Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/4SnHLVkppjJIXe2PCB1hD_2Otmk.roa
File:                     4SnHLVkppjJIXe2PCB1hD_2Otmk.roa (raw, json)
Hash identifier:          b3QSh9gd/4m2xQlFWRBoUH9tShgSd78e7qOlM9XwOGU=
Subject key identifier:   E1:29:C7:2D:59:29:A6:32:48:5D:ED:8F:08:1D:61:0F:FD:8E:B6:69
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       CA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4SnHLVkppjJIXe2PCB1hD_2Otmk.roa
Signing time:             Mon 31 Oct 2022 01:39:56 +0000
ROA not before:           Mon 31 Oct 2022 01:39:56 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        58.85.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:39:56 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E129C72D5929A632485DED8F081D610FFD8EB669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:cd:d1:07:80:50:2a:06:a3:06:f0:6f:b9:
                    ce:59:f2:d6:be:6b:de:d3:17:3c:d6:e0:c0:c1:76:
                    fb:2d:50:67:95:63:51:78:11:32:17:3d:63:c9:16:
                    d4:ea:57:2f:9e:3e:96:c5:0e:2b:c4:03:c3:bf:79:
                    63:c4:26:85:c3:39:4c:19:73:cd:ea:a2:78:70:fa:
                    9a:5c:e6:2e:80:9c:a5:59:54:8e:54:37:92:59:7c:
                    36:34:a2:94:1e:a2:1b:94:b7:4f:94:81:9b:bd:26:
                    2b:f2:c7:e2:78:93:c6:82:57:50:ab:59:d8:dc:e1:
                    e6:a0:eb:89:8c:dc:78:3d:ac:58:cd:e3:3e:35:53:
                    58:e4:be:01:de:e5:bc:ca:8b:48:25:31:88:69:a9:
                    a5:9b:4c:f8:f9:9a:e4:99:1a:06:89:7c:f6:85:06:
                    cc:86:48:3c:4a:0a:59:f3:79:de:f5:49:29:f2:57:
                    3d:91:64:2c:7d:d8:e7:15:12:e0:3f:34:42:38:81:
                    06:d0:33:b7:f8:7d:84:1d:b1:23:c0:d2:e6:e6:a0:
                    2e:28:d6:7c:cd:67:26:1e:e1:86:d0:6c:be:b6:e0:
                    4a:f2:e2:b5:48:29:9f:42:48:ee:e4:e5:f1:9d:63:
                    63:06:ef:e4:be:3e:f0:74:cf:bf:82:1c:a7:75:b4:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:29:C7:2D:59:29:A6:32:48:5D:ED:8F:08:1D:61:0F:FD:8E:B6:69
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4SnHLVkppjJIXe2PCB1hD_2Otmk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:3a:46:ec:3d:65:61:10:ea:e5:00:86:4e:c5:60:d0:a7:
         1d:d6:89:f9:15:25:70:89:f2:f6:11:2d:0c:6a:9f:09:65:37:
         a5:44:12:36:62:42:9e:c5:a9:8c:b2:9d:c6:de:e3:4d:6d:b2:
         87:75:18:40:37:39:f2:62:b5:27:a7:f8:1c:b5:60:04:04:9b:
         4c:13:64:64:b5:5a:4e:3b:07:ab:2b:6f:1e:f8:4d:05:ec:0f:
         be:3f:5e:58:73:d3:9e:5f:aa:d0:c6:d9:02:33:dd:0a:56:06:
         b0:5d:0a:a3:3e:5b:c0:bc:2b:69:3b:45:c6:bb:b2:97:f6:20:
         c2:e4:8f:62:cf:d1:ee:42:f0:7a:2b:ac:d9:37:5f:3f:6b:7d:
         98:0b:72:59:fe:25:07:39:5e:15:e1:98:e1:60:76:2c:75:bf:
         d5:a7:e5:d6:a2:f3:63:f4:ba:e7:c4:10:66:4c:b9:de:33:9a:
         f9:f3:a3:9d:fc:0e:01:08:3a:9d:dd:1f:d0:c0:28:07:e6:0f:
         0e:ac:04:82:dc:48:a1:69:8b:65:fe:7d:d9:c4:38:3d:45:a2:
         e7:2f:c8:07:63:7d:41:44:5b:4c:d6:22:83:58:5f:e7:39:c8:
         fc:5e:ac:8c:d4:a9:c8:fc:03:9f:94:fc:08:6b:93:c4:e5:12:
         c3:56:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org