Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HbKrzgfQVYF73I3jkWmJ1LE7J94.roa
File:                     HbKrzgfQVYF73I3jkWmJ1LE7J94.roa (raw, json)
Hash identifier:          yyuyYiDB8TpCyK6mnbHiGdv4HLEQ2IG2ju3hJunxxT8=
Subject key identifier:   1D:B2:AB:CE:07:D0:55:81:7B:DC:8D:E3:91:69:89:D4:B1:3B:27:DE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       BC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HbKrzgfQVYF73I3jkWmJ1LE7J94.roa
Signing time:             Mon 24 Oct 2022 04:43:00 +0000
ROA not before:           Mon 24 Oct 2022 04:43:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        219.117.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:43:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=1DB2ABCE07D055817BDC8DE3916989D4B13B27DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:2c:0c:27:22:b2:91:0d:72:03:3a:93:52:
                    23:68:86:a7:c0:e0:4e:5e:38:a5:60:6c:b8:14:fd:
                    04:bd:2e:62:22:2d:83:7e:21:36:cc:ba:8b:73:c3:
                    c7:64:9c:90:ec:b9:79:11:bd:ce:e8:eb:28:5e:f9:
                    ff:8a:01:9d:06:00:c1:0b:c6:94:52:5d:b6:1e:1f:
                    1e:40:5f:cb:da:56:c5:72:39:5a:cb:52:5d:66:71:
                    40:fb:49:4e:bb:09:84:40:eb:b9:01:41:99:56:67:
                    70:d8:39:83:19:1e:49:30:14:d7:56:05:78:04:ec:
                    5e:b4:33:65:6f:7c:1f:bc:e0:ed:8d:12:b0:6c:f4:
                    80:71:23:4c:e1:80:d3:b8:1a:81:d2:e8:99:54:79:
                    b1:ff:d1:d1:1d:02:d7:eb:7e:7e:41:53:30:47:a1:
                    91:54:9e:ee:c4:d4:bd:2b:2a:95:01:fe:81:5b:12:
                    5a:1f:b8:cb:ac:00:8d:d1:0c:a6:76:3c:f9:ea:47:
                    9f:df:ce:31:79:dc:73:4d:92:5a:7f:c7:40:10:76:
                    ea:f9:73:8b:8c:d4:43:69:11:4f:6c:a0:56:2c:38:
                    3a:39:53:30:c7:c2:c4:a5:40:5e:3a:6e:81:be:4b:
                    e3:c2:77:3a:4a:24:f0:0d:b8:e8:10:cb:e9:17:55:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:AB:CE:07:D0:55:81:7B:DC:8D:E3:91:69:89:D4:B1:3B:27:DE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HbKrzgfQVYF73I3jkWmJ1LE7J94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:8f:4f:37:aa:3f:53:20:18:38:e0:30:5a:cc:56:35:93:d4:
         0a:0f:67:d8:f1:8c:d6:08:d6:e9:0b:3b:81:b0:0f:68:1a:ad:
         5c:14:76:9c:26:3b:3b:f6:87:f8:0a:98:3f:47:b5:dd:0d:46:
         72:48:1c:b4:bc:54:28:d5:0e:28:59:97:e9:cc:25:1d:a0:53:
         04:9f:75:2b:26:ad:d1:85:42:1c:85:a3:54:8d:f8:c1:30:9e:
         af:ef:41:24:90:8e:12:3c:7c:0b:02:9b:88:6e:46:d2:14:96:
         39:a5:1a:fb:c5:38:de:ae:58:d9:ac:94:ee:d6:8d:e5:15:76:
         c7:55:4a:26:10:56:85:25:30:79:72:15:2e:06:5d:3f:11:e8:
         bb:b4:4d:2b:c9:94:c9:48:f2:9e:a8:19:97:4b:96:a0:b1:6e:
         51:f9:f4:cd:d0:37:50:77:2e:b0:18:29:03:a4:ce:19:24:fe:
         2e:95:98:c4:a8:2c:e3:ab:91:31:04:41:1a:8f:b9:3b:d6:27:
         29:af:a7:ff:fc:5f:32:c7:9d:a7:05:c7:b0:0c:cd:52:c8:9e:
         5d:76:77:93:34:41:a6:ad:90:14:2d:8d:d2:34:e3:c8:6d:a8:
         ee:de:4a:c5:1b:38:55:54:41:b7:7e:d9:2e:67:c5:f4:d8:5b:
         69:42:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org