Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/isTKwldroraSx3TjgJevOe__S88.roa
File:                     isTKwldroraSx3TjgJevOe__S88.roa (raw, json)
Hash identifier:          nXw1FbzPDvAbs3h+6TKz4w2MTyijSXPLQA6zakU7INU=
Subject key identifier:   8A:C4:CA:C2:57:6B:A2:B6:92:C7:74:E3:80:97:AF:39:EF:FF:4B:CF
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       3D
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/isTKwldroraSx3TjgJevOe__S88.roa
Signing time:             Thu 01 Jun 2023 01:29:29 +0000
ROA not before:           Thu 01 Jun 2023 01:29:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jun  1 01:29:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8AC4CAC2576BA2B692C774E38097AF39EFFF4BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:67:c8:0c:60:a9:2f:25:b9:fe:50:ea:23:
                    fa:2c:8a:5c:b0:04:72:b4:7d:00:df:64:45:22:b1:
                    3e:98:43:9b:6b:a3:2d:09:a2:5b:30:26:a6:7a:37:
                    f0:12:4f:b5:ea:69:f9:1e:66:6d:73:72:ba:c5:ee:
                    25:71:26:6c:6c:5b:31:ae:59:7e:97:16:f1:5a:03:
                    0b:a4:94:fa:f5:2e:bd:55:72:03:a5:b5:bd:f4:09:
                    8c:f5:da:fc:8f:6b:4b:82:29:9f:bb:65:e1:e9:55:
                    ff:6b:ee:8c:89:2f:a1:2b:d7:e0:6e:5a:b6:91:69:
                    ee:a3:85:21:58:31:a8:70:32:06:36:d8:6b:a2:13:
                    d1:58:21:c0:1d:bd:1b:6b:45:3b:58:da:9c:4f:85:
                    2f:46:85:0b:36:a6:f1:84:71:ed:8f:8f:b8:df:18:
                    9e:db:37:8d:cf:5d:c7:c7:e2:07:cf:d4:2f:1d:f9:
                    38:b0:e9:dc:22:ac:91:26:c6:05:99:4b:98:10:28:
                    74:e7:53:4a:0a:61:7a:ae:12:2d:d3:3f:bc:92:e7:
                    be:e1:48:4f:ee:5b:62:6d:38:94:4c:d7:16:ae:b3:
                    a8:f1:dd:12:aa:ed:0a:30:9f:29:a3:a2:67:c6:bb:
                    bd:c3:c8:e6:f7:7f:21:96:03:35:d1:17:03:f5:7c:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:CA:C2:57:6B:A2:B6:92:C7:74:E3:80:97:AF:39:EF:FF:4B:CF
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/isTKwldroraSx3TjgJevOe__S88.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:ae:35:80:9e:05:e9:53:06:89:e3:e6:6f:9d:d9:c9:06:76:
         2f:f5:c7:ac:30:b4:ca:40:21:dd:6f:15:e1:98:c8:61:29:ef:
         d3:5d:80:07:64:89:5e:80:77:af:a9:40:d7:ab:9e:cb:5e:26:
         ad:aa:d2:aa:cd:47:cc:f7:54:f1:d4:74:44:01:de:98:1d:17:
         54:c5:62:0a:3a:0b:50:df:b5:e2:96:92:ea:cc:48:17:d3:b9:
         38:dc:79:84:d5:a3:af:79:d8:4a:cf:b0:6e:9b:36:35:db:35:
         69:27:9a:f3:74:20:b9:77:3c:2c:81:25:c8:9c:f4:aa:8f:35:
         b3:1d:be:0d:13:f2:96:53:f5:6b:46:12:16:d4:8a:27:ad:1f:
         ae:5d:6d:94:6b:bf:9d:94:b0:e6:c5:68:6b:66:11:43:33:fd:
         b1:3d:bc:1a:76:f0:0b:65:c6:d4:b3:fe:11:70:83:ea:ae:4f:
         cc:4c:55:a4:2d:85:f7:a0:9c:d3:80:51:b5:4e:59:3e:e7:63:
         ec:41:ec:57:c1:9e:ca:d6:64:b9:86:56:a5:ed:72:c7:0f:f6:
         76:86:1d:85:46:96:75:d6:ed:7d:e6:df:8b:22:3d:ad:b4:fe:
         e8:7a:c4:9d:58:0f:ca:e3:11:6c:21:51:e3:a0:f7:13:73:f9:
         84:4d:1c:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org