Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NAsUN22V9GsFbxR1cWb9gpOzfX8.roa
File:                     NAsUN22V9GsFbxR1cWb9gpOzfX8.roa (raw, json)
Hash identifier:          WZ15zevZHgT9X6gJ6SUO9gu9D0QwATvhNu1QON0RAjg=
Subject key identifier:   34:0B:14:37:6D:95:F4:6B:05:6F:14:75:71:66:FD:82:93:B3:7D:7F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       13
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NAsUN22V9GsFbxR1cWb9gpOzfX8.roa
Signing time:             Mon 03 Oct 2022 01:06:10 +0000
ROA not before:           Mon 03 Oct 2022 01:06:10 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        110.232.128.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  3 01:06:10 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=340B14376D95F46B056F14757166FD8293B37D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:02:94:63:29:b9:df:9d:57:82:91:4e:0e:
                    d1:ca:80:f6:a9:77:07:5b:5f:68:d1:fb:29:1d:2e:
                    81:2c:49:bb:80:e3:66:e2:79:3d:a2:65:cf:16:56:
                    aa:20:87:5d:02:9b:a4:8b:46:1b:db:ee:e9:55:40:
                    24:53:d5:18:cb:d9:79:62:49:8f:77:bf:0f:c3:2b:
                    21:87:e0:7f:8d:8e:4e:70:d8:56:50:f0:a3:bc:96:
                    ba:0d:d2:3f:0d:b9:27:06:5c:43:38:21:b8:6e:2c:
                    1b:c6:9c:62:1d:43:56:9f:31:57:16:7e:db:ad:83:
                    1b:1f:4b:5c:5e:1f:42:a5:5e:15:38:f7:ff:62:50:
                    52:d5:e7:fc:89:96:80:47:34:ea:36:47:e5:4d:e6:
                    95:1c:d0:e7:e8:b8:f8:2e:2c:79:df:3a:13:32:83:
                    58:df:d2:34:9f:32:a9:45:8e:cd:cf:9d:5e:d1:f3:
                    d4:82:4d:1d:ea:9b:88:d5:e2:a9:0e:4c:9d:20:1c:
                    31:de:de:94:a7:89:66:68:b3:1a:ce:3b:0c:fe:f9:
                    9a:12:62:30:65:88:8c:dd:35:7a:44:21:1b:ea:8f:
                    db:80:9e:22:e5:78:e0:01:e5:47:bb:2d:1e:d3:24:
                    8f:78:21:fd:df:1f:aa:17:60:72:7a:b1:ed:a8:e8:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0B:14:37:6D:95:F4:6B:05:6F:14:75:71:66:FD:82:93:B3:7D:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NAsUN22V9GsFbxR1cWb9gpOzfX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:fb:06:c5:be:0b:f3:55:81:39:c6:5e:f0:e4:c3:fe:81:
         1b:b2:2a:d5:d6:b7:de:48:81:5e:c5:25:4f:42:36:61:2d:e9:
         2e:39:72:17:fc:e0:b3:15:88:24:b1:fa:75:69:95:58:60:c5:
         75:97:9e:b6:4c:0f:35:b8:31:49:c5:bd:5d:4f:86:f8:37:7c:
         27:a0:25:37:68:fa:f0:a6:65:67:e8:eb:5a:e4:f7:cd:7f:9d:
         f7:9a:62:99:05:18:15:23:61:c0:e9:72:34:9a:bb:03:b2:fc:
         c7:ec:90:bf:6d:3d:13:1c:72:44:45:3e:27:ff:44:3f:fe:9c:
         a4:67:9c:fb:5f:d4:73:91:4d:e6:03:a5:64:55:6a:c8:b9:8e:
         f4:08:b3:7c:c5:af:b1:a6:3c:6c:60:70:56:05:06:32:a5:f5:
         fe:c5:1b:53:86:f3:1f:8f:97:4f:f4:a9:b0:dd:29:f2:f6:5a:
         ec:65:dd:0d:0b:3c:ed:9b:73:77:e5:17:95:ae:20:71:bd:b6:
         07:18:42:6f:57:db:de:64:e7:7b:49:47:12:86:af:7c:a0:c4:
         5a:1b:99:aa:ab:b6:5e:f3:ed:a2:78:64:ec:7b:a6:58:4d:4a:
         58:1b:3d:8b:d8:71:37:c9:7b:4e:03:a1:74:4b:cb:e1:3c:12:
         e1:14:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org