Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2fz5Y7g7a4LylSlmPiIJ2U6qCnY.roa
File:                     2fz5Y7g7a4LylSlmPiIJ2U6qCnY.roa (raw, json)
Hash identifier:          cO8adQNH1RI0mGlYogFByU7sVX3Qic0afdgp8OhYoiY=
Subject key identifier:   D9:FC:F9:63:B8:3B:6B:82:F2:95:29:66:3E:22:09:D9:4E:AA:0A:76
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       56
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2fz5Y7g7a4LylSlmPiIJ2U6qCnY.roa
Signing time:             Mon 17 Oct 2022 02:05:54 +0000
ROA not before:           Mon 17 Oct 2022 02:05:54 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18134
IP address blocks:        219.112.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:05:54 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D9FCF963B83B6B82F29529663E2209D94EAA0A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:1e:c3:bb:f6:6f:6b:60:7c:91:00:d7:f2:
                    de:d6:11:28:1e:a8:59:cb:f0:10:cc:7f:87:b0:d2:
                    48:06:e2:54:9c:58:65:87:62:95:06:08:63:12:d4:
                    db:18:e6:cd:2d:fe:82:a3:7b:c2:c5:b6:18:e6:63:
                    b0:56:fd:72:92:ac:0a:52:a0:1c:3a:b5:af:fd:54:
                    ff:0c:8c:85:d8:a6:42:72:2f:c1:dc:ec:e2:47:31:
                    95:15:09:55:91:58:c7:9d:54:18:60:c5:34:7e:e7:
                    c6:95:62:aa:c4:c3:0b:34:b5:4a:8d:f1:3b:42:a8:
                    09:9d:90:4d:66:8a:d4:f9:86:49:af:39:e1:39:44:
                    47:9d:64:bd:37:e2:08:27:76:bf:90:9f:d5:0c:10:
                    c6:74:d1:9b:42:dc:14:40:b9:c1:6f:55:94:fb:10:
                    d0:3b:d2:45:09:23:bc:30:cf:82:02:bb:47:96:bf:
                    74:7d:46:53:6e:21:e5:41:9b:a4:6c:c8:57:f4:43:
                    c1:6c:44:25:f6:61:4a:c3:88:f8:c2:d9:bf:59:8c:
                    9f:49:bd:c5:a8:5f:00:04:08:78:da:87:61:3e:70:
                    3c:8c:3f:7e:f0:b4:dd:84:00:d9:aa:ee:c7:1a:a1:
                    19:1a:02:2f:85:fb:21:84:41:cb:cd:6f:a5:1b:5a:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FC:F9:63:B8:3B:6B:82:F2:95:29:66:3E:22:09:D9:4E:AA:0A:76
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2fz5Y7g7a4LylSlmPiIJ2U6qCnY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d8:03:cc:9a:d0:2d:25:60:d4:ee:21:77:e9:80:ad:a1:f3:18:
         1a:15:6f:87:d7:96:61:ed:c9:b1:c0:b0:4e:eb:41:9b:dc:ee:
         82:76:ef:a7:6a:f7:aa:7c:8f:6e:e3:bc:ae:6d:c7:74:bd:0b:
         8e:84:ec:10:dc:e6:e5:bd:1f:05:4c:40:7d:5b:33:94:06:90:
         aa:f7:85:fd:98:9b:2b:f2:68:ad:48:7a:23:16:b5:07:57:d6:
         4c:35:6a:b9:17:92:7f:6a:e0:af:8e:07:17:8a:d0:2d:3e:86:
         95:12:29:62:65:2e:d7:55:4c:0d:12:e8:2d:07:73:5c:7c:98:
         8b:61:49:6f:4a:46:dd:29:cd:be:bc:48:18:80:a2:eb:96:e6:
         1a:28:a6:07:c3:e7:cb:38:08:88:4d:9d:4a:81:4c:23:0c:89:
         05:98:02:e6:f1:cf:8e:bf:ac:e9:ed:fc:15:21:f4:e2:df:e0:
         ac:01:01:4a:e5:7d:c0:e9:d8:4b:33:b9:a2:dd:6d:93:b5:1d:
         04:af:82:f6:7b:1e:36:6c:b5:31:f2:c9:68:68:d3:ec:d5:4b:
         44:69:93:cd:e5:8f:4d:a0:4c:7e:44:65:9f:1f:ff:16:08:65:
         39:63:02:5d:88:92:84:ca:1e:58:0d:71:0c:6d:f9:d6:e3:a5:
         02:42:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org