Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa
File:                     GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa (raw, json)
Hash identifier:          qaoiDzZNi7pVI/z8rXiUtbjm8EzspQqEY4jPj0Z8NAA=
Subject key identifier:   19:88:EE:68:34:9D:8B:0E:70:FD:2A:73:E0:63:98:16:7C:71:E9:E0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       FB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa
Signing time:             Thu 24 Nov 2022 01:09:26 +0000
ROA not before:           Thu 24 Nov 2022 01:09:26 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        202.180.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov 24 01:09:26 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=1988EE68349D8B0E70FD2A73E06398167C71E9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:89:ac:3b:c6:72:39:b9:e9:91:d3:9c:76:
                    ee:b5:19:de:84:17:0a:af:21:d8:9e:a2:7e:2e:61:
                    00:eb:29:a6:5b:ff:f7:f2:ab:7c:37:e2:d5:eb:23:
                    e5:85:e2:0b:86:e9:8f:66:f8:78:85:8c:33:3f:91:
                    cb:34:c7:3c:0c:69:29:6f:a1:66:12:3d:2a:14:e3:
                    db:a3:a7:46:a2:0b:21:ef:58:ef:05:08:6c:ec:63:
                    45:b3:ea:82:e5:2d:3b:2a:83:01:98:fb:04:6d:17:
                    c5:29:be:4e:ff:a6:7b:68:ca:e8:15:e4:f2:c9:c1:
                    24:2c:63:b6:8e:04:67:b8:f5:c3:01:c8:ee:ca:d3:
                    23:69:ed:25:95:c9:2e:04:ff:2a:1c:03:56:36:a7:
                    0d:09:72:22:3a:50:b0:c6:fc:ea:db:87:25:0f:79:
                    ff:34:a1:cd:0e:5e:a6:3f:1a:cd:b7:47:0d:48:95:
                    8b:52:c8:5d:a0:53:f5:f9:dd:61:dc:f5:92:04:1f:
                    d1:8a:f3:55:9c:a6:0d:28:1a:49:e8:9d:ec:d9:18:
                    56:b5:bd:54:3d:c2:7a:34:7b:f7:51:4c:fb:f5:3d:
                    f4:f3:f3:2e:ff:bf:69:61:2d:89:73:65:65:3a:3c:
                    f5:7d:29:4b:9d:ec:a3:40:d0:5b:60:c4:aa:c3:6b:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:EE:68:34:9D:8B:0E:70:FD:2A:73:E0:63:98:16:7C:71:E9:E0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:ac:2a:12:3f:e9:07:fb:06:75:39:d7:65:84:04:36:9f:
         78:0f:79:38:25:15:0f:e4:f2:9a:0c:e0:a4:0a:dd:11:14:ab:
         83:fd:4d:31:3d:ee:61:86:8d:91:62:31:89:7b:e9:6f:5c:2f:
         eb:9e:36:eb:0a:dd:d3:1e:20:3b:8b:2e:46:d0:e2:c6:11:bd:
         83:52:e7:94:20:ed:13:5c:70:a7:5d:ba:86:ba:8e:5e:7a:8c:
         13:18:6a:e7:08:b5:97:f5:1d:f1:9b:97:cd:47:9a:d6:93:87:
         93:77:f4:09:58:1d:9c:db:2f:31:e0:c1:ee:92:6e:36:d3:21:
         4c:c8:c5:3d:04:32:26:97:44:96:f3:b5:37:ee:56:87:a9:69:
         a7:67:b4:1a:8c:95:c6:61:e9:49:01:8b:ae:cf:f3:a4:c5:09:
         cd:7f:6c:91:8e:60:a6:8d:8e:76:20:26:bd:ec:a1:36:40:36:
         5b:10:31:9f:81:e3:4f:79:6c:42:25:0e:f1:d3:34:0b:a7:ae:
         1f:01:79:88:2a:48:78:55:a9:1b:4b:a1:a7:6d:13:76:fa:d4:
         ff:96:ec:39:3d:35:11:41:24:93:06:c0:20:42:d4:f9:47:10:
         7f:c6:0a:d6:6b:e1:58:40:a5:32:e5:02:57:e6:90:23:37:d5:
         52:2d:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org