Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/EwwXN27z-UkKp2_ymDWO_5PL0pY.roa
File:                     EwwXN27z-UkKp2_ymDWO_5PL0pY.roa (raw, json)
Hash identifier:          6stvGD8wH8cKqFJT51unAf62yzgn7XSe+HqP4DCpclA=
Subject key identifier:   13:0C:17:37:6E:F3:F9:49:0A:A7:6F:F2:98:35:8E:FF:93:CB:D2:96
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       AC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EwwXN27z-UkKp2_ymDWO_5PL0pY.roa
Signing time:             Mon 24 Oct 2022 04:26:51 +0000
ROA not before:           Mon 24 Oct 2022 04:26:51 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        203.89.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:26:51 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=130C17376EF3F9490AA76FF298358EFF93CBD296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:7a:4c:aa:d2:f4:63:0d:25:c4:4d:42:ce:
                    a1:23:fa:ad:6b:6e:69:44:2e:79:d7:53:67:cf:82:
                    8b:67:15:76:ae:94:8d:fa:36:1f:17:3e:99:61:c2:
                    44:7a:72:35:a9:40:7d:39:e1:c0:b4:35:af:9a:75:
                    1f:28:26:bc:48:2f:66:7f:7f:48:cf:75:73:ec:c7:
                    4f:22:2f:78:bb:06:9f:e1:22:d3:45:2d:02:99:4e:
                    67:ea:f2:05:d1:85:80:de:77:42:ff:d2:e0:35:d7:
                    60:e9:e9:07:87:ea:67:65:2d:30:6d:83:c5:26:fa:
                    10:c9:bd:ba:c1:e8:81:5e:b5:ea:b0:36:75:77:ad:
                    ec:88:9d:d3:37:3a:22:d7:fe:5e:56:7c:3d:5a:1f:
                    96:7e:28:d2:00:b5:15:2b:e7:8a:13:32:c8:18:95:
                    2a:84:38:af:79:2b:c1:b8:02:2e:f3:bc:8b:9a:e3:
                    d6:81:35:f4:9d:e3:a8:bd:9e:20:bf:ef:2b:5c:a3:
                    c4:75:d6:ae:8c:36:7a:9b:df:ce:52:0f:c0:ff:30:
                    f4:cd:b8:17:a5:93:d7:1d:86:a0:8f:d9:90:0d:4c:
                    0e:b1:a5:ff:ba:05:05:6b:9f:5e:bb:c3:cb:e2:92:
                    b6:b3:08:30:01:9e:89:fe:d1:80:5d:52:ea:11:a7:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:17:37:6E:F3:F9:49:0A:A7:6F:F2:98:35:8E:FF:93:CB:D2:96
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EwwXN27z-UkKp2_ymDWO_5PL0pY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.89.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:ce:d1:d0:9a:7c:45:74:78:bd:e2:af:2f:a9:fa:fe:b0:
         0e:c8:6c:9e:d7:f7:27:0a:a4:55:37:27:72:63:42:3b:f8:d3:
         e2:d4:b3:52:7b:05:5a:92:1b:86:74:45:fe:a7:26:b9:a0:34:
         57:d9:7d:2e:3c:be:85:64:83:9f:7a:05:ea:45:1d:9e:df:09:
         57:d5:f3:3f:5b:f0:05:2c:28:32:01:40:ed:94:3e:8e:3f:b5:
         25:7a:92:9f:0e:13:19:b8:0d:ac:17:7f:90:64:c9:ae:d3:ed:
         75:2f:b7:f8:19:f3:d3:e1:c6:b4:7a:a8:7d:f6:4a:b1:42:0d:
         66:17:8b:ab:4e:6a:bb:32:20:d4:fd:67:5f:97:0a:93:ee:14:
         c5:36:da:19:87:f4:4d:98:c4:da:9a:b0:dc:0c:1e:20:22:e2:
         c1:88:15:26:25:90:4c:c2:8e:f0:95:6b:13:da:7d:7d:a4:dd:
         25:ef:ab:b3:4e:5c:46:37:c8:ae:4c:b1:55:0b:55:0e:bf:f8:
         12:a4:10:48:d1:b8:cb:82:2f:d5:a7:ac:f8:f3:9f:12:70:66:
         b4:43:06:c3:44:4d:bb:1f:23:13:95:8c:43:18:f2:68:63:5b:
         67:e8:34:1f:fe:f2:cf:78:95:70:2c:c2:07:fe:8f:51:b6:b9:
         f9:ac:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org