Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LUi8uRMrbjYCOlCXDl9DYnTGhhU.roa
File:                     LUi8uRMrbjYCOlCXDl9DYnTGhhU.roa (raw, json)
Hash identifier:          /qGRKF2Wc8aBbnbIyhlW6zZttA2KtxRW3jeLIL/X1LU=
Subject key identifier:   2D:48:BC:B9:13:2B:6E:36:02:3A:50:97:0E:5F:43:62:74:C6:86:15
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       B8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LUi8uRMrbjYCOlCXDl9DYnTGhhU.roa
Signing time:             Mon 24 Oct 2022 04:38:54 +0000
ROA not before:           Mon 24 Oct 2022 04:38:54 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        219.112.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:38:54 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2D48BCB9132B6E36023A50970E5F436274C68615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:3a:fa:e4:ad:87:4a:9c:8e:fd:11:27:5d:
                    09:b7:20:14:6f:c1:a7:90:48:b7:d7:3b:65:9e:0a:
                    d4:2b:de:4f:7b:fc:e1:73:8b:b9:ac:ca:d8:23:dc:
                    6f:ab:1f:63:89:33:79:a7:fe:b3:b5:77:52:c5:12:
                    89:6d:4d:5c:52:0f:8a:7a:0d:01:d5:15:05:58:d6:
                    b4:d7:83:47:59:37:16:33:e6:e9:99:c6:3a:4f:e4:
                    30:0f:53:3b:93:51:4d:26:0e:70:5f:ec:e6:40:dc:
                    9a:2f:9f:cd:57:44:01:75:31:e6:a0:a8:34:d2:e9:
                    7b:8b:77:b6:d0:ec:50:2b:76:08:d5:26:2a:e7:22:
                    7e:9d:36:84:f2:86:9f:3a:22:4c:b1:ad:b5:43:4f:
                    0e:72:7d:81:f1:aa:d9:3d:3e:93:64:21:34:70:f2:
                    04:e5:52:f1:e9:92:87:c4:61:de:cc:9f:85:81:69:
                    93:d6:31:f4:f1:5b:35:eb:83:8d:45:9a:4a:0a:ed:
                    59:06:74:35:f4:d9:be:78:86:95:ea:11:fd:57:fa:
                    06:ad:4d:a1:80:ce:93:b5:bd:eb:da:03:46:70:d0:
                    00:d6:ed:dd:46:4e:1b:87:f0:eb:ee:f8:b0:8b:2d:
                    2d:8c:05:88:75:5d:9a:41:98:94:90:0b:6e:ba:10:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:BC:B9:13:2B:6E:36:02:3A:50:97:0E:5F:43:62:74:C6:86:15
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LUi8uRMrbjYCOlCXDl9DYnTGhhU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:d4:20:55:86:da:60:6a:a5:27:2a:8f:96:fa:16:61:9c:
         3e:bc:15:5c:00:18:f9:22:10:3c:bf:01:2a:50:50:f9:70:7c:
         9f:57:02:5b:3a:cf:e4:f6:37:58:a5:48:f5:0c:1c:bf:78:1b:
         35:d9:a0:72:3f:0f:f5:09:d6:f4:16:52:42:32:48:56:41:ae:
         cb:60:c5:a6:86:bb:21:b1:74:fc:03:2e:d6:f7:2f:0f:9b:13:
         77:95:05:bc:2c:38:5e:90:31:e1:ae:6a:64:ad:70:52:6a:9f:
         04:a2:94:c6:71:2c:33:3a:cc:f2:da:67:9d:3c:b8:5f:f3:a3:
         28:2f:35:4e:71:a3:09:93:55:63:50:c2:4e:0a:1a:17:50:d1:
         ca:33:74:f9:a9:c3:f1:e9:e0:91:d4:2f:57:35:17:37:79:52:
         ef:25:86:fa:98:4f:d1:96:1e:79:79:89:c1:60:c4:4c:53:dd:
         92:73:d7:70:66:2d:d3:54:21:fa:db:48:db:be:c1:cb:4e:78:
         c6:dd:89:c7:e8:3e:2c:52:f7:bc:b9:85:95:00:6c:a3:89:a5:
         fb:82:28:54:f4:c1:f8:f4:c4:4c:c8:ae:de:70:dc:c6:2f:15:
         4f:48:e7:cb:79:a5:05:c3:55:5d:58:e6:d2:69:2e:0e:71:1d:
         95:bd:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org