Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1W_URuNmME_tosVsmdLCkgSP7wA.roa
File:                     1W_URuNmME_tosVsmdLCkgSP7wA.roa (raw, json)
Hash identifier:          hqwHFsmsswkEQikd7CuxNCSO9vhE+cG/eJhHh+DDqi8=
Subject key identifier:   D5:6F:D4:46:E3:66:30:4F:ED:A2:C5:6C:99:D2:C2:92:04:8F:EF:00
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       E2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1W_URuNmME_tosVsmdLCkgSP7wA.roa
Signing time:             Mon 31 Oct 2022 02:13:58 +0000
ROA not before:           Mon 31 Oct 2022 02:13:58 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        218.220.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:13:58 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D56FD446E366304FEDA2C56C99D2C292048FEF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:cd:e0:81:e4:88:8b:83:9f:23:94:51:63:
                    37:74:b3:47:29:71:0a:ea:57:ae:78:ac:a9:22:0e:
                    c6:fc:e8:02:03:06:c3:8e:3d:55:d4:f2:db:cc:db:
                    df:77:1a:a3:93:f8:51:14:4e:95:f6:5b:78:dc:62:
                    29:12:ed:b0:aa:72:ef:f4:11:aa:f1:d4:f9:0e:e8:
                    97:fa:04:c4:28:d9:8f:d8:8c:af:8f:a1:1e:de:9f:
                    10:a9:22:bd:01:bd:6b:7c:b8:ce:fe:a2:3e:36:e7:
                    3b:f5:c1:45:10:9a:1a:d1:44:de:c1:6f:04:63:cc:
                    56:f2:a6:bb:b5:4e:d2:73:b0:8b:2f:66:1e:80:8d:
                    b7:4c:e4:44:13:3b:ca:14:fa:c6:8b:45:eb:98:31:
                    65:4c:dd:4b:e7:4c:26:ca:e3:10:f7:8f:6f:bc:9d:
                    a7:43:19:c1:f4:40:ef:51:57:06:a0:b5:73:3a:8b:
                    66:68:a3:d6:49:55:7a:8b:27:a5:d4:4a:a5:86:d6:
                    19:0d:6d:98:47:d7:83:4a:de:3a:d9:41:e9:c6:fb:
                    d5:55:78:df:2e:95:58:a5:f2:60:2c:05:b4:35:fa:
                    e9:d1:6e:15:d2:67:ea:6f:c5:0d:32:e9:1d:8a:d6:
                    28:77:2f:eb:af:29:10:ec:bf:d3:99:a6:15:66:ec:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6F:D4:46:E3:66:30:4F:ED:A2:C5:6C:99:D2:C2:92:04:8F:EF:00
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1W_URuNmME_tosVsmdLCkgSP7wA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:74:87:91:fe:5e:6e:0c:62:8f:15:0b:e4:90:09:22:3c:f7:
         b5:2e:38:ba:98:b7:1f:17:29:3d:f0:92:df:7b:83:7e:d9:ed:
         0e:1f:d8:66:cd:29:27:02:44:d0:33:42:3e:67:fa:c5:8d:96:
         ae:2d:72:9a:b6:e4:15:16:c7:b0:d0:5e:38:b4:7c:ad:f3:54:
         15:bd:bf:11:0c:0b:c1:ab:aa:92:d6:f4:24:14:b2:1a:04:af:
         7c:76:35:76:da:33:b6:9e:38:0c:ae:1e:1c:78:1a:11:e6:75:
         b1:2e:c8:2b:c0:16:61:44:2c:8f:cd:b4:b0:cc:03:35:2e:5b:
         87:4a:bd:b2:8a:49:34:2b:47:5e:32:7c:1e:09:d0:e4:99:08:
         42:59:0e:6d:97:93:b5:3e:75:99:9a:c1:79:2d:81:8d:8f:d5:
         87:a5:56:bc:09:cb:76:1f:91:c7:79:15:37:43:04:d5:c6:aa:
         3f:b6:82:d3:1d:92:4a:82:51:03:28:40:02:8f:27:00:cf:fb:
         f7:c5:a9:3e:c0:1f:43:0c:e2:96:f8:3d:34:50:0b:00:38:e7:
         1a:f5:cf:19:8a:ab:7c:33:ae:1f:be:08:9b:06:61:06:72:9e:
         33:19:ab:29:4f:3d:e4:a1:78:00:f2:50:07:75:a6:a0:d7:08:
         07:5f:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org