Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2IlZmtPUmXJUReJ7H8Vx0kYxD_k.roa
File:                     2IlZmtPUmXJUReJ7H8Vx0kYxD_k.roa (raw, json)
Hash identifier:          pmtH3eO7NbTxRLOEZK1zvJtCE7GnF5wPLCqTTOGc3PY=
Subject key identifier:   D8:89:59:9A:D3:D4:99:72:54:45:E2:7B:1F:C5:71:D2:46:31:0F:F9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       DF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2IlZmtPUmXJUReJ7H8Vx0kYxD_k.roa
Signing time:             Mon 31 Oct 2022 02:10:17 +0000
ROA not before:           Mon 31 Oct 2022 02:10:17 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        211.135.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:10:17 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D889599AD3D499725445E27B1FC571D246310FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:ca:d2:2b:ec:d0:0f:5a:40:49:e8:3a:2d:
                    b0:b9:5c:bd:ce:a8:a4:56:f1:03:43:d5:63:c6:fe:
                    95:04:fa:58:75:8c:96:ef:a6:c3:48:cf:f9:bb:fc:
                    36:9e:24:04:39:e5:40:f8:02:56:41:78:34:bc:54:
                    92:f9:a7:ca:8f:51:d4:12:b3:65:af:11:2a:8f:20:
                    f0:40:47:ad:52:a4:db:38:7c:ef:78:02:b0:6f:94:
                    9e:e3:1e:88:2a:71:bb:86:56:38:ec:b9:d6:00:89:
                    bf:e3:1f:fb:63:d3:b8:b1:ee:bf:07:b9:87:f6:b9:
                    be:1c:4d:e8:d1:eb:98:f1:6e:94:bd:64:9f:65:94:
                    6e:ec:2e:12:8d:4a:1a:03:ed:79:e3:ca:ce:c4:a3:
                    21:b8:d4:b8:57:62:5d:24:54:cd:0b:67:0d:79:15:
                    2c:9c:ef:9c:00:bd:a3:82:3c:80:5b:4b:f3:79:cf:
                    f9:69:4f:8b:f2:2b:ad:bd:ea:23:ca:23:b3:ff:c9:
                    88:28:da:eb:ce:2f:3f:36:2c:7b:d2:30:f9:f7:db:
                    ce:2d:ff:ed:88:4a:8a:94:0e:4a:e3:17:b1:09:c4:
                    7a:72:b9:c6:eb:74:52:3c:a4:66:37:45:b2:bf:4a:
                    bf:c8:f7:66:22:91:7e:98:19:13:e9:84:62:46:90:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:59:9A:D3:D4:99:72:54:45:E2:7B:1F:C5:71:D2:46:31:0F:F9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2IlZmtPUmXJUReJ7H8Vx0kYxD_k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.135.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         68:64:0c:41:36:76:f3:a1:e2:db:0d:d6:e9:47:42:29:f8:de:
         fa:8b:34:3f:f7:9c:2a:55:cd:35:65:79:14:98:bb:64:ce:98:
         d4:7f:0f:9b:40:47:72:3d:c5:cc:6b:5e:bd:bb:90:73:3a:c7:
         ed:63:5e:6e:1c:0e:65:cd:3a:f3:cb:1c:09:d7:ce:2c:a4:54:
         25:4d:b9:c8:aa:69:6b:74:6c:f9:1d:b8:d0:d6:8a:2d:3b:8c:
         ce:12:47:80:cd:61:69:32:05:a9:85:5e:28:68:e8:1d:3d:e0:
         d8:fe:ab:35:12:6a:be:8d:7b:71:86:a4:d0:3a:69:0d:86:f3:
         37:62:88:6b:42:f0:43:71:ae:bf:b2:52:60:39:1c:92:b8:20:
         6b:05:ae:84:cd:c0:81:43:7f:de:60:e0:5b:a5:e8:27:ff:25:
         c6:3b:ca:01:97:43:71:4c:2f:ec:c7:55:b7:09:5e:78:43:68:
         72:ec:d3:2b:5d:ec:25:7f:f5:0d:e7:2d:d6:11:a9:0e:b9:c3:
         d8:90:7c:ed:03:08:cd:5d:e5:da:67:d0:6c:95:bc:cf:9b:60:
         53:5e:d9:23:e5:48:6f:dd:3d:f2:cf:2d:49:2b:76:2d:5d:b8:
         2b:c1:57:71:f3:da:b9:87:61:f9:96:36:83:c2:3b:59:45:ce:
         c1:ce:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org