Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UEvvQYpg7EvP6be1JESNcvZH0Pw.roa
File:                     UEvvQYpg7EvP6be1JESNcvZH0Pw.roa (raw, json)
Hash identifier:          9rGwscZmXzjdiQwWhKILYEnPKrGSMS9WIY3cJHD754g=
Subject key identifier:   50:4B:EF:41:8A:60:EC:4B:CF:E9:B7:B5:24:44:8D:72:F6:47:D0:FC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       1D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UEvvQYpg7EvP6be1JESNcvZH0Pw.roa
Signing time:             Tue 11 Oct 2022 01:20:17 +0000
ROA not before:           Tue 11 Oct 2022 01:20:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        202.83.184.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:20:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=504BEF418A60EC4BCFE9B7B524448D72F647D0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:25:3c:e6:98:56:34:9c:d6:d8:1d:27:34:
                    c3:fa:cb:87:51:65:d1:a2:2d:e8:1e:bf:ed:48:58:
                    26:4a:01:b8:fb:b6:f3:5d:a3:e0:d2:b1:df:31:c0:
                    fd:75:c4:3d:d3:6d:09:32:6a:65:d0:17:f0:a8:14:
                    16:f4:1b:4c:a5:20:6c:90:6a:0b:76:3d:07:c3:8b:
                    07:4b:f2:73:a2:a6:92:d3:5d:69:75:a1:4f:94:a9:
                    34:67:26:9e:d4:88:d3:e4:54:0b:02:ad:8c:06:e5:
                    1e:21:57:f2:68:fa:5a:de:d7:a3:85:03:0d:1a:1f:
                    06:40:db:74:f0:8b:52:88:79:d0:82:c0:29:e9:a3:
                    72:7b:17:a5:32:b8:07:1d:0e:0c:66:80:9f:7d:f5:
                    04:2c:9e:55:21:8b:8d:87:c5:af:c8:a8:72:d4:3e:
                    74:9b:6f:15:76:e2:31:c7:a8:18:1a:7c:18:19:8f:
                    3e:92:77:45:39:e9:d6:35:0b:1b:36:9e:f5:a4:f5:
                    94:46:89:e3:1f:1f:bd:86:e9:bc:68:84:9c:58:96:
                    51:b2:0c:c3:4e:77:b8:68:10:98:37:cb:d3:a3:5d:
                    0e:4a:ad:3c:46:6c:ba:7d:dc:e0:cb:b8:14:56:78:
                    49:39:cc:96:b8:14:ed:f3:f0:a3:5a:00:18:c1:73:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:EF:41:8A:60:EC:4B:CF:E9:B7:B5:24:44:8D:72:F6:47:D0:FC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UEvvQYpg7EvP6be1JESNcvZH0Pw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:de:77:6e:85:7b:d2:9e:82:58:52:56:ac:ec:58:ac:b9:
         48:0b:ad:da:33:86:98:a0:e8:f1:96:58:6a:3a:d9:17:b2:b7:
         7d:00:15:39:75:40:28:88:6b:9a:f3:e4:b7:56:52:86:5f:75:
         a6:f2:f6:d0:92:9b:e0:26:53:02:80:75:aa:19:f5:fd:25:6a:
         5b:4f:03:a1:d0:08:f8:35:f5:5e:5b:d9:c6:78:de:77:fa:b7:
         60:d9:3f:5d:33:4e:20:44:76:31:e0:7a:cf:68:31:0d:a0:22:
         d0:57:59:0e:05:ba:ba:f8:34:ef:10:6e:94:e3:dc:de:b2:56:
         7d:34:ef:0a:04:d3:87:7a:d4:65:f7:dd:71:28:39:61:04:09:
         6b:ea:95:d1:76:56:0c:06:57:0d:2b:7a:52:09:44:75:f7:4a:
         34:76:5b:09:5e:40:39:25:2c:56:9d:65:89:74:bd:d7:ac:4a:
         a9:e4:04:90:4c:c9:d0:39:33:ec:d2:4c:92:8d:b6:30:9e:61:
         b7:d0:b7:66:61:23:a5:f5:52:d4:17:2c:85:0a:90:5f:03:f7:
         dc:29:59:21:cf:09:ae:04:cb:28:dd:50:b9:92:f8:50:32:dc:
         66:96:35:41:23:8a:1e:b4:7b:04:1b:13:6c:b5:f5:12:d2:96:
         be:72:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org