Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/IjzYpuwF6cP2dl7TrkOcwVUiAL8.roa
File:                     IjzYpuwF6cP2dl7TrkOcwVUiAL8.roa (raw, json)
Hash identifier:          U9gmVdl22Bip4K6FlcvEaILWQaaVJz0AgSU86Bg6MpI=
Subject key identifier:   22:3C:D8:A6:EC:05:E9:C3:F6:76:5E:D3:AE:43:9C:C1:55:22:00:BF
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       82
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/IjzYpuwF6cP2dl7TrkOcwVUiAL8.roa
Signing time:             Mon 24 Oct 2022 02:30:32 +0000
ROA not before:           Mon 24 Oct 2022 02:30:32 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        110.92.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:30:32 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=223CD8A6EC05E9C3F6765ED3AE439CC1552200BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:ca:b7:45:68:21:61:20:f7:c6:24:d4:4c:
                    76:32:d6:e6:cf:48:ee:2a:2b:ed:e1:61:88:71:03:
                    2c:12:00:d6:fc:ba:28:d8:80:33:7d:f7:69:04:5f:
                    9f:79:e8:73:b3:15:6a:a2:15:f5:02:4a:42:b8:31:
                    d1:73:04:d2:53:22:1d:67:3d:5a:8d:ae:51:b7:f0:
                    0f:a1:58:5e:67:75:fe:44:b3:fa:33:3c:f9:fc:5f:
                    e9:71:20:6b:5d:b9:fe:ea:4c:6e:e2:af:c0:c3:b0:
                    a9:19:93:88:02:38:6b:c8:95:f6:6f:46:f7:4e:d4:
                    b0:91:99:b7:cb:b2:6b:2c:d7:15:8e:5d:38:2e:74:
                    35:17:6f:d0:52:40:bc:14:aa:3f:9b:6c:6b:04:85:
                    3e:33:02:35:8f:f6:12:ae:5a:f1:6c:b9:7f:d3:ff:
                    6d:4b:b6:d2:53:fa:8e:bd:72:e4:c9:f1:9b:39:10:
                    a4:5a:5c:38:e1:cb:75:46:d0:b6:aa:14:bd:2d:22:
                    3b:13:c4:ff:f4:c8:b6:87:a1:bb:76:e6:2a:25:b7:
                    b5:45:69:ec:41:e1:8b:19:bf:15:e9:ac:5b:3e:84:
                    9b:52:50:7f:79:88:2b:be:b6:07:1c:b2:c7:46:6f:
                    db:8b:f1:15:5a:94:1f:57:75:71:c5:e2:ef:c3:01:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3C:D8:A6:EC:05:E9:C3:F6:76:5E:D3:AE:43:9C:C1:55:22:00:BF
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/IjzYpuwF6cP2dl7TrkOcwVUiAL8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:d7:44:e9:c9:39:f3:39:81:c9:a0:17:2f:82:c9:49:f2:
         f5:39:26:40:fe:eb:30:c1:a3:f0:4c:28:23:f6:be:08:0d:1e:
         cd:c8:dd:43:09:d6:bf:cd:1c:0a:b4:7b:2d:78:c7:c2:7d:21:
         a3:ef:02:12:1c:a6:8b:32:32:fe:b1:de:02:a3:12:51:8f:0e:
         b2:65:10:62:cf:a0:80:8f:3c:db:85:c1:dc:41:73:e7:3f:8b:
         37:0b:80:a6:44:02:9c:0d:90:a2:83:d9:52:fc:d5:cc:70:84:
         ae:39:9b:32:db:6a:5f:50:e8:78:7c:44:c7:2a:f1:a8:a7:0d:
         6c:5c:9b:46:e5:bb:9e:ff:6f:8d:71:0d:5d:ba:36:6f:bd:e4:
         1b:19:93:43:0e:72:e6:a0:ea:47:cd:98:b9:1b:18:3a:2a:4d:
         22:99:b0:02:45:76:69:0d:d8:8a:d7:aa:ac:99:60:69:e8:24:
         07:5c:94:69:9d:b5:0b:9d:cb:5d:96:cd:35:63:a4:41:f4:ab:
         ff:9d:fd:a9:d5:3e:10:ac:88:4b:ce:39:a9:05:e0:a3:67:7c:
         36:8a:60:aa:89:fd:03:2b:4a:0c:6f:e8:d6:fd:c5:f2:b3:5c:
         e7:f7:cc:ca:1a:e8:de:97:58:8f:3f:81:04:da:1b:38:e5:c5:
         c4:6c:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org