Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/36IQgP_CTzYrnXY-nCjmHTqft0E.roa
File:                     36IQgP_CTzYrnXY-nCjmHTqft0E.roa (raw, json)
Hash identifier:          XGpMVNV8LneAKV4y8GIpsDnZJvShfpwPUHSqVo2Gx/Q=
Subject key identifier:   DF:A2:10:80:FF:C2:4F:36:2B:9D:76:3E:9C:28:E6:1D:3A:9F:B7:41
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       91
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/36IQgP_CTzYrnXY-nCjmHTqft0E.roa
Signing time:             Mon 24 Oct 2022 02:50:48 +0000
ROA not before:           Mon 24 Oct 2022 02:50:48 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        114.198.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:50:48 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=DFA21080FFC24F362B9D763E9C28E61D3A9FB741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:b3:33:5d:91:75:4d:1d:c7:6a:9e:24:ee:
                    ba:06:b6:5e:78:ea:46:e4:e3:ad:76:eb:88:f2:16:
                    e0:29:e1:04:90:4b:2f:5a:d5:fa:1b:45:2b:b1:ee:
                    48:3e:65:0c:e9:ce:95:a9:5f:f2:2e:42:2b:7a:36:
                    84:8a:e0:35:ad:cf:98:7a:a8:00:6a:fc:17:51:9d:
                    87:96:35:38:41:af:b2:f6:1d:23:38:a6:9b:d0:4f:
                    a6:04:95:9e:cb:d8:3d:fc:93:58:32:0c:c2:a7:43:
                    7f:8c:0f:01:78:dc:29:48:ae:4e:06:82:84:ac:2a:
                    88:01:5a:f3:e6:b8:18:bf:c4:1a:c7:8c:50:d4:03:
                    0c:67:52:04:1c:75:af:da:4d:45:77:bb:53:93:92:
                    74:eb:ee:f2:c3:21:9d:9d:db:77:b4:71:f6:5c:55:
                    4a:bf:aa:43:3d:9b:d2:03:ac:88:93:2e:78:d9:85:
                    91:3b:a5:38:be:b7:9d:46:b1:65:73:88:11:4c:54:
                    88:e1:53:bf:97:31:42:f5:20:3e:04:d5:bb:2a:0a:
                    c7:f5:22:d8:58:7d:7e:f7:47:e1:83:5e:f1:dd:68:
                    ce:32:18:1e:8d:de:59:be:12:0c:82:e8:94:af:eb:
                    1d:ec:18:21:41:00:91:10:35:bf:91:9b:13:78:78:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A2:10:80:FF:C2:4F:36:2B:9D:76:3E:9C:28:E6:1D:3A:9F:B7:41
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/36IQgP_CTzYrnXY-nCjmHTqft0E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:7d:27:91:92:4b:53:aa:4d:c7:5f:6f:1c:6b:63:c6:0c:
         d6:87:59:d9:34:aa:ce:b5:d9:0a:cd:2a:bd:e6:4e:04:41:85:
         fd:a3:ad:27:16:57:47:61:62:13:3c:3f:31:7b:a0:62:ee:77:
         fd:66:40:f5:a6:2a:01:0c:1d:1e:f5:6c:43:8f:8f:2a:2f:97:
         27:b3:29:cc:ee:f9:df:47:4e:17:a5:5d:56:54:16:a7:cc:7c:
         42:63:09:3f:bf:72:c0:7f:a7:85:19:94:37:33:b0:45:92:c9:
         b0:d9:84:f0:60:08:a4:7c:ab:ef:6d:96:d7:24:66:fb:f0:7d:
         51:4b:af:91:ee:7c:b4:41:72:6f:d2:3b:54:f9:bf:3c:45:01:
         0c:bd:8f:a4:aa:67:0b:1a:e7:f5:d6:f1:f6:23:4a:54:c0:5f:
         92:86:91:f0:01:32:b7:cc:11:1e:ea:c7:69:72:5c:b4:47:a6:
         0f:0c:42:1c:45:f9:c5:a2:bf:13:33:d9:55:c6:c2:3d:dc:bf:
         92:2b:bc:18:11:fa:7b:d7:f6:eb:dc:75:c7:32:bb:6c:97:31:
         ae:0e:9a:6f:eb:0c:ea:ce:94:88:93:54:73:01:5c:d9:4b:b0:
         42:ac:be:f2:e1:b4:42:cd:7f:92:05:00:06:77:1f:63:6a:d5:
         8f:2f:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org