Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8iZOdbiEPcZo0L2o6yiybPp3nxo.roa
File:                     8iZOdbiEPcZo0L2o6yiybPp3nxo.roa (raw, json)
Hash identifier:          xGbVxRCkBwopqWL0uYjOvYjMpfA3Uuz07DlAhoN1brE=
Subject key identifier:   F2:26:4E:75:B8:84:3D:C6:68:D0:BD:A8:EB:28:B2:6C:FA:77:9F:1A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8iZOdbiEPcZo0L2o6yiybPp3nxo.roa
Signing time:             Mon 31 Oct 2022 01:51:53 +0000
ROA not before:           Mon 31 Oct 2022 01:51:53 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        119.24.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:51:53 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F2264E75B8843DC668D0BDA8EB28B26CFA779F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:bb:46:8b:3a:21:44:3c:dd:38:74:11:c8:
                    5f:59:b2:7f:9a:7b:fb:e1:f5:21:e9:93:f5:fc:94:
                    06:14:5a:71:71:96:fe:77:0a:7e:05:f3:9c:8a:3c:
                    3f:13:ca:23:6d:1f:d8:94:7c:13:5b:61:b7:11:f7:
                    d8:6e:90:ec:79:b4:19:6b:59:78:9e:99:41:58:cd:
                    54:97:a3:64:a1:63:b5:30:73:9a:8a:07:85:86:01:
                    78:27:d7:79:9a:23:38:ae:f4:1d:78:15:7d:c5:41:
                    d7:eb:4e:29:1f:c1:f5:b8:0e:fb:dc:2b:de:14:3d:
                    f5:93:92:4c:c8:73:63:89:80:2e:54:2a:53:7f:b7:
                    c7:f4:1e:c8:1b:f4:30:df:18:26:e6:7a:07:5d:a3:
                    c3:c2:ab:72:e8:89:d5:f7:06:5a:eb:84:32:0a:97:
                    8e:08:a7:77:4a:e9:de:cf:08:77:55:80:cf:08:58:
                    39:70:4c:bc:7f:0f:ce:9e:92:33:3c:9f:c2:da:b8:
                    c7:7d:25:d4:e0:c3:69:5b:2c:53:d7:89:fa:ec:fe:
                    ad:19:08:53:3e:2d:4d:86:7b:b5:2d:e2:6a:ad:d7:
                    79:84:22:74:db:56:b8:82:d8:0f:2e:01:27:67:b3:
                    8f:25:bb:81:17:b9:af:2b:2e:48:cf:98:bc:d8:3e:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:26:4E:75:B8:84:3D:C6:68:D0:BD:A8:EB:28:B2:6C:FA:77:9F:1A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8iZOdbiEPcZo0L2o6yiybPp3nxo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9b:e3:c1:d8:ce:03:c8:69:7c:af:b6:ba:5a:25:6f:45:77:f6:
         97:d6:10:e9:ee:ad:ef:03:c5:cd:44:d5:90:aa:7b:5f:c6:5c:
         c2:e5:df:00:ec:da:c5:84:93:2a:fe:9e:55:dc:dc:08:fe:c1:
         91:96:ee:c3:65:01:95:fb:d1:57:46:b1:4f:89:33:a1:5e:ef:
         82:84:f4:ab:c8:0f:58:3d:d2:36:bf:4f:34:e5:e5:64:cc:a0:
         11:69:45:4a:4d:9e:ee:bd:00:24:c3:8c:8c:2f:f3:f6:07:5b:
         a0:09:69:ad:28:af:9c:c9:e9:56:d0:86:6e:59:51:96:06:f2:
         e2:7d:8b:ff:b0:34:f9:af:aa:a5:ea:3a:ad:f7:84:59:f3:d5:
         bc:0a:cd:7a:75:32:82:da:24:f8:f3:59:dd:12:2a:2f:da:a8:
         c2:f8:07:c9:fe:03:7c:0a:4c:86:1a:c4:47:3c:6f:b1:5b:c4:
         4a:12:f8:79:8b:0b:6d:4b:5c:49:78:fe:f6:44:c6:c6:8d:6c:
         ca:9d:5b:b6:62:db:a3:cd:f7:c3:e2:5a:34:ad:3d:ba:94:8f:
         84:d0:47:ad:44:d5:84:70:d4:63:5a:c9:33:27:dc:d1:bf:e6:
         bb:5c:40:a5:b3:a7:c3:fd:ed:8d:b2:59:7b:d5:94:b0:ed:a8:
         a9:3b:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org