Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VkIfACWaxzKcWwPX9YWhiNrpCG8.roa
File:                     VkIfACWaxzKcWwPX9YWhiNrpCG8.roa (raw, json)
Hash identifier:          CLVHhqpKQqIwavP3gTyLppn4ajcSpLknWYB9NzmEPD0=
Subject key identifier:   56:42:1F:00:25:9A:C7:32:9C:5B:03:D7:F5:85:A1:88:DA:E9:08:6F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       92
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VkIfACWaxzKcWwPX9YWhiNrpCG8.roa
Signing time:             Mon 24 Oct 2022 02:50:48 +0000
ROA not before:           Mon 24 Oct 2022 02:50:48 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        114.198.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:50:48 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=56421F00259AC7329C5B03D7F585A188DAE9086F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:f7:26:53:92:53:eb:0b:6b:e3:eb:f6:c6:
                    98:be:c6:a5:c5:ce:17:52:34:08:9e:75:98:62:86:
                    70:3d:cc:aa:47:1f:e5:fe:1b:f3:4b:5d:c6:d7:56:
                    06:a5:cd:e1:7e:f1:03:40:5d:bb:db:ac:43:39:87:
                    ae:75:4c:f6:f8:63:b5:e2:2b:64:b8:94:95:70:02:
                    8c:df:24:a9:b3:8f:9c:83:fa:46:62:b1:f5:f8:f1:
                    49:03:e9:fd:eb:14:52:3c:c7:d8:39:c1:be:c8:8f:
                    db:49:2a:98:a7:c9:71:d8:10:d7:ef:b0:f3:2e:ea:
                    d1:62:51:32:9c:02:84:20:49:b4:b3:e9:b5:77:00:
                    7f:7b:b2:3f:25:92:b2:a1:18:06:f0:d8:aa:e1:15:
                    6a:0d:76:ad:88:44:eb:36:8d:4f:5f:96:4d:ac:91:
                    25:89:18:8b:89:0c:a4:db:06:9b:7d:1b:8d:1f:fc:
                    95:5c:77:b1:d9:da:f8:28:4b:13:0a:67:f8:c3:44:
                    d7:55:09:81:98:48:bb:7b:87:e4:dd:d1:26:fd:b5:
                    68:99:f8:32:ec:43:9c:97:ce:20:74:40:70:86:f7:
                    94:b8:b3:59:05:71:89:71:35:fa:19:e7:04:47:6b:
                    aa:7b:ff:25:94:d9:c3:dd:d2:77:e7:e7:e7:26:75:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:42:1F:00:25:9A:C7:32:9C:5B:03:D7:F5:85:A1:88:DA:E9:08:6F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VkIfACWaxzKcWwPX9YWhiNrpCG8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:7b:53:bd:d2:f7:69:a2:64:92:9d:b7:a7:80:84:68:e4:
         3d:96:5b:b6:62:14:20:a6:db:da:ca:da:02:ee:8a:8d:b4:f7:
         b9:ff:ce:5a:29:0e:4d:a6:6e:fd:e0:1e:9d:44:21:98:79:ab:
         29:62:c5:d3:de:b9:fa:a3:a6:3c:4e:3c:c4:e1:0a:4c:f0:ff:
         44:dd:db:72:b9:2e:00:14:66:4c:58:67:9a:29:78:4e:8e:09:
         ea:95:49:77:2e:39:a7:a4:1c:ed:97:bb:d6:5b:54:64:d5:e6:
         aa:ea:9d:b5:90:3b:2d:3a:fe:17:7c:0e:7a:21:cf:53:63:cd:
         25:a5:af:6e:14:0a:40:5a:85:c7:06:d6:cb:1c:ec:30:43:a3:
         ee:10:8b:9c:23:d2:e2:8d:28:e7:e8:5b:bf:1c:fe:8f:6e:89:
         69:4e:dc:2f:d5:9e:5a:78:71:c6:dd:be:ee:51:ac:8d:b5:fa:
         20:db:2c:8a:4d:92:27:f1:0b:65:30:79:25:88:4f:d4:78:2f:
         cb:47:c3:c3:ca:c4:8f:4d:c5:6f:40:c9:47:dc:8e:3d:5e:d0:
         7c:cc:a3:30:02:43:25:93:a6:aa:c5:f5:ab:27:39:c4:1c:b5:
         22:5d:57:d4:c2:09:71:55:f9:e3:52:2d:05:61:f1:f5:5d:3a:
         7b:d6:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org