Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SBCjicbnsssefZSt3bYOL2qq8I.roa
File:                     1SBCjicbnsssefZSt3bYOL2qq8I.roa (raw, json)
Hash identifier:          IIFFBEsouUSF+SZNAazTH34qheZC3aITEz7hNK20C+U=
Subject key identifier:   D5:20:42:8E:27:1B:9E:CB:2C:79:F6:52:B7:76:D8:38:BD:AA:AB:C2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       84
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SBCjicbnsssefZSt3bYOL2qq8I.roa
Signing time:             Mon 24 Oct 2022 02:32:25 +0000
ROA not before:           Mon 24 Oct 2022 02:32:25 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        110.173.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:32:25 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D520428E271B9ECB2C79F652B776D838BDAAABC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:07:a8:32:58:f6:d8:87:1b:e2:d4:97:4a:
                    c9:ae:be:61:00:a1:cc:97:d1:9f:55:0f:3b:50:a3:
                    73:23:fc:d7:cc:13:de:66:24:ae:b4:62:1d:66:fb:
                    35:c3:a5:df:b7:5e:d6:ca:d5:f5:5d:33:4f:96:37:
                    01:97:90:b1:96:3a:a7:fd:64:eb:1d:e3:79:34:46:
                    ca:3a:0f:f0:ec:48:1f:2e:f4:ec:a5:c9:ef:3c:91:
                    6e:1d:77:92:47:79:56:85:14:c3:c6:48:3d:d2:80:
                    49:62:9e:5b:69:6b:70:79:ea:9e:f2:72:ad:db:36:
                    a5:80:ca:5a:79:13:a5:0a:73:4c:6c:5c:6e:d9:49:
                    27:71:c6:35:a8:4d:a8:e1:4e:af:80:e8:0c:18:59:
                    5c:b1:67:b7:93:e6:ae:6b:08:0a:54:ea:85:90:01:
                    da:46:41:67:28:05:e5:b2:b6:71:51:81:6a:77:78:
                    bd:06:19:f0:80:d6:a2:2a:cf:70:ba:b5:d8:e2:42:
                    22:3b:ea:b7:1a:d7:7f:2c:6f:e2:e2:26:56:79:a6:
                    c5:75:89:dd:05:c2:03:6a:7b:92:d2:d3:58:02:35:
                    78:74:90:ad:ed:59:57:e0:65:63:e7:62:79:0d:fd:
                    9d:44:25:fb:5e:02:fc:f7:cf:7e:51:9a:cc:01:a1:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:42:8E:27:1B:9E:CB:2C:79:F6:52:B7:76:D8:38:BD:AA:AB:C2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SBCjicbnsssefZSt3bYOL2qq8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:98:15:b9:77:65:55:b4:72:4a:42:68:9b:58:5f:01:cd:97:
         54:f4:f8:7a:db:88:9e:33:4f:44:58:f5:72:1e:3b:f2:78:86:
         20:e3:d9:0f:4f:79:fc:fc:ed:26:af:75:7d:a5:8e:57:e6:72:
         0c:8b:03:38:70:35:33:3d:ba:ca:c7:05:54:53:72:6b:6b:ae:
         d8:ef:9e:10:51:66:a1:b3:67:30:ce:e8:63:56:66:d4:9a:bf:
         2f:21:6a:84:36:7b:e1:93:d2:d8:f6:07:7d:f5:a0:f9:7e:83:
         9c:fd:58:a5:76:fb:10:ad:a9:b1:ac:f9:1d:5b:09:cb:1c:aa:
         a5:b6:9c:e8:26:55:59:69:d4:c1:ef:2b:25:5b:02:cc:31:ac:
         2a:b5:30:49:53:31:36:ee:c5:2b:35:54:01:b1:ce:01:3a:6b:
         fa:ee:1f:a3:1e:9d:fe:34:f1:fd:5e:5c:f7:27:67:c1:ab:8b:
         85:cf:a5:f5:86:be:12:c0:a2:c7:2d:65:30:bc:a4:4a:0f:50:
         30:e8:33:b7:2d:76:5c:56:3b:f3:dd:15:d1:fa:e2:c5:57:fd:
         e0:d0:e9:60:57:9a:a1:7c:b7:dc:a7:f7:4f:c2:bd:79:58:04:
         bf:7b:7e:dd:cf:08:72:f3:08:56:a0:b7:e6:8f:51:df:6c:d9:
         5a:06:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org