Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/YIiEnIBKaqvrD3UQp1yWsR_m44g.roa
File:                     YIiEnIBKaqvrD3UQp1yWsR_m44g.roa (raw, json)
Hash identifier:          HNsG7LuzIqw0qjgXElwXZgHTEntGl8pGI7pLytOZTa0=
Subject key identifier:   60:88:84:9C:80:4A:6A:AB:EB:0F:75:10:A7:5C:96:B1:1F:E6:E3:88
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       18
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/YIiEnIBKaqvrD3UQp1yWsR_m44g.roa
Signing time:             Mon 07 Nov 2022 05:32:55 +0000
ROA not before:           Mon 07 Nov 2022 05:32:55 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     146987
IP address blocks:        157.120.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Nov  7 05:32:55 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=6088849C804A6AABEB0F7510A75C96B11FE6E388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:fd:3e:cc:10:c7:dc:ee:10:9f:a0:7d:1c:
                    9b:f1:87:00:78:78:5f:52:60:06:e5:a0:4c:61:cd:
                    51:32:5a:ae:94:b5:ab:60:df:cb:6a:7b:d4:2f:33:
                    8c:ec:c7:39:d3:ac:15:7e:3f:0b:21:ec:4e:77:7f:
                    5a:7d:03:af:f8:ec:51:bd:9c:5d:db:d3:cf:8d:ca:
                    ba:e9:5d:c0:7c:10:10:0d:fc:f0:7b:64:cb:cc:58:
                    4d:3e:f6:37:97:a8:af:f4:30:63:be:6c:0f:84:32:
                    60:a0:a3:93:64:ae:32:88:83:6f:65:54:83:5e:38:
                    c1:ed:99:c8:2e:90:3a:7f:47:b2:06:6b:76:42:dc:
                    eb:38:cc:fd:76:0a:07:07:fa:c0:1b:35:0c:95:a6:
                    9e:af:1e:ab:ef:79:a9:f0:d3:2a:49:6c:b8:c9:44:
                    0d:9e:93:16:39:35:59:4f:6d:4f:a4:67:a7:79:88:
                    8c:8a:f0:87:51:cb:e9:dc:2a:d2:2e:fa:f2:4a:a4:
                    fc:52:b4:f6:c9:c9:ea:ba:43:b9:d8:3f:6d:24:a1:
                    e2:21:4b:ac:e7:df:cd:f0:cc:5d:cf:4a:78:a7:ac:
                    e1:e1:c8:c0:36:40:a6:20:f0:24:f1:71:47:27:20:
                    2d:15:00:de:66:ac:4d:fb:31:0a:77:29:a3:33:78:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:84:9C:80:4A:6A:AB:EB:0F:75:10:A7:5C:96:B1:1F:E6:E3:88
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/YIiEnIBKaqvrD3UQp1yWsR_m44g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:24:c4:6d:f0:af:e0:24:d6:72:2e:05:08:73:c2:af:01:df:
         70:c9:84:28:b7:55:26:3c:e1:88:ba:99:12:e2:43:0c:ca:82:
         63:df:4c:21:41:0a:b7:27:a4:e1:b3:7f:f7:4b:55:bb:4b:50:
         a9:95:2a:64:68:c6:b9:64:77:40:2e:d6:85:66:8c:88:47:de:
         67:cb:67:f7:2d:b8:fd:5a:aa:99:f9:05:3e:1b:7f:01:81:87:
         33:3b:3f:5c:fe:9d:dd:36:91:c5:36:20:e1:3a:d5:ca:0f:a2:
         bf:55:e4:ba:9a:61:9f:e3:5a:ec:e1:b6:09:73:6e:55:a1:19:
         ba:89:30:1f:8f:35:17:fa:da:a7:b0:6e:8d:16:63:b9:46:49:
         d5:f2:e5:6d:a7:bb:51:d2:c8:38:2e:d4:ab:64:d6:35:6f:2f:
         fc:69:54:8d:40:82:76:10:f8:9c:92:8d:ab:5a:a2:49:6c:22:
         86:7d:de:05:0b:fa:a6:b7:3b:49:3b:fe:ea:88:45:1b:d8:da:
         42:76:62:b6:8c:86:23:91:f6:90:65:48:6a:7a:b8:66:3c:b1:
         ef:bc:05:f0:c5:39:94:80:a4:c0:fe:be:e5:fb:84:37:d8:a2:
         3d:c3:21:61:9b:56:4f:66:36:2d:3d:de:70:0a:88:6b:e0:b1:
         c6:53:2e:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org