Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2kbmqQtZE5jyfL6wVlXuL6rl-Jc.roa
File:                     2kbmqQtZE5jyfL6wVlXuL6rl-Jc.roa (raw, json)
Hash identifier:          54vKR3xA7KHyNkGzk+/+QESx5E5QrHVSeRUEJeu5dB4=
Subject key identifier:   DA:46:E6:A9:0B:59:13:98:F2:7C:BE:B0:56:55:EE:2F:AA:E5:F8:97
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       7E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2kbmqQtZE5jyfL6wVlXuL6rl-Jc.roa
Signing time:             Mon 24 Oct 2022 02:24:34 +0000
ROA not before:           Mon 24 Oct 2022 02:24:34 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        61.203.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:24:34 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=DA46E6A90B591398F27CBEB05655EE2FAAE5F897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:b8:48:9f:11:69:58:d5:b2:8a:00:aa:58:
                    b6:3a:0e:e5:f4:63:e2:08:d1:3c:80:bf:85:9a:3b:
                    28:00:cf:bb:ff:2a:9a:16:00:43:87:5b:03:4b:ee:
                    59:e5:4b:5f:73:29:de:3e:6e:98:83:ed:84:4d:16:
                    ca:3b:70:3a:5f:2b:ad:85:92:7b:05:4f:f9:10:c3:
                    ef:ab:21:c2:80:59:ef:1f:bd:f4:2b:3d:3d:bc:71:
                    9a:4d:db:9a:d4:7e:0c:b8:c6:59:4b:e6:0d:74:2d:
                    d9:97:6a:95:0a:ec:50:c3:0f:b4:87:2c:fa:6d:df:
                    df:cb:d7:e3:7c:e2:64:d9:28:fe:77:15:31:2c:55:
                    48:12:52:ae:8e:04:fd:2e:9b:be:80:f2:62:cf:c2:
                    a6:a7:5f:8c:e1:94:9c:43:24:57:5f:8d:fd:67:73:
                    91:79:9c:55:84:1a:ba:a3:f5:c2:bd:d3:39:17:e3:
                    42:19:cc:72:30:64:ef:7e:c3:33:52:97:43:af:73:
                    29:4e:c3:d0:f5:a2:7b:34:51:a2:0b:65:86:39:44:
                    44:dc:a7:bb:a9:d8:cf:8d:84:2f:43:b7:ef:a3:53:
                    65:bb:a6:c7:4e:68:b1:6c:0f:21:ae:a2:43:43:77:
                    f4:cc:e7:f0:4c:5b:3f:1d:ae:d1:cc:83:33:72:e2:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:46:E6:A9:0B:59:13:98:F2:7C:BE:B0:56:55:EE:2F:AA:E5:F8:97
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2kbmqQtZE5jyfL6wVlXuL6rl-Jc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:24:d1:97:fc:4d:1c:7d:5a:a5:6c:31:a0:32:1d:04:a1:29:
         4c:60:10:d5:51:40:48:92:0e:b2:78:a3:3e:14:78:ee:0b:c0:
         b1:5f:cb:93:c2:2a:94:e4:19:66:a0:92:cf:c1:56:9f:47:1f:
         ef:1e:c5:d7:65:76:58:0c:b2:47:10:6c:c8:18:97:9a:b8:ad:
         da:8d:eb:8f:e8:2d:02:b9:8b:f5:29:6d:6e:25:0e:23:c9:41:
         26:49:8f:4b:05:25:dd:6c:0d:f2:89:bd:31:8a:c2:25:d0:44:
         e6:d5:a1:fc:92:15:ee:df:62:5e:5f:60:6d:26:56:17:e2:36:
         ca:ba:fc:50:2f:08:72:89:2a:8b:f4:87:72:6f:4e:cc:8b:31:
         ed:14:b4:c7:83:99:3e:83:ef:ec:f8:2e:b9:18:5e:44:a3:8e:
         91:35:24:c2:11:a1:0d:f9:70:8d:08:be:37:df:da:52:60:38:
         85:c8:5c:22:63:37:6c:5c:5e:ef:84:9b:29:d8:00:2d:d6:43:
         da:c1:c1:ff:04:cb:7f:0f:a0:0a:84:2a:2e:6d:97:8c:cc:98:
         52:1f:b9:9b:18:d8:e0:40:e0:f8:b7:98:9a:07:5a:c9:47:15:
         55:aa:4b:5b:46:e2:ab:38:49:7a:23:51:dc:77:78:bb:45:97:
         7b:4e:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org