Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NPInI7E7qnk3NGRv0pgAQzm2jIQ.roa
File:                     NPInI7E7qnk3NGRv0pgAQzm2jIQ.roa (raw, json)
Hash identifier:          s89fffb4pzOKJ0ghAwVk4LVmYpTzqq1We/4vjzQFZ/s=
Subject key identifier:   34:F2:27:23:B1:3B:AA:79:37:34:64:6F:D2:98:00:43:39:B6:8C:84
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       BF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NPInI7E7qnk3NGRv0pgAQzm2jIQ.roa
Signing time:             Mon 24 Oct 2022 04:46:58 +0000
ROA not before:           Mon 24 Oct 2022 04:46:58 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        219.124.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:46:58 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=34F22723B13BAA793734646FD298004339B68C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:38:91:65:a2:30:2d:e5:d9:83:5d:a5:64:
                    d4:d7:3b:e4:c2:a6:78:00:83:6e:6b:5b:77:54:76:
                    5d:f8:69:54:74:12:be:49:2b:60:d9:c8:28:bb:52:
                    35:2d:f5:b0:db:0e:1b:cf:92:87:05:6c:45:67:28:
                    89:d3:2d:58:c7:1c:f5:4f:92:ba:7c:1d:5f:0b:41:
                    8f:c7:b7:04:23:0e:a8:c5:2e:de:17:fe:8d:b3:99:
                    14:a1:a9:9f:41:b8:84:20:f5:59:e6:04:9b:71:01:
                    76:91:18:90:89:64:9e:80:38:b1:be:e9:b6:30:10:
                    e7:0b:36:3d:6c:c3:eb:d6:ec:b4:46:f6:ed:90:4d:
                    76:4d:50:80:27:74:c5:76:03:11:6f:e9:fc:a4:a1:
                    6e:d6:8b:fe:22:5f:38:b1:47:b1:bc:ef:12:86:e2:
                    f8:d0:61:94:22:53:de:17:46:7a:8d:61:94:71:0e:
                    d7:cc:25:d3:d9:13:3c:f2:b9:03:3e:38:de:f2:28:
                    83:14:bb:00:98:60:a3:0d:47:80:80:84:70:c0:ea:
                    c0:fb:56:00:db:a7:2a:2e:b7:00:ff:6c:79:6f:c7:
                    ab:73:06:e5:d9:47:2e:c3:6f:d0:ae:d6:62:fe:9b:
                    9d:39:a5:9a:12:04:f7:f3:77:2e:ae:55:94:15:19:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:27:23:B1:3B:AA:79:37:34:64:6F:D2:98:00:43:39:B6:8C:84
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NPInI7E7qnk3NGRv0pgAQzm2jIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:58:cc:35:27:36:25:3d:34:80:94:77:04:05:62:06:94:86:
         84:68:bf:2f:71:c1:0a:27:62:55:90:06:eb:85:d6:54:63:06:
         c3:f6:a7:fd:5f:d4:d2:30:c4:29:fa:78:25:14:44:31:9f:f9:
         c9:36:13:5c:f2:3b:fb:2f:a6:fe:20:c4:43:c9:9f:29:3e:13:
         91:91:d3:b8:8f:17:d8:1b:28:e3:b7:97:85:c8:f7:b0:73:93:
         96:04:87:96:3c:6f:01:5e:ba:f1:91:de:f9:b2:6e:ba:25:b9:
         3b:00:36:48:4d:9b:99:cb:ee:93:89:18:74:e9:76:12:75:62:
         3f:51:03:dc:33:f9:e5:e7:ee:55:81:00:3e:3a:6b:b0:a6:3a:
         c6:14:09:6e:e2:08:44:bc:5d:ce:22:49:dc:44:d9:db:c5:9f:
         68:95:6a:ae:98:e1:2a:b8:31:22:f6:2f:0b:59:38:c2:8f:a0:
         58:4f:d7:57:7e:54:70:87:04:23:b2:ff:56:9b:d6:be:45:cd:
         93:16:8c:45:a1:42:b8:79:40:dc:bf:0f:2d:0e:c9:a5:a9:7d:
         15:30:3b:e8:38:d2:c6:c7:30:10:56:85:2c:94:34:75:ae:98:
         e1:4a:c1:e5:4e:44:55:2c:a7:b2:71:ae:74:f6:90:d5:b2:7d:
         33:06:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org