Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/L7w9agKGK7fqr6VC-vY4Qz83xek.roa
File:                     L7w9agKGK7fqr6VC-vY4Qz83xek.roa (raw, json)
Hash identifier:          Z/naicIMR6z6VXZFRO6v7Kan8V+LghANW/VCGh4/65w=
Subject key identifier:   2F:BC:3D:6A:02:86:2B:B7:EA:AF:A5:42:FA:F6:38:43:3F:37:C5:E9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       55
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/L7w9agKGK7fqr6VC-vY4Qz83xek.roa
Signing time:             Mon 17 Oct 2022 02:03:43 +0000
ROA not before:           Mon 17 Oct 2022 02:03:43 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.57.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:03:43 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2FBC3D6A02862BB7EAAFA542FAF638433F37C5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:e6:0c:ea:91:e1:69:79:bb:8b:53:b8:cb:
                    52:a7:49:7e:65:6e:14:2f:ad:7b:f5:26:fe:b7:c6:
                    87:2b:c7:fc:63:78:32:d8:84:0d:9c:28:b8:2d:fd:
                    50:58:ca:87:e3:a5:4a:63:7a:4f:eb:ff:13:c9:45:
                    07:e3:65:2c:3b:5a:fb:a7:30:95:51:51:b1:bb:9c:
                    09:05:51:79:a1:6e:22:b1:bd:39:71:43:fa:bf:e3:
                    75:e4:83:dd:a0:c7:44:b0:4f:09:74:38:96:6e:55:
                    c2:60:79:bf:72:af:45:ba:b3:70:c9:bb:2a:62:3d:
                    99:b8:48:b2:45:78:ca:c2:ee:ae:2e:cb:e0:9d:21:
                    e7:74:b3:77:17:4e:ca:fa:5e:85:cc:2e:fd:82:b4:
                    44:c7:38:b1:30:32:f2:db:03:7b:86:b5:35:19:f0:
                    88:ef:ab:29:fa:a6:06:c5:bd:5b:f6:3a:cb:c6:da:
                    a2:c5:67:b9:de:e3:75:8b:27:35:bc:2b:08:43:30:
                    4e:38:b5:cc:14:f9:bd:67:60:89:d7:e6:25:50:34:
                    a1:11:7c:55:0c:47:0a:bf:c8:07:aa:be:e2:a1:85:
                    a1:53:72:85:6c:91:69:b7:67:18:16:08:9a:22:c9:
                    db:7f:c3:52:79:23:47:29:b3:91:35:18:84:3c:b4:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BC:3D:6A:02:86:2B:B7:EA:AF:A5:42:FA:F6:38:43:3F:37:C5:E9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/L7w9agKGK7fqr6VC-vY4Qz83xek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e3:ef:18:6f:13:f8:e0:d6:c9:5c:bf:34:cd:a1:cb:ea:d5:f0:
         38:4b:fd:09:08:52:04:90:78:21:fe:52:3b:c4:42:04:14:7e:
         82:57:75:c1:72:45:41:65:d0:e0:08:ff:39:5e:64:e7:6f:70:
         c1:5b:2f:8e:ca:c5:4a:ab:7e:b5:d0:eb:76:4a:b4:d7:50:34:
         5c:7c:4a:37:b5:0c:34:c2:31:61:c6:71:87:8f:32:f3:a8:dd:
         ef:06:69:0e:e8:fe:71:e4:2d:d1:62:26:ba:4c:a7:15:64:51:
         b5:20:42:11:d2:7f:c3:df:7f:b2:c1:24:aa:45:15:c9:71:ea:
         cd:11:45:70:0c:78:77:62:53:55:0e:00:9a:f2:91:15:9c:ce:
         86:3e:26:48:f9:0a:53:e4:8f:59:0a:67:f7:e1:a0:fc:a5:60:
         32:66:c6:e0:08:5b:d0:c4:7e:df:69:46:55:d1:05:a0:b7:2a:
         2e:e3:ba:1f:01:89:86:c1:48:9f:77:74:d4:8f:98:bb:16:5e:
         ca:c8:8b:f7:99:13:bc:ab:24:68:92:81:b9:c2:f4:50:ab:59:
         bc:60:f2:4a:68:9b:8d:56:be:79:da:fb:12:ea:d0:8b:4d:f3:
         b9:3c:8f:96:9d:0f:4e:cd:04:33:cf:ff:8a:14:87:25:b6:81:
         ef:79:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org