Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/9_VDAxcKN1AA2TYQwLfXxzCFImY.roa
File:                     9_VDAxcKN1AA2TYQwLfXxzCFImY.roa (raw, json)
Hash identifier:          AQAWTUH5mR0qDLLkXa3cRGdtPmv6rk9HRA6Ebm5N5+E=
Subject key identifier:   F7:F5:43:03:17:0A:37:50:00:D9:36:10:C0:B7:D7:C7:30:85:22:66
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       2F
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/9_VDAxcKN1AA2TYQwLfXxzCFImY.roa
Signing time:             Mon 01 Aug 2022 01:28:41 +0000
ROA not before:           Mon 01 Aug 2022 01:28:41 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     0
IP address blocks:        157.17.128.0/17 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Aug  1 01:28:41 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=F7F54303170A375000D93610C0B7D7C730852266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:a1:8e:94:98:a1:33:86:47:6c:d4:d7:3e:
                    f0:e4:a8:7c:82:9a:d0:2c:e8:fa:80:45:f5:65:71:
                    4a:a0:17:d1:2e:9f:46:df:d6:69:70:6e:2f:4e:47:
                    a8:a2:f7:08:c0:5c:58:0b:c1:18:b7:49:1a:e0:9c:
                    0e:72:c9:08:ea:00:05:5a:21:3a:c9:b7:af:c6:59:
                    ee:ab:c0:df:c5:71:e4:32:df:92:70:10:f9:b5:87:
                    d4:26:8d:31:f6:72:82:21:8d:c1:7a:60:fb:ea:ba:
                    9b:38:a8:29:8f:c2:d4:14:34:33:e4:59:1f:4c:cc:
                    cf:df:f5:4b:ff:e4:e0:0f:32:4f:26:78:10:c9:b9:
                    ab:d1:1d:bb:f1:0b:fe:d9:f6:4d:69:f6:5e:42:a8:
                    b7:fe:47:2f:64:77:0e:df:a5:3c:1f:4d:a1:f7:ad:
                    cc:ca:38:52:dd:d0:2f:24:cd:cd:57:52:a5:cd:ce:
                    a7:44:73:4c:74:51:c2:1e:df:e0:9e:9c:02:90:59:
                    fa:17:b2:41:ec:59:01:4e:a2:8d:ba:54:fd:b5:ad:
                    59:b7:1d:3d:10:80:fe:79:00:03:6c:5c:82:3f:f7:
                    32:da:d3:37:56:29:0e:77:93:e3:69:5f:14:00:21:
                    ca:87:d4:0b:9e:e7:fe:96:89:1b:08:4a:61:cb:15:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:43:03:17:0A:37:50:00:D9:36:10:C0:B7:D7:C7:30:85:22:66
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/9_VDAxcKN1AA2TYQwLfXxzCFImY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:8e:94:ae:60:42:40:79:18:4b:c3:1c:b1:99:7c:9b:df:
         11:4f:5d:4b:9d:10:46:5d:43:29:f4:ea:06:95:02:d0:4d:83:
         ee:0a:24:7e:0e:a5:c5:f2:78:16:26:b7:7d:54:d0:e6:64:9d:
         0a:c3:0f:ec:54:a5:86:6f:79:f2:c9:97:31:5b:19:d8:27:9e:
         8e:e0:71:d4:84:4f:ae:93:82:88:cb:eb:86:13:15:1e:6d:f0:
         63:19:cb:a1:4e:ad:59:19:36:63:e2:d8:93:76:b4:3a:4c:40:
         03:21:8e:fd:0e:ed:09:02:93:f4:84:4d:8e:90:aa:8c:e2:45:
         21:9f:35:93:0d:99:cd:0c:16:d9:ca:b6:ed:cf:f6:e4:23:e4:
         14:3b:00:f9:f3:63:c8:5b:99:a9:b0:06:46:57:0d:15:b6:69:
         89:4c:a6:dc:ec:a4:2a:2e:5a:74:d7:5a:98:a7:f9:ff:80:73:
         98:4c:b5:46:48:cf:f3:63:0d:18:ae:19:8a:45:40:50:2d:1e:
         89:56:42:ca:d5:62:9b:48:5b:f9:17:ce:b1:97:f7:72:5f:87:
         af:60:e7:c5:a6:df:e7:d3:98:fb:bb:95:49:30:05:1a:5a:06:
         eb:ec:d6:d1:a5:ca:6b:c7:c4:4a:ba:3b:94:72:04:72:ca:26:
         5a:45:87:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org