe:
                    f0:be:57:f0:13:9b:d6:9e:e3:44:73:4d:b9:cd:ef:
                    0b:b7:eb:e6:51:4b:59:22:86:e4:a2:a6:d8:b1:74:
                    3e:16:b2:38:32:fc:c3:63:50:81:4e:0d:ac:ee:aa:
                    e7:e0:80:06:ae:39:09:98:d7:39:1b:c5:f8:6b:55:
                    4b:44:37:3e:d1:e0:a9:72:3e:eb:f3:0a:2c:a4:46:
                    cf:ef:6e:0e:1f:94:de:2f:40:e4:67:09:d3:4a:00:
                    f8:93:82:82:82:d5:af:f6:06:48:a3:67:e0:f7:2e:
                    9b:63:6f:38:92:46:a9:9c:83:d8:6f:f7:21:14:be:
                    1e:a3:39:b9:3d:e6:f9:46:d1:8f:67:f3:26:46:00:
                    08:f2:74:d5:61:0a:49:ff:a8:21:75:d9:50:e1:58:
                    c3:61:cd:4e:42:5f:36:24:50:3c:b9:43:dd:dd:cd:
                    57:50:08:0e:ed:d5:4f:ad:4b:b5:24:13:13:38:36:
                    3e:3f:4d:a6:1c:55:71:50:f0:a5:67:7b:c3:22:d7:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D6:19:E6:95:6C:D4:D9:E2:62:E3:35:B2:14:70:F7:71:EB:EE:E6
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FNYZ5pVs1NniYuM1shRw93Hr7uY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:d4:e6:42:7b:55:6d:25:fb:70:00:71:ba:bf:68:87:2e:65:
         f2:f9:22:91:fb:21:b2:34:44:4d:ec:cb:c8:59:aa:87:5e:c9:
         bd:39:00:3c:75:f2:1d:a3:09:63:0c:62:a0:a9:2c:a0:a2:60:
         a7:bb:d3:04:d5:d8:1a:1f:b7:82:e5:70:cd:85:fe:0d:72:cd:
         99:0a:fb:ce:8f:16:57:ac:17:5d:c4:e8:25:8b:b3:bc:d2:e6:
         92:98:80:79:f2:2d:72:8a:ae:c0:a1:34:73:bc:02:1c:ab:3e:
         06:cf:3a:fa:fb:01:ed:b9:86:ff:38:7c:b1:f3:74:78:92:31:
         fe:9b:41:42:9e:c1:a7:99:f7:cf:18:cc:04:87:cc:4b:26:73:
         01:56:97:9a:68:57:f7:37:bd:60:a3:ac:bd:af:57:36:d1:55:
         08:89:ff:3a:08:4c:de:7e:14:1d:41:67:ec:db:88:ee:33:ec:
         47:4e:25:d3:de:b5:4c:af:f9:a8:ae:82:94:a2:ff:10:f8:38:
         d8:f7:d3:38:44:ea:96:e3:94:82:fe:f4:42:da:25:f8:2b:6c:
         68:8e:79:41:5c:2f:0e:6c:8b:23:88:ac:95:12:f1:2e:eb:23:
         83:72:54:6c:64:c9:84:3f:ae:66:2b:32:4a:85:d4:f0:04:12:
         6c:88:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org