Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HkcaVI5jZd8O98OiKqU_PwWNPNw.roa
File:                     HkcaVI5jZd8O98OiKqU_PwWNPNw.roa (raw, json)
Hash identifier:          cnAW98uuvXdZ/jSXiao9oHY1cD+GMV9ZcpKbh9V34xg=
Subject key identifier:   1E:47:1A:54:8E:63:65:DF:0E:F7:C3:A2:2A:A5:3F:3F:05:8D:3C:DC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       39
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HkcaVI5jZd8O98OiKqU_PwWNPNw.roa
Signing time:             Mon 17 Oct 2022 01:19:45 +0000
ROA not before:           Mon 17 Oct 2022 01:19:45 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        210.228.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:19:45 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=1E471A548E6365DF0EF7C3A22AA53F3F058D3CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:b5:1e:c2:2f:0e:3b:ce:e5:c8:68:73:e8:
                    2b:45:92:6e:40:da:12:95:7d:41:fa:eb:5e:98:f1:
                    77:4d:61:49:75:53:d7:aa:92:de:5d:55:c5:43:24:
                    24:eb:f4:43:9a:5f:0c:b7:70:ae:82:48:83:ba:c6:
                    08:9c:dd:f5:ca:80:5b:d1:d6:6d:09:cd:7e:9a:92:
                    3f:e7:8e:92:ae:5b:0f:31:69:bb:47:00:6e:f5:a5:
                    29:f0:2f:f8:c7:66:22:05:83:56:87:21:7a:ec:ba:
                    da:9b:36:25:8a:56:70:93:4c:96:de:b4:02:80:02:
                    76:e9:d1:99:09:51:fa:17:d3:3b:01:e7:a4:78:b4:
                    bf:c9:5c:79:b9:ba:f1:04:e4:b6:56:b8:6e:8f:24:
                    8c:3d:9c:42:7d:b9:45:6d:e7:0b:e4:99:d5:b6:89:
                    4d:b2:9e:12:ed:05:48:c0:00:a7:72:9c:dc:e5:7d:
                    5e:6a:a5:50:95:63:68:89:2f:fc:ad:d7:73:5c:4d:
                    3d:38:24:44:ac:74:4b:6a:3a:46:23:85:74:05:b7:
                    92:73:16:1e:7d:9b:55:f3:f0:2d:1c:43:a9:1e:0c:
                    75:ec:f7:0b:93:00:18:16:3d:d7:14:9c:48:60:ae:
                    fb:43:a7:4e:9e:22:86:b6:85:be:35:20:87:f5:86:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:1A:54:8E:63:65:DF:0E:F7:C3:A2:2A:A5:3F:3F:05:8D:3C:DC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HkcaVI5jZd8O98OiKqU_PwWNPNw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:38:72:ea:d3:6d:ea:32:13:4a:04:ff:fd:74:6a:5a:f1:
         9b:c7:6f:8b:f8:56:ee:6c:ee:6c:37:b9:f9:38:37:23:6a:b2:
         55:d3:7a:0f:f6:36:c0:b7:aa:b0:ff:89:aa:2a:d5:ab:25:d1:
         11:47:ec:df:19:aa:8d:67:40:36:fd:4c:00:45:86:22:be:5d:
         f7:02:56:61:b6:ed:5d:01:29:ff:f4:ab:6a:74:9d:28:9c:ba:
         8f:1b:17:4a:7a:f9:9b:a4:7d:26:32:7a:e3:9b:4f:5d:23:cf:
         df:ef:63:09:40:dc:d0:52:26:08:80:b4:3a:22:79:67:80:b8:
         ff:b2:1e:40:06:4a:be:41:91:58:7e:d6:e5:e7:db:03:8d:d0:
         68:21:43:ef:f0:f3:36:76:c1:e5:80:9d:9d:6c:35:07:40:34:
         ef:c5:bc:8f:cd:5e:8a:3a:1d:ed:f1:95:b3:c8:bf:23:90:ff:
         62:bd:d5:35:26:0e:8e:0c:b0:7c:35:4e:b8:4a:33:66:56:f4:
         2e:a2:25:79:e1:ba:ee:95:2f:bf:a2:df:fd:72:90:cc:ec:20:
         d7:6f:61:97:2e:a2:59:c9:8f:1d:95:26:ce:60:1d:3e:aa:b7:
         8f:01:be:c1:cc:29:e2:db:e9:f4:0f:5d:64:c0:33:ee:64:c3:
         c8:99:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org