Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1iKWvo2yiwZXrQDKnvqQRfwbz1M.roa
File:                     1iKWvo2yiwZXrQDKnvqQRfwbz1M.roa (raw, json)
Hash identifier:          sGTz2fp/fc3BQRcC5uc+ufb3Hz8gLJrqwM0kadOMUmM=
Subject key identifier:   D6:22:96:BE:8D:B2:8B:06:57:AD:00:CA:9E:FA:90:45:FC:1B:CF:53
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       71
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1iKWvo2yiwZXrQDKnvqQRfwbz1M.roa
Signing time:             Mon 17 Oct 2022 02:45:54 +0000
ROA not before:           Mon 17 Oct 2022 02:45:54 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.157.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:45:54 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D62296BE8DB28B0657AD00CA9EFA9045FC1BCF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:24:cc:fb:ae:bc:d1:18:da:c6:7a:8e:80:
                    a2:77:d9:17:5e:b8:a7:4a:eb:11:43:5f:11:ca:2f:
                    52:9c:4a:44:92:30:01:f5:ae:93:e7:8f:1c:ef:a8:
                    2c:44:92:6a:c4:a9:f5:5f:e5:75:fe:78:fd:e1:20:
                    31:ba:53:d8:0e:06:36:d9:0a:0e:72:88:43:89:18:
                    0a:a0:5b:06:ba:d1:e7:fc:a7:f5:4c:9a:02:fb:5d:
                    c4:5e:a2:f7:bb:e9:f8:e9:c4:b4:8e:73:ea:d8:59:
                    1a:9c:f5:4e:6f:f3:6c:96:34:39:52:ca:2e:c3:9c:
                    44:49:d7:db:0d:f0:08:e0:9e:50:bc:c7:d3:44:f5:
                    96:07:c9:13:0c:af:f2:d8:79:bc:ea:f7:1a:81:7c:
                    5d:91:d4:dc:84:41:49:e8:30:9e:52:42:19:5f:63:
                    16:5a:86:b1:d4:ce:9c:3d:92:b4:4c:84:1d:c8:51:
                    da:8e:5a:10:97:d0:89:3f:fd:71:30:b0:73:46:86:
                    48:01:f3:df:b4:10:3b:9e:a1:77:fa:e7:ef:2e:c5:
                    40:62:75:cd:8f:8e:74:8e:21:75:4a:96:f0:31:02:
                    64:e0:d5:bd:4b:fe:e4:8a:a3:92:c9:9d:bc:72:08:
                    4d:9a:62:c6:dc:23:8d:17:c6:52:4e:3a:76:dd:d2:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:22:96:BE:8D:B2:8B:06:57:AD:00:CA:9E:FA:90:45:FC:1B:CF:53
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1iKWvo2yiwZXrQDKnvqQRfwbz1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:28:79:8c:84:39:94:7c:32:b2:f8:95:37:0d:cf:48:f7:9d:
         d2:a3:55:a4:b5:99:7b:95:4c:2d:75:5e:37:1a:2f:32:12:69:
         e1:48:85:38:19:39:a1:2e:15:43:a5:6b:89:25:16:20:df:77:
         34:be:a9:94:87:f5:e2:8c:4e:45:28:2f:71:51:51:30:b1:a1:
         11:8a:e8:e2:7c:ee:fc:43:88:3b:bd:96:31:cc:2b:7a:57:15:
         c0:94:8b:d7:de:56:14:85:2e:ef:f4:cc:32:c1:15:a5:71:c9:
         b7:89:cf:3b:fb:33:3b:fc:e4:1c:e3:44:3a:b0:09:c9:7e:23:
         67:69:1a:f9:cf:69:fe:24:16:21:b4:f9:57:0d:cb:36:e8:2f:
         84:1f:da:99:b1:6e:0f:78:c5:61:b4:02:80:8c:4c:05:08:e2:
         f6:d8:73:d6:56:35:9e:82:78:ce:a8:cb:06:dd:1a:3d:00:f6:
         b0:7c:eb:65:f0:8f:bc:4b:68:dd:c9:ed:71:3a:c2:c5:50:2f:
         17:db:cb:e6:f9:57:84:18:f5:fd:80:9f:fd:98:15:53:85:1a:
         f6:f9:cf:65:12:1c:f0:4a:c1:d0:3d:3e:0f:d4:0a:41:1a:ef:
         82:cd:4f:71:f4:b6:d1:ab:c5:5e:ef:65:5b:81:09:41:63:1e:
         ab:0e:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org