Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/K5ZkPuElr3p29tJp26UBDGAHvZM.roa
File:                     K5ZkPuElr3p29tJp26UBDGAHvZM.roa (raw, json)
Hash identifier:          v8rUX1ngRXjbQ3HonI10G9K5x0f3ZvgstnuwzUUQkDU=
Subject key identifier:   2B:96:64:3E:E1:25:AF:7A:76:F6:D2:69:DB:A5:01:0C:60:07:BD:93
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       65
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K5ZkPuElr3p29tJp26UBDGAHvZM.roa
Signing time:             Mon 17 Oct 2022 02:27:43 +0000
ROA not before:           Mon 17 Oct 2022 02:27:43 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        110.172.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:27:43 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2B96643EE125AF7A76F6D269DBA5010C6007BD93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:70:e2:36:72:a9:d1:a1:29:56:0f:ba:f0:
                    3a:5d:9c:c5:2e:02:46:c0:34:ef:9e:45:5c:4b:bb:
                    43:f8:f4:52:f5:2d:4d:3c:62:d5:23:3f:5b:33:fc:
                    08:26:3d:7a:a4:29:10:58:a1:ca:68:3c:2d:d7:39:
                    cc:4b:0a:d2:e1:f8:6f:34:fb:4b:4b:6d:00:39:4b:
                    d7:52:e1:01:3a:80:2b:c7:f4:01:19:33:3b:93:c1:
                    f8:60:ef:6a:13:91:89:f8:d4:f0:ca:39:fc:71:68:
                    07:3f:7b:87:a4:53:98:6d:1b:74:77:8e:5a:55:a5:
                    d1:4f:78:5a:8d:c2:38:54:41:ac:3d:8b:1f:d8:57:
                    a9:c6:74:ae:59:d8:0d:5f:67:1f:09:02:42:f4:0a:
                    66:d7:bd:bc:94:61:0f:a2:db:b6:67:b8:0b:1b:7f:
                    e6:40:4f:0d:e5:e6:e9:5a:f8:61:2e:ec:30:ca:73:
                    33:d1:b0:aa:19:30:47:76:f6:a3:aa:58:ed:ed:3a:
                    6c:c3:2e:2c:04:bd:41:86:2f:ea:84:c3:da:6a:f3:
                    75:eb:d7:3d:14:a1:bd:da:7d:a4:6f:0b:ad:92:3a:
                    d4:ae:1e:11:26:a6:f0:06:90:11:bb:3b:9d:93:68:
                    d9:60:07:f2:db:c9:11:40:22:e1:67:c0:31:e9:75:
                    64:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:96:64:3E:E1:25:AF:7A:76:F6:D2:69:DB:A5:01:0C:60:07:BD:93
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K5ZkPuElr3p29tJp26UBDGAHvZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:68:3f:4c:15:b7:fc:26:57:73:ea:14:5c:bc:58:b3:34:2c:
         ff:18:ef:df:80:5e:62:68:c4:91:25:c4:56:8b:dc:62:3d:10:
         2e:88:81:a0:26:10:b1:d2:e4:c5:d8:18:a4:45:1c:fd:62:a6:
         21:b6:3c:d9:fb:1c:68:f7:2c:77:67:53:8c:81:6f:57:7a:ad:
         8d:6c:d9:ac:bf:dd:ab:08:d1:8f:d2:a9:2f:07:c3:c6:71:c2:
         06:b1:cd:53:3f:1f:3f:96:a0:67:d1:b8:3b:6c:a9:82:b8:c2:
         2d:22:28:85:5a:f7:6f:b9:0a:f9:25:e2:3a:da:56:e2:43:ad:
         bf:8f:89:d0:4f:6f:4c:0d:73:5a:f6:aa:a3:6b:1b:06:45:12:
         59:12:8c:71:31:ff:72:78:3d:d3:9e:d5:6f:9e:dc:3a:53:5e:
         01:0b:59:f8:f5:8d:17:c5:15:58:b2:ee:f1:f9:ca:c0:47:7d:
         91:a7:45:62:0d:44:54:ed:d6:e5:91:95:30:7a:62:af:ef:8c:
         6f:84:06:2b:3e:4c:68:89:31:10:28:8c:25:2b:a3:3f:bd:ef:
         17:e2:12:9b:e5:58:78:81:84:63:b8:64:7c:5f:be:17:07:3c:
         49:ea:c4:72:84:ca:e9:0e:28:12:29:fb:c4:e9:eb:5e:94:bb:
         d8:2e:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org