Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9CfT6ewwEMb-7GDdbdKgaPQ4vKU.roa
File:                     9CfT6ewwEMb-7GDdbdKgaPQ4vKU.roa (raw, json)
Hash identifier:          toLxxoFsJ8ZPBOOF9ulRQ3dlQyX0aqPCwkox8zMXqaY=
Subject key identifier:   F4:27:D3:E9:EC:30:10:C6:FE:EC:60:DD:6D:D2:A0:68:F4:38:BC:A5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       7F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9CfT6ewwEMb-7GDdbdKgaPQ4vKU.roa
Signing time:             Mon 24 Oct 2022 02:24:35 +0000
ROA not before:           Mon 24 Oct 2022 02:24:35 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        110.4.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:24:35 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F427D3E9EC3010C6FEEC60DD6DD2A068F438BCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:21:d5:ae:a3:86:63:5d:69:9b:47:33:be:
                    62:d0:23:4c:ec:37:69:52:2f:07:da:92:e6:41:57:
                    39:e9:b8:55:cb:6a:d6:52:2d:51:3f:14:ef:06:ad:
                    4d:a3:c8:2a:51:30:18:2b:7e:e6:b9:d7:c2:a5:c6:
                    f1:10:5e:fd:e7:7c:4f:4d:bc:b1:38:47:48:27:93:
                    50:cf:62:e0:83:1e:ae:66:ff:54:09:fd:94:b7:c9:
                    8b:d4:3f:e6:7f:9c:29:6c:c8:74:9c:f8:a6:ce:6a:
                    a2:f6:3e:8e:43:39:97:18:f8:17:fc:68:70:36:31:
                    14:4a:60:d9:17:29:f1:94:54:92:95:5c:11:0a:fa:
                    3e:6c:e3:44:95:f8:9f:2c:81:07:3e:69:0a:64:d1:
                    f7:cf:7f:6d:46:f2:18:60:8a:bd:e4:8d:a5:90:22:
                    ef:c7:21:6a:59:0c:8d:0a:a1:a7:35:f8:91:fc:4b:
                    7f:1d:47:9b:4d:99:a9:1f:3a:16:d9:72:de:21:11:
                    7d:ee:c0:bf:2a:53:e5:a9:95:32:64:23:f0:8f:a7:
                    f1:a8:06:8c:73:0b:37:3d:83:f8:44:b9:53:16:66:
                    27:5d:10:65:4b:21:90:d2:64:2a:f4:84:4c:5f:08:
                    11:ed:31:5b:4d:7d:24:74:da:4f:96:a7:c7:cc:19:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:D3:E9:EC:30:10:C6:FE:EC:60:DD:6D:D2:A0:68:F4:38:BC:A5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9CfT6ewwEMb-7GDdbdKgaPQ4vKU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:dd:35:22:c8:64:cf:0f:a3:9a:f4:1c:81:78:31:b8:6a:1f:
         31:d3:53:47:8d:a0:20:fe:fd:8c:14:f1:47:da:08:ce:4f:9f:
         0e:dd:7e:af:54:66:52:da:b0:7d:05:08:c8:3c:50:33:f0:71:
         ab:56:fe:9b:fd:e2:28:fb:9c:b2:7c:07:6c:3e:87:d9:83:2a:
         65:c5:94:e9:89:1c:7a:88:e7:d6:ad:4c:64:05:54:e4:7c:d7:
         90:38:b8:d5:4a:0e:fb:c1:e9:ff:16:08:d3:95:55:23:2c:64:
         c9:46:28:bc:c1:1a:7b:ec:46:02:f9:b2:b1:a4:e8:74:47:af:
         81:bd:19:7d:e1:86:07:05:d1:b5:64:59:cd:73:fd:a0:44:39:
         bb:57:e4:c3:4d:7d:42:66:c9:c6:3f:5d:71:9a:ae:2c:15:07:
         d4:14:fd:8e:3d:66:45:60:6d:5f:df:c4:58:22:ee:dc:7d:09:
         13:9e:9c:11:79:15:8b:67:f5:8b:5e:8c:79:9e:2f:0b:5c:8f:
         f9:89:69:1a:72:5c:88:27:86:df:b3:30:56:9e:68:c4:82:0d:
         52:55:79:5e:ff:6c:78:b4:51:b5:5c:d0:1e:c1:80:87:8f:a0:
         cb:64:93:cd:e0:19:ba:2f:4e:12:4c:83:2a:dd:2d:5e:e2:34:
         90:12:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org