Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Umqw3DQScWkZtozujRGl-XULMYI.roa
File:                     Umqw3DQScWkZtozujRGl-XULMYI.roa (raw, json)
Hash identifier:          b9LA1YCEDp+xq8fyL65R211MF1Z5NyJUP1rmrh3y+zo=
Subject key identifier:   52:6A:B0:DC:34:12:71:69:19:B6:8C:EE:8D:11:A5:F9:75:0B:31:82
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Umqw3DQScWkZtozujRGl-XULMYI.roa
Signing time:             Mon 24 Oct 2022 04:20:56 +0000
ROA not before:           Mon 24 Oct 2022 04:20:56 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.72.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:20:56 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=526AB0DC3412716919B68CEE8D11A5F9750B3182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:b8:61:b8:cc:3c:70:73:82:6e:4f:fd:5f:
                    28:0d:8b:3e:7f:ab:9b:b4:5d:02:3d:ce:14:6f:d3:
                    34:03:f7:3e:ee:6c:9d:e6:7c:ea:52:2e:1c:45:05:
                    94:12:16:e0:da:dd:55:58:d2:44:61:d7:87:c4:37:
                    13:ac:2b:07:f4:c0:3b:a2:97:68:7a:c7:31:9d:1a:
                    39:de:00:b0:ba:2d:74:f9:0e:ca:89:ab:f7:18:73:
                    5d:89:c4:40:96:b4:c6:e5:ff:ec:fe:2d:6c:a9:69:
                    0c:64:d3:71:55:41:d8:5f:83:63:27:fe:a0:54:b4:
                    9c:35:2a:66:38:df:8c:e9:9f:ae:6d:4e:85:d9:f5:
                    cb:57:e2:bd:2d:7c:9a:12:fd:d7:b6:45:12:47:d0:
                    a9:46:59:b6:0e:75:e9:f7:46:3e:b1:50:79:f4:74:
                    2f:d6:d6:7a:59:33:da:c6:e0:7a:01:b6:de:98:3f:
                    fc:a6:e3:bd:cc:5c:ba:c8:e8:e3:4f:81:6b:f8:11:
                    c2:bc:b4:18:ae:e2:18:7b:a6:99:52:ed:78:06:85:
                    a0:b4:ce:f8:5e:ef:4e:1a:b2:bd:cf:94:a6:7a:20:
                    44:14:8b:ab:12:5c:52:9d:5d:66:1f:ab:1d:0f:65:
                    b7:c3:85:f1:e7:6e:90:6d:24:0b:ae:98:05:b2:9e:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6A:B0:DC:34:12:71:69:19:B6:8C:EE:8D:11:A5:F9:75:0B:31:82
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Umqw3DQScWkZtozujRGl-XULMYI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:68:3a:25:7c:69:3c:94:0c:c1:18:d6:84:4c:92:dd:a2:ed:
         22:96:bd:d6:7c:41:21:29:16:57:4b:ee:9c:9b:ee:fb:2d:f2:
         dd:33:da:14:f7:9c:cd:2f:a8:ea:89:09:4e:c0:a0:23:0b:28:
         62:1c:32:0e:e8:1e:8d:3a:2c:aa:db:5f:de:03:66:29:ac:e7:
         ea:6d:6b:bd:70:01:63:c2:ba:d3:28:95:91:c2:a3:5c:68:db:
         f7:2b:ba:ef:46:e4:1e:88:8b:a9:c4:84:41:7c:4c:b9:27:59:
         24:5a:f1:4e:0d:0a:64:1c:46:4e:56:b0:0f:f9:b7:28:e4:ee:
         d4:59:bb:5a:73:9c:8f:98:6c:23:fc:00:d4:3b:7b:a9:61:8d:
         33:3d:b5:04:3e:d3:29:40:97:26:97:33:64:48:a2:05:b7:66:
         e6:07:ea:16:c4:bc:1e:78:a1:b9:6a:7f:09:d7:90:9c:bd:95:
         f9:74:40:75:4b:6f:6d:42:1b:e1:a5:48:8d:21:b2:00:aa:b2:
         24:93:a1:04:be:a5:b4:f0:76:75:37:56:d1:be:c5:60:d4:82:
         10:24:7d:a4:a8:09:ee:64:33:c9:8c:ab:65:94:d6:52:fa:74:
         1c:c9:ee:df:c2:e1:10:31:44:32:01:fc:6b:b0:42:8b:f8:19:
         c5:1b:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org