Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CJR2CGK0jGc5iCybs96C6NmOZ2I.roa
File:                     CJR2CGK0jGc5iCybs96C6NmOZ2I.roa (raw, json)
Hash identifier:          eR75aQ4XDkE5rN3ymW8SxyiNquJgtOddEnSCYImY75w=
Subject key identifier:   08:94:76:08:62:B4:8C:67:39:88:2C:9B:B3:DE:82:E8:D9:8E:67:62
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       36
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CJR2CGK0jGc5iCybs96C6NmOZ2I.roa
Signing time:             Mon 17 Oct 2022 01:13:28 +0000
ROA not before:           Mon 17 Oct 2022 01:13:28 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     7686
IP address blocks:        61.211.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:13:28 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0894760862B48C6739882C9BB3DE82E8D98E6762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:3b:0a:d1:f1:6a:0c:ef:27:13:0f:52:80:
                    71:b1:4e:8c:7c:b7:46:b2:46:5b:c1:6c:65:8d:6a:
                    b6:da:fc:1b:a9:ea:73:14:35:38:5b:c6:60:97:a8:
                    d3:70:e5:a2:5d:1a:84:16:c8:9f:25:4a:35:b3:56:
                    c8:a1:85:55:91:31:87:25:80:0b:b8:86:a8:93:bf:
                    a9:ba:ca:d1:f1:bd:b8:31:87:ef:df:33:91:23:ca:
                    53:d4:33:cf:b2:b8:27:24:47:65:f3:fb:50:e8:8c:
                    84:ff:b0:a8:6a:c4:e2:d6:c8:66:3b:ba:8c:59:43:
                    f0:c5:69:f7:fd:5b:a8:91:7f:9b:be:5b:08:f5:65:
                    ec:b3:1b:26:9f:cb:5d:a1:f4:bc:1b:59:0a:01:68:
                    d3:36:c2:70:73:36:4d:29:2a:16:50:e9:56:e4:b4:
                    ef:52:ef:4f:45:32:af:39:b6:0d:7c:e2:ca:e2:e9:
                    a8:0c:18:ed:c7:f8:a1:bf:e6:a0:20:64:bc:fd:e7:
                    be:07:e5:33:bf:dd:09:de:08:87:4f:df:07:32:2b:
                    14:bb:17:ca:dd:a5:4c:d3:f9:11:17:51:10:af:cc:
                    17:50:8e:bc:4a:a2:ba:ee:6e:0a:4e:97:ff:da:63:
                    c1:91:d3:d2:c6:d4:5c:b6:6a:7d:7c:13:9b:48:a5:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:76:08:62:B4:8C:67:39:88:2C:9B:B3:DE:82:E8:D9:8E:67:62
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CJR2CGK0jGc5iCybs96C6NmOZ2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:f1:98:67:c0:66:9b:fb:58:28:46:c3:a5:dd:b8:11:33:
         a4:b6:cd:5f:07:d2:69:ae:8f:7f:19:c3:c8:aa:d3:ec:71:1e:
         dc:9e:73:3d:c1:2a:bd:93:dd:4b:1b:61:ba:50:3f:4d:77:36:
         06:2a:61:49:8b:45:9d:50:32:ae:19:fc:b0:42:cf:d6:7a:66:
         e5:bf:c8:03:2e:ac:c3:fc:ce:6a:de:19:f9:18:bc:3e:d1:d6:
         38:3d:dd:31:65:7a:19:b3:ed:24:7e:49:52:e5:a4:4c:44:17:
         45:e5:67:44:3d:f5:63:8f:5b:cb:1a:0a:eb:90:e2:f9:c8:3d:
         44:89:93:2d:22:52:7f:39:0d:cf:47:db:12:71:f8:d4:1a:d5:
         0a:7a:84:f3:37:c9:15:47:ca:6d:5f:8e:63:23:e6:c5:8c:50:
         fe:72:fb:9e:8b:c3:32:1b:f7:b1:9f:90:5e:f3:58:0c:68:97:
         de:b0:64:3a:2d:35:ae:18:cc:0d:e7:6a:a8:e7:ee:5d:6f:78:
         34:46:4e:51:b1:62:07:45:65:9c:09:21:00:0c:64:e8:a4:c8:
         e8:7e:77:9d:eb:fe:11:f6:4e:46:67:ec:97:98:0b:8b:9d:29:
         d2:29:1b:a7:b9:66:42:17:6f:57:99:9d:92:55:1e:1d:ee:23:
         f6:cd:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org