Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/RO17eahBTMi0Ua2YBukXDAJ57m0.roa
File:                     RO17eahBTMi0Ua2YBukXDAJ57m0.roa (raw, json)
Hash identifier:          jLd7Z9mOSgca/0uD8ARW6/qDzRItWAu3Y7YJE9diQcY=
Subject key identifier:   44:ED:7B:79:A8:41:4C:C8:B4:51:AD:98:06:E9:17:0C:02:79:EE:6D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       DB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RO17eahBTMi0Ua2YBukXDAJ57m0.roa
Signing time:             Mon 31 Oct 2022 02:04:06 +0000
ROA not before:           Mon 31 Oct 2022 02:04:06 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        180.220.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:04:06 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=44ED7B79A8414CC8B451AD9806E9170C0279EE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:43:c5:d7:d0:d1:41:b5:da:d6:39:b5:7f:
                    de:96:60:d8:dd:b2:93:02:4f:62:fb:35:43:1a:9a:
                    48:92:ba:e2:c5:8c:08:6c:32:a6:52:5a:e9:ee:14:
                    3a:c9:e3:0b:de:43:63:49:51:6d:49:8b:a0:e7:23:
                    e9:77:c4:29:ce:23:52:76:f1:d5:5e:1f:29:24:7d:
                    e7:40:f7:f6:cd:b6:cf:d9:17:14:d6:0f:58:c8:9e:
                    8c:f7:17:13:f3:2d:7e:0d:53:df:66:e1:17:8a:2a:
                    51:55:0d:53:0d:54:be:02:ff:f3:67:f0:1f:36:bb:
                    9d:60:4f:12:57:56:ae:82:12:76:b1:25:93:ed:64:
                    6d:cd:c6:af:53:67:a7:ff:41:3f:6e:53:f7:80:98:
                    c5:9f:66:a4:a0:6e:ab:89:64:93:e8:de:03:60:76:
                    58:75:eb:be:10:16:c7:37:22:4c:66:ce:e0:16:38:
                    bd:ab:4e:87:eb:e9:13:6a:60:e4:79:70:20:9e:d0:
                    5f:67:f6:5a:0c:20:63:7c:4f:43:c7:78:b1:23:93:
                    ea:83:75:c7:8e:ca:72:90:74:31:3f:c7:5a:d5:b8:
                    fa:a6:01:8b:e6:c8:d3:64:3f:a7:31:b3:37:5d:e4:
                    31:d1:da:de:8b:59:90:22:b8:8f:57:5f:1a:f6:54:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:7B:79:A8:41:4C:C8:B4:51:AD:98:06:E9:17:0C:02:79:EE:6D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RO17eahBTMi0Ua2YBukXDAJ57m0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b5:05:50:d9:73:b3:ab:5b:63:47:d4:86:b3:5d:a1:82:40:04:
         85:62:4f:65:b0:c2:e0:b8:63:f7:67:2d:0a:cd:4e:58:7b:11:
         50:66:5c:9e:6f:24:80:c7:99:7f:d9:47:4a:17:b7:16:e6:d1:
         d4:76:0d:a0:66:fe:5e:70:65:2c:d2:b9:2c:cc:65:ea:af:71:
         fa:94:e9:51:00:17:28:35:5e:b6:73:d6:9a:f1:4e:71:32:05:
         ba:34:44:03:7d:48:bf:fd:1a:c1:11:c0:9c:0e:4b:2c:71:92:
         b1:aa:4d:23:73:80:c6:32:d1:79:ec:34:44:66:d0:07:56:6e:
         a5:71:5b:3b:78:9f:46:08:ee:f0:62:89:eb:67:32:31:cf:a1:
         88:c2:12:39:ab:f5:51:9b:92:18:91:b7:af:b5:43:13:22:35:
         92:95:9b:6e:29:68:06:21:1f:9f:71:38:dc:c3:38:36:ae:6b:
         42:93:e4:30:eb:75:68:52:1f:36:02:cb:46:02:bc:d3:48:85:
         5d:f4:c1:d7:a5:d9:85:29:04:ea:db:4d:04:11:16:c2:23:32:
         ca:52:18:62:63:fb:ef:6b:e8:42:74:26:45:cb:11:0e:65:cb:
         62:68:9f:8c:1f:d7:07:c0:28:cf:6b:b1:94:77:19:df:d1:70:
         5d:73:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org