Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LYH3nunu4t0TLUs_qJ-6rsZOKkk.roa
File:                     LYH3nunu4t0TLUs_qJ-6rsZOKkk.roa (raw, json)
Hash identifier:          3j9Lij82ncoBMT3kiWZI9ZJotZ4axllXDyLByZl0Fvk=
Subject key identifier:   2D:81:F7:9E:E9:EE:E2:DD:13:2D:4B:3F:A8:9F:BA:AE:C6:4E:2A:49
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LYH3nunu4t0TLUs_qJ-6rsZOKkk.roa
Signing time:             Mon 24 Oct 2022 04:12:53 +0000
ROA not before:           Mon 24 Oct 2022 04:12:53 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        182.50.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:12:53 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2D81F79EE9EEE2DD132D4B3FA89FBAAEC64E2A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:61:57:30:4a:05:2a:3c:89:04:77:18:6b:
                    51:a0:0f:b2:3d:1d:e5:4a:b5:ca:f4:af:e3:23:7e:
                    e2:28:87:7f:9d:00:32:87:82:38:d5:b2:1a:be:0d:
                    07:46:8b:2d:88:ad:62:bd:7e:ca:51:d9:56:42:f8:
                    09:49:1e:e9:40:d7:d0:30:d1:da:3c:e8:7e:3b:f8:
                    6f:57:68:85:5e:d4:98:0e:bb:29:02:76:e6:6a:cf:
                    da:0d:2c:80:fe:73:b9:fc:be:75:a8:69:0a:8a:4f:
                    69:19:96:fb:be:e7:2f:c6:1f:a2:60:21:62:28:1f:
                    6f:f8:2d:10:44:8e:a9:25:24:46:5f:d7:22:6d:89:
                    fc:59:15:58:44:59:05:07:e3:36:df:ce:80:9d:87:
                    21:37:bc:d8:85:07:42:fd:77:17:53:fa:7a:3f:b4:
                    25:3f:31:e9:a2:d4:ec:6a:cf:2e:59:c9:f5:b6:29:
                    a1:60:d9:ee:52:90:28:a7:71:75:fa:d6:1c:af:28:
                    ca:1a:22:00:38:c3:f2:62:d5:63:f4:49:66:76:2d:
                    00:d0:ec:a5:28:40:22:f0:e7:61:f1:85:91:5e:05:
                    4c:cb:5c:ee:0c:ca:8f:81:6a:e3:45:79:1f:a1:e6:
                    77:5a:a2:a3:9b:ea:82:6c:1e:4e:3b:e7:6f:a4:97:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:81:F7:9E:E9:EE:E2:DD:13:2D:4B:3F:A8:9F:BA:AE:C6:4E:2A:49
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LYH3nunu4t0TLUs_qJ-6rsZOKkk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:d5:e8:31:44:ff:cb:35:18:b8:84:e2:e4:9f:6c:98:39:17:
         21:0c:ab:8d:cd:3b:3c:21:ac:e2:48:68:c7:53:dc:1c:90:ce:
         ba:77:0c:2d:43:49:ae:34:75:c6:81:c4:3e:f5:39:92:84:4c:
         54:e5:c7:98:8f:cf:58:88:de:0a:a4:17:a5:b4:0b:97:ea:ac:
         e1:2a:fc:2c:cb:ee:4f:fb:b6:ef:d0:58:4a:21:50:a0:4f:7d:
         a7:27:26:7c:de:3d:05:78:d5:3b:8a:0c:41:52:35:e0:87:92:
         de:bb:b9:eb:7a:60:17:e4:31:28:33:f2:87:a2:e7:21:cf:ae:
         e8:c7:40:d8:2b:8b:2d:ac:c7:c6:0b:57:72:4b:b1:53:4f:5a:
         05:8a:a9:5a:59:84:c7:58:76:fe:36:3c:72:b4:6f:ea:0f:78:
         99:24:87:42:a5:81:23:86:62:32:c1:5a:1f:18:08:e3:a0:4a:
         82:be:5a:24:20:49:2c:34:4f:57:59:17:dc:21:f3:a8:27:6c:
         f3:8d:96:54:a8:82:a8:87:d3:b9:08:60:27:87:78:33:88:8a:
         21:09:36:e7:56:e6:09:e6:7a:c2:2b:1d:66:ba:12:12:b2:b5:
         d4:c7:bf:5d:63:24:bc:a5:48:92:b5:c0:09:e0:05:2f:92:d8:
         6f:4c:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org