Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LB3Bz5sUnV7DfcOf4oJBVEViiKE.roa
File:                     LB3Bz5sUnV7DfcOf4oJBVEViiKE.roa (raw, json)
Hash identifier:          /Bc/Kxqm2uG/5GToe+nEGepD+/M+9Y9xg9sh5ACtByY=
Subject key identifier:   2C:1D:C1:CF:9B:14:9D:5E:C3:7D:C3:9F:E2:82:41:54:45:62:88:A1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       30
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LB3Bz5sUnV7DfcOf4oJBVEViiKE.roa
Signing time:             Tue 11 Oct 2022 01:54:03 +0000
ROA not before:           Tue 11 Oct 2022 01:54:03 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        103.192.68.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:54:03 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=2C1DC1CF9B149D5EC37DC39FE2824154456288A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:07:bb:d9:07:70:4a:f1:9d:5f:7f:9d:58:
                    b5:89:e4:dc:cd:b7:37:55:f2:ac:ae:1f:87:87:67:
                    3c:89:bd:31:84:e5:11:60:a4:1a:01:30:e1:ab:89:
                    8e:90:35:1d:f3:e6:4f:26:a0:07:71:5e:49:6a:6c:
                    33:a8:76:d9:d1:92:f6:21:1f:f6:17:1d:ba:4f:00:
                    20:b0:fc:4a:29:85:87:7f:ae:27:4a:19:9d:16:b6:
                    44:1f:5f:1f:2c:6f:ca:30:34:7f:f1:9e:4b:1b:45:
                    8d:1e:db:f8:fa:33:e8:4e:e9:6c:86:15:e9:6a:91:
                    89:e1:6d:83:1b:c9:f7:f5:2a:6a:33:ef:95:ac:fc:
                    9e:d7:00:2b:f1:11:59:65:7a:fd:2f:10:ac:39:d9:
                    e6:44:75:f6:81:6a:fa:ad:52:04:00:bc:5f:68:ca:
                    41:53:aa:d8:37:2b:d7:c5:41:ee:0a:3e:6e:c0:b3:
                    06:24:a7:25:9a:18:8a:f0:e0:da:24:63:1b:28:70:
                    fa:89:2e:55:26:63:6f:ce:9c:66:8e:59:e4:c1:75:
                    e5:59:23:e6:be:9f:99:80:18:fe:2b:d3:76:40:c0:
                    04:1c:a1:70:0e:83:1a:05:90:90:31:25:42:21:ea:
                    9b:c6:af:80:8b:d0:d4:00:66:df:62:4e:67:2f:ce:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1D:C1:CF:9B:14:9D:5E:C3:7D:C3:9F:E2:82:41:54:45:62:88:A1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LB3Bz5sUnV7DfcOf4oJBVEViiKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:d8:59:95:9c:87:fb:8e:8e:b2:a8:95:cf:ed:0d:15:03:09:
         60:ed:d2:e9:26:78:2f:01:fa:a3:be:8f:8e:dd:9e:ef:ac:c4:
         73:59:0c:ad:ef:59:82:cb:54:cd:fe:51:69:92:bb:fd:c9:43:
         ac:30:a1:f1:7d:2e:61:ad:c0:11:b5:af:ba:d4:d2:69:2d:39:
         a3:35:6c:01:04:37:24:e9:c5:0a:1f:00:30:4f:8b:31:1f:3e:
         82:a4:7b:04:56:56:fd:f0:0c:1b:89:cc:d3:e5:87:9d:1e:75:
         c0:a8:c7:58:61:c3:83:5f:e0:3a:f0:98:90:54:5c:41:d9:57:
         93:3d:88:91:72:59:6b:d8:f0:35:c5:04:d8:71:9b:ce:86:9a:
         85:72:19:c9:a1:90:96:02:b0:78:50:45:62:ba:20:bc:7d:66:
         b3:91:f2:7c:99:ca:f3:a3:00:1a:72:9f:57:93:f8:f2:e0:57:
         7e:89:69:8d:15:0b:99:67:d1:3f:fe:b1:3f:bc:83:c3:5f:0a:
         bd:91:6a:23:bf:4b:4e:00:70:2d:39:b0:e6:cb:40:99:cb:a9:
         02:47:3b:40:11:0f:98:31:8e:68:2c:9e:50:b1:18:5a:7c:eb:
         bf:99:a6:bf:36:00:0f:bb:13:fd:0a:2e:95:c9:af:34:c8:3c:
         41:97:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org