Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HLEhepXGfJcwnJrWObj4jvcbBE8.roa
File:                     HLEhepXGfJcwnJrWObj4jvcbBE8.roa (raw, json)
Hash identifier:          PcKXgdfXg+7oDi8JN9azrkytoswBVazlZQxzwAYmcBc=
Subject key identifier:   1C:B1:21:7A:95:C6:7C:97:30:9C:9A:D6:39:B8:F8:8E:F7:1B:04:4F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       28
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HLEhepXGfJcwnJrWObj4jvcbBE8.roa
Signing time:             Tue 11 Oct 2022 01:43:59 +0000
ROA not before:           Tue 11 Oct 2022 01:43:59 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        103.55.196.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:43:59 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=1CB1217A95C67C97309C9AD639B8F88EF71B044F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:14:a3:a1:ea:7b:16:3b:91:2a:e1:4c:fc:
                    c9:c0:56:15:ca:c2:aa:57:c3:dc:a1:68:02:9b:5d:
                    d5:07:29:bd:c3:23:b8:fd:92:5f:59:f3:d3:03:64:
                    ec:44:02:e7:05:5c:db:a1:f0:ff:a9:a9:3d:1e:35:
                    47:fe:7b:83:19:47:a3:0d:13:17:58:3f:ac:d3:57:
                    71:54:ef:57:59:32:51:5e:a6:37:80:b6:72:61:1d:
                    d2:25:00:2e:de:68:7a:35:b7:54:c4:bc:b3:55:32:
                    e3:f7:97:e0:bd:14:a2:f5:59:ba:ed:e5:cf:9e:5c:
                    86:53:62:83:14:6a:af:f8:08:e4:01:c9:2e:4d:cb:
                    e1:3d:25:93:ca:ee:5c:12:00:4f:04:53:0f:12:3c:
                    96:68:90:ca:a3:1d:c2:c3:c3:a4:5c:87:39:20:5d:
                    c4:c1:ff:01:20:62:3f:89:8a:b3:78:f3:0a:94:54:
                    e3:60:fd:27:fd:7d:83:e3:ce:b2:c9:c3:17:84:e3:
                    75:4e:51:90:f0:27:e8:cf:59:3f:36:c8:6b:e0:b4:
                    ae:33:3d:88:58:a8:f0:05:67:d8:36:23:84:d9:8e:
                    53:cf:4d:2d:cd:89:c2:8a:08:6d:48:44:bc:bb:71:
                    d6:4c:29:ff:c8:94:0a:a0:41:91:cc:5e:42:88:95:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:21:7A:95:C6:7C:97:30:9C:9A:D6:39:B8:F8:8E:F7:1B:04:4F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HLEhepXGfJcwnJrWObj4jvcbBE8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:16:f1:97:2b:ed:c8:7c:bc:15:8d:5a:63:93:17:2d:65:90:
         6f:61:84:13:fe:47:ff:8e:09:5e:73:9b:f9:79:ee:4e:68:06:
         9d:e6:33:9d:b5:5c:a2:d9:d9:a6:bf:c3:11:4d:d4:96:f6:7f:
         75:6e:1e:23:7a:ac:eb:a7:07:04:24:01:7a:2c:40:d4:66:7e:
         e8:db:1b:92:7c:8e:5c:4b:29:33:94:d1:1f:62:cf:92:c7:8a:
         99:1c:f3:d4:2d:86:7a:84:67:cc:8c:f1:a7:16:14:a1:3f:77:
         b4:67:9b:5e:f1:0d:07:17:90:30:55:c2:65:92:2b:23:d3:47:
         b2:d2:01:96:87:56:9b:11:e6:26:57:87:02:9a:00:51:cd:a0:
         86:1c:0e:b2:d4:06:84:72:df:d7:5a:01:78:e0:95:64:11:d5:
         df:aa:10:87:35:a2:a7:97:40:b4:f9:99:af:c3:22:24:b2:8b:
         a4:78:42:11:14:ae:7f:04:25:6b:6e:2a:3c:01:07:0e:8b:11:
         a7:cf:38:37:63:ec:c7:6b:c8:02:09:99:f9:c9:7b:39:b4:03:
         ef:a3:f5:65:d3:a4:4a:7b:51:5b:7c:ed:ad:92:c5:bd:18:b5:
         9a:b1:4e:6d:aa:54:5b:7f:a8:bd:b1:d0:10:4b:d5:82:78:00:
         dd:ec:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org