Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/O8zXJBaRiAcT_bxtvwLGNRIzbIw.roa
File:                     O8zXJBaRiAcT_bxtvwLGNRIzbIw.roa (raw, json)
Hash identifier:          lKquzdUnFDXH8/isSDH7WW9wq+7nW2E/KWCrF6nBrFY=
Subject key identifier:   3B:CC:D7:24:16:91:88:07:13:FD:BC:6D:BF:02:C6:35:12:33:6C:8C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       50
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/O8zXJBaRiAcT_bxtvwLGNRIzbIw.roa
Signing time:             Mon 17 Oct 2022 01:56:01 +0000
ROA not before:           Mon 17 Oct 2022 01:56:01 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18134
IP address blocks:        113.197.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:56:01 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=3BCCD7241691880713FDBC6DBF02C63512336C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:10:92:7e:33:b9:3c:71:99:64:be:02:1a:
                    da:57:ec:c8:19:21:af:22:19:b6:c7:46:1a:45:68:
                    fa:f8:72:15:55:78:cb:9f:e5:f5:13:c9:0e:73:f2:
                    f3:0e:03:3c:23:89:5f:c1:1e:25:dd:3c:35:0d:21:
                    8c:6e:7f:41:5a:c8:5b:52:b9:d0:a1:10:0e:a8:69:
                    29:64:0e:55:f5:9e:fa:f0:e5:ac:14:1f:f2:fd:26:
                    90:0d:5c:9d:c7:c2:14:e1:c5:c0:3c:be:f1:6a:fe:
                    21:fc:2b:ca:ef:62:26:72:ee:1c:5d:1e:76:d0:81:
                    da:70:7a:d8:47:35:5e:05:1a:28:ff:1a:3d:76:c7:
                    e5:f9:fa:bb:be:da:f8:89:67:06:52:c9:c1:39:da:
                    47:c3:36:c3:18:3d:23:32:6c:6c:4f:78:73:99:54:
                    af:a0:97:80:a7:4d:d0:28:a9:64:38:64:ce:ee:c9:
                    ba:13:b0:e4:84:1a:ed:a2:c4:f6:7c:3d:af:d7:a0:
                    8f:72:b3:32:d3:92:92:e1:b3:a4:78:88:a6:08:08:
                    5d:4e:41:63:bb:35:02:f2:63:d9:2c:f2:78:a5:e7:
                    3b:8e:1d:b9:7c:aa:24:26:1f:07:dd:ad:5b:7b:aa:
                    ba:2d:d7:61:e8:6a:84:b1:b4:63:15:8e:46:0e:ef:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CC:D7:24:16:91:88:07:13:FD:BC:6D:BF:02:C6:35:12:33:6C:8C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/O8zXJBaRiAcT_bxtvwLGNRIzbIw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:d8:25:5b:c7:85:03:ad:88:4d:02:08:5f:d1:83:eb:cb:4e:
         4d:d0:23:e5:8a:82:c7:1d:85:f1:40:b0:77:5f:2f:ef:94:89:
         99:62:c3:11:bc:8b:00:3e:6a:61:82:d8:e9:1f:2f:7c:66:ea:
         1a:ae:f4:5a:8d:de:44:d6:d0:a7:7e:55:ec:94:2f:b1:ef:6a:
         6b:dd:75:39:0a:5d:83:24:4d:f0:ac:33:28:f3:61:a7:2a:82:
         ce:01:57:fb:fc:4f:e9:b6:dc:92:ab:37:35:a0:13:f4:f7:d0:
         72:c1:64:2c:e5:cb:9d:52:07:51:7e:19:15:12:d7:13:9f:29:
         54:dd:53:03:e8:14:1a:86:00:d0:8b:1d:05:7c:93:20:fc:64:
         59:0c:0a:a0:48:27:3c:f2:ac:56:61:64:62:8d:29:79:99:35:
         97:e3:af:e4:ea:28:2f:45:47:90:49:74:fa:45:5f:51:14:82:
         fb:27:8a:1d:1a:87:88:b9:4a:6e:d9:5f:50:96:cf:e9:b2:76:
         79:74:b8:e6:86:05:0a:32:b9:05:28:a6:66:50:69:6e:67:be:
         52:9d:2d:fd:02:ee:43:16:13:9d:95:fc:d8:9b:be:7f:0c:c7:
         f9:47:ed:75:b3:50:c3:e9:a5:f4:c5:dd:bf:a0:6d:34:0b:86:
         91:3f:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org