Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1_jePT1bnpFcuOXUhGXDKywhIMA.roa
File:                     1_jePT1bnpFcuOXUhGXDKywhIMA.roa (raw, json)
Hash identifier:          QKRP1gLXSHE6ro18c0C5cwZWA+OyfkaObx8EmWcZEAY=
Subject key identifier:   D7:F8:DE:3D:3D:5B:9E:91:5C:B8:E5:D4:84:65:C3:2B:2C:21:20:C0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       9A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1_jePT1bnpFcuOXUhGXDKywhIMA.roa
Signing time:             Mon 24 Oct 2022 04:04:48 +0000
ROA not before:           Mon 24 Oct 2022 04:04:48 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        175.41.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:04:48 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D7F8DE3D3D5B9E915CB8E5D48465C32B2C2120C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:e6:d7:be:4c:0f:e7:58:26:06:16:43:cc:
                    79:1c:e5:1b:9f:24:e4:4f:0d:d5:7f:a3:83:82:73:
                    cd:08:00:b7:32:50:73:d5:c7:ac:0b:8e:e5:47:2c:
                    03:35:ba:bc:36:74:58:1b:fb:09:ba:31:d9:79:19:
                    1d:82:35:3d:a3:09:1a:0d:8e:80:43:cc:6b:4b:db:
                    3f:1d:5a:cd:07:d6:7d:02:3a:1b:d8:46:a4:0c:f5:
                    17:fe:45:0c:37:36:bb:d1:92:56:17:4d:47:a3:11:
                    c8:08:ce:13:5b:a0:7f:1f:e3:a7:88:fd:13:9b:4b:
                    c3:6a:a7:35:a5:b9:f9:8a:0b:a2:65:f1:6d:1c:e9:
                    5a:f2:52:65:28:b9:02:b5:6d:99:d2:48:f9:81:93:
                    9f:d1:b7:7f:8c:ae:62:56:63:c8:1d:98:2e:42:4e:
                    82:cc:24:df:13:3e:14:24:1b:a2:d6:0a:db:d2:e7:
                    e0:ba:98:40:d4:87:c8:4b:3f:d8:74:0f:f2:a9:6f:
                    a7:c5:f3:0a:10:59:b8:ff:54:c1:93:e2:01:32:d4:
                    90:7b:a5:3d:0b:93:02:b9:cc:c8:1d:92:15:9f:f5:
                    57:f7:29:f2:da:0e:93:1f:45:aa:60:1f:6d:ce:b7:
                    75:e9:e8:d5:9d:66:54:20:13:4f:99:f3:9c:85:59:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F8:DE:3D:3D:5B:9E:91:5C:B8:E5:D4:84:65:C3:2B:2C:21:20:C0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1_jePT1bnpFcuOXUhGXDKywhIMA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:99:8e:54:20:05:00:65:bd:dc:ca:57:29:e7:68:9d:12:2e:
         ad:40:38:a8:ef:8b:94:11:d9:e1:84:dd:d7:dd:10:ca:13:d2:
         4f:56:1f:48:20:e3:fb:ab:8b:79:be:d8:f2:02:dc:e9:ed:e5:
         48:8a:3e:3c:19:60:f4:33:0a:91:06:8a:88:7f:07:d1:af:b4:
         16:66:1d:96:d4:65:1f:c7:4b:f2:dc:4c:a9:8b:e9:d5:04:2c:
         99:4d:bb:d8:e7:76:ab:9a:e1:72:cb:56:9b:7b:53:37:d7:81:
         c6:27:0e:b5:96:f3:57:ea:8d:54:81:41:68:e9:0a:22:89:9a:
         e5:8c:08:4e:d3:cf:ee:8b:cd:5d:df:6c:a2:42:16:a4:fb:d3:
         22:e6:62:50:37:28:10:df:9f:bc:f9:02:8f:39:4b:0f:19:ac:
         0a:38:26:ad:88:3e:32:cb:b5:77:ee:89:d5:24:ac:78:17:bf:
         0f:33:58:04:6d:30:31:e7:b0:07:04:2d:b3:69:0f:6e:d7:95:
         ab:2e:65:47:30:bb:0e:26:7c:27:a7:84:f2:b5:2d:d2:08:b0:
         a0:9b:d2:bd:d0:fa:ad:92:b7:7e:6f:ac:43:c6:92:35:3a:72:
         8f:93:13:27:bd:90:8e:09:09:40:e1:42:20:b1:89:12:7c:95:
         af:cc:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org