Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UytOpkLANavVoBMvNiBVdXypJJw.roa
File:                     UytOpkLANavVoBMvNiBVdXypJJw.roa (raw, json)
Hash identifier:          93H75rqs//dQXbSpW5Nulzo3LrvJETNgdlyMAU3j97Y=
Subject key identifier:   53:2B:4E:A6:42:C0:35:AB:D5:A0:13:2F:36:20:55:75:7C:A9:24:9C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UytOpkLANavVoBMvNiBVdXypJJw.roa
Signing time:             Mon 31 Oct 2022 02:00:06 +0000
ROA not before:           Mon 31 Oct 2022 02:00:06 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        122.196.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:00:06 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=532B4EA642C035ABD5A0132F362055757CA9249C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:a2:3d:82:17:8c:18:f0:ff:c6:c5:c3:99:
                    ea:7e:cc:02:ed:7f:b0:6d:6c:9e:1f:10:b5:3f:12:
                    3a:c8:2a:07:2b:89:75:6d:01:87:8c:55:b6:00:79:
                    f3:10:40:bf:c6:69:5f:d7:52:13:2f:a2:fb:4a:4f:
                    b9:5a:7a:0d:70:72:d0:e3:9f:1c:d7:6b:33:e6:76:
                    4c:4e:45:69:05:92:a4:c2:ea:fc:e9:56:db:1f:2d:
                    d6:70:7d:b1:62:db:c5:57:08:d7:b6:b5:e0:92:59:
                    a0:0f:37:b5:f2:32:e2:4f:57:7b:bd:ac:03:42:90:
                    1b:c4:b3:ab:4a:27:49:4e:71:93:98:8b:f2:11:cf:
                    fb:6c:09:02:09:d7:19:30:85:98:2e:c8:d0:d5:99:
                    1f:36:3d:89:0a:56:df:23:1d:fc:6b:bb:c0:7b:43:
                    f5:55:e3:5d:07:2e:85:d1:5a:81:90:92:32:cc:07:
                    23:6a:d3:cc:57:6a:e0:78:88:3f:a0:e7:11:de:40:
                    93:95:fc:de:5a:59:3a:56:68:ad:83:7e:c2:88:f3:
                    cb:85:31:08:8f:27:86:cf:ec:2d:84:b0:cb:5d:51:
                    9e:a2:b4:1f:ed:16:ce:d5:97:f8:91:81:06:b1:5d:
                    d3:98:fb:a1:85:31:30:bd:ca:a6:fd:a8:bb:ca:7f:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2B:4E:A6:42:C0:35:AB:D5:A0:13:2F:36:20:55:75:7C:A9:24:9C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UytOpkLANavVoBMvNiBVdXypJJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:ac:a7:13:40:f1:12:ec:c2:c6:ee:1f:7e:5a:03:8f:0d:
         48:08:53:e3:7d:c5:5e:6e:dd:56:81:67:9a:08:1a:13:b9:18:
         07:bc:1a:71:a3:ec:23:38:62:2e:b9:bd:0a:7b:7e:38:34:d6:
         f7:89:92:f1:9c:2c:ce:a5:15:4f:44:6b:34:bd:ef:70:54:25:
         a7:ca:6c:81:8d:64:67:88:02:d0:48:10:20:f7:82:c1:c0:09:
         a6:e9:b1:a0:67:26:95:6c:7c:72:a6:38:bf:b7:24:5c:00:82:
         f5:91:ee:f2:9d:59:30:cd:83:f3:4a:e7:1f:0b:55:6c:b9:63:
         e1:04:1b:e6:2e:84:0f:40:e1:98:8f:62:02:62:be:bb:c2:32:
         df:ae:2a:bc:5d:03:25:0d:d1:8b:6b:34:85:9c:c0:1f:0f:d6:
         81:13:e0:27:dc:61:b0:55:21:91:d0:16:fe:47:e6:6c:9d:20:
         32:9d:26:bd:2f:f9:2f:9d:ba:b6:d4:d5:a0:7c:bd:1e:65:3a:
         63:62:29:09:ba:03:50:d7:a2:55:45:5a:6e:18:60:7b:f4:7e:
         ab:2b:2f:01:a6:c7:e1:e3:30:2e:3b:4f:67:cc:0e:18:0d:99:
         1c:ef:f8:b4:85:16:a9:3e:68:9c:03:a1:31:49:cd:40:72:2a:
         27:38:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org