Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Mn6WiuF4RbpPCdQAyew5WhGmpL0.roa
File:                     Mn6WiuF4RbpPCdQAyew5WhGmpL0.roa (raw, json)
Hash identifier:          du0TJj8kXaIZ9DgNyWOI6ODAe7bOQfUDIZjq1f8JPF0=
Subject key identifier:   32:7E:96:8A:E1:78:45:BA:4F:09:D4:00:C9:EC:39:5A:11:A6:A4:BD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       76
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Mn6WiuF4RbpPCdQAyew5WhGmpL0.roa
Signing time:             Mon 17 Oct 2022 02:54:13 +0000
ROA not before:           Mon 17 Oct 2022 02:54:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        210.2.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:54:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=327E968AE17845BA4F09D400C9EC395A11A6A4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fe:b3:0b:5d:48:48:b1:82:8c:58:08:9b:ce:
                    83:23:8b:e4:06:fb:b4:b3:ba:27:8a:10:88:30:b9:
                    f7:f7:11:a9:4a:eb:53:07:d8:4a:d1:12:9d:04:69:
                    a3:21:d5:eb:70:ac:12:6c:a6:6e:58:46:ca:97:39:
                    83:89:e0:8d:75:29:2f:bd:99:d3:c5:df:6d:f1:08:
                    bb:24:b0:92:91:ac:5e:29:0c:a9:29:a8:fb:b5:ec:
                    fe:5a:a7:ee:a2:64:26:ab:ba:c1:6c:35:d7:a3:d2:
                    58:99:68:b4:0e:dc:30:c3:33:0b:10:d7:d5:8c:68:
                    63:88:f8:82:8a:d9:c2:67:e3:bf:c0:fe:f0:f1:f4:
                    ca:2a:fa:34:a6:67:b9:e7:eb:40:de:b1:51:2a:e6:
                    51:42:ec:0f:cb:18:f5:b9:29:a9:81:2c:2b:2f:2c:
                    86:81:a1:cf:dc:2c:f2:74:13:83:85:ec:82:39:cf:
                    c7:35:30:97:92:7d:5d:29:a3:4d:4b:54:d4:cc:b7:
                    64:35:53:aa:90:83:69:28:0c:4c:db:59:ff:66:e3:
                    78:97:8b:96:c6:82:25:ff:8b:c6:5d:e6:db:e2:57:
                    27:cd:2b:ff:65:cd:8d:86:27:f0:ec:b8:e5:b6:61:
                    6a:27:1b:35:6d:36:85:67:a1:9d:6a:b1:87:e6:fa:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:96:8A:E1:78:45:BA:4F:09:D4:00:C9:EC:39:5A:11:A6:A4:BD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Mn6WiuF4RbpPCdQAyew5WhGmpL0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.2.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:42:0b:cc:78:81:c3:be:b2:9e:98:ad:30:f8:f0:62:9b:50:
         f8:c5:4f:35:75:24:e3:0e:a6:b8:1d:12:61:87:8e:f6:0d:c6:
         51:1c:54:88:42:18:29:15:64:d0:8b:ca:95:88:53:ff:e9:10:
         ab:7b:0c:cb:67:86:c7:ec:14:c0:b0:fa:8c:27:91:83:ab:06:
         f8:f2:8b:cc:a6:48:7d:fc:33:c4:e6:e9:80:8e:8b:0e:d6:1f:
         cb:0d:9c:a9:5f:55:fa:be:f8:c6:be:04:f6:57:a7:f0:ca:49:
         6a:02:e0:32:68:47:37:f8:76:ef:33:cd:cf:39:fd:62:89:51:
         05:47:d5:23:ab:58:a1:a0:b7:6c:d4:3a:3e:43:28:a1:56:c6:
         2f:86:a8:59:23:c2:30:8e:66:fe:e8:ac:8e:be:7f:92:59:10:
         cd:6d:cb:0a:e9:83:5d:94:72:fa:3d:77:b1:d5:61:fa:76:20:
         61:d6:8c:2c:dc:1b:8f:dc:78:81:4d:06:a0:7e:3e:52:b1:93:
         67:13:94:18:be:2c:0f:65:7e:06:35:ef:dd:31:25:98:86:6e:
         dd:43:83:44:50:44:70:f9:52:2d:1a:48:d6:c1:b5:72:d2:bb:
         a4:63:e6:b2:9a:d4:90:55:39:55:11:7f:e3:29:ac:1b:ca:2e:
         ae:47:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org