Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/R6AJozWuX0QIyu7bsGTE4IZOvaU.roa
File:                     R6AJozWuX0QIyu7bsGTE4IZOvaU.roa (raw, json)
Hash identifier:          7fYcllQWgt/4AYhFDKUZvP3pRfpzYlnVHObfSsLv0B0=
Subject key identifier:   47:A0:09:A3:35:AE:5F:44:08:CA:EE:DB:B0:64:C4:E0:86:4E:BD:A5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       18
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/R6AJozWuX0QIyu7bsGTE4IZOvaU.roa
Signing time:             Tue 11 Oct 2022 01:08:09 +0000
ROA not before:           Tue 11 Oct 2022 01:08:09 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        110.93.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:08:09 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=47A009A335AE5F4408CAEEDBB064C4E0864EBDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:69:f7:48:60:03:51:e0:33:05:0a:b4:3d:
                    af:f7:ff:10:5e:56:64:c5:73:1e:49:f0:59:a6:6b:
                    c5:45:7f:37:9a:a3:61:ee:e8:5e:dc:1c:1f:21:6e:
                    d0:a4:27:2a:7b:61:77:f4:c7:25:f1:2e:0d:55:11:
                    3a:41:35:63:d5:40:52:00:e1:b3:e6:97:91:dc:e8:
                    b6:83:b2:c7:59:51:70:d7:0a:ac:bf:3c:d5:ec:c9:
                    13:24:cc:1b:98:74:1f:5e:67:7f:ca:47:fc:4d:20:
                    c6:ce:0f:68:5a:15:dc:c7:63:bd:a8:47:94:03:70:
                    5e:19:62:c1:c8:d3:38:80:3c:6b:eb:ee:24:14:c2:
                    23:22:20:a0:1e:62:64:3d:59:d4:90:3c:11:bc:2b:
                    3c:f1:1f:d2:f0:f4:a5:47:23:9a:bf:de:77:4a:86:
                    a5:f3:da:dd:cd:7c:93:f6:59:4e:99:dd:03:a3:f5:
                    cb:48:7a:5b:d4:e4:ca:20:4e:73:00:af:67:71:a2:
                    f0:ec:3e:2a:fe:c2:b7:24:14:12:f1:8e:df:ca:45:
                    21:1a:12:7b:dd:c6:d3:de:19:82:e8:4d:f1:27:74:
                    f9:7b:a0:2a:e2:9c:8a:c8:dd:5f:c8:68:ac:5e:a8:
                    4b:d7:f8:e9:73:ca:76:a5:d4:2f:4b:59:49:a2:5f:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A0:09:A3:35:AE:5F:44:08:CA:EE:DB:B0:64:C4:E0:86:4E:BD:A5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/R6AJozWuX0QIyu7bsGTE4IZOvaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:83:4c:6a:ff:15:20:d5:8b:70:29:7c:a6:82:5d:dd:e6:54:
         68:54:7b:c4:99:72:7a:f5:c4:34:33:1a:ed:32:cd:87:e3:d4:
         be:f6:83:b5:86:44:98:63:53:6e:e0:44:01:f3:17:03:71:bd:
         20:3c:56:7c:ec:88:f5:be:ae:ff:d8:00:28:3e:0c:6b:fd:ce:
         66:f8:cd:83:20:85:19:8a:39:fa:b3:6a:87:9c:d4:0f:9e:f2:
         d5:a4:e4:4b:9f:49:2c:a1:43:af:b8:61:03:af:b5:36:54:2c:
         a4:82:97:15:22:76:ce:ec:7b:ed:72:74:7f:f7:d8:ec:88:58:
         56:c3:ed:f2:2d:b4:41:bf:61:91:d9:26:fe:f4:59:be:28:8f:
         d9:56:f9:11:92:6d:f5:a2:7d:86:4a:f9:e9:3f:cd:e5:01:b1:
         06:96:ab:c1:3d:16:83:d7:c9:f2:dd:f7:a5:60:f1:34:b8:05:
         89:29:01:e9:6c:9d:be:9c:b6:0b:5a:e1:6b:9a:64:b1:b6:08:
         4d:31:70:ea:41:c7:21:c6:14:2d:f0:92:19:22:93:5e:a3:c0:
         62:f4:c4:80:93:6e:d3:89:84:32:d7:7c:05:be:d6:59:e5:55:
         04:4d:96:c0:ee:88:77:14:1c:de:f1:bc:d9:1c:87:2a:ef:e1:
         09:36:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org