Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VnEM6ZoS9G1OQjc7zTk2EWPTfyI.roa
File:                     VnEM6ZoS9G1OQjc7zTk2EWPTfyI.roa (raw, json)
Hash identifier:          AlAYRfdhrG1nupTsLPrlsimDeQLeGL3Y0fwFSWPUivM=
Subject key identifier:   56:71:0C:E9:9A:12:F4:6D:4E:42:37:3B:CD:39:36:11:63:D3:7F:22
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       4C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VnEM6ZoS9G1OQjc7zTk2EWPTfyI.roa
Signing time:             Mon 17 Oct 2022 01:51:35 +0000
ROA not before:           Mon 17 Oct 2022 01:51:35 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9378
IP address blocks:        218.45.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:51:35 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=56710CE99A12F46D4E42373BCD39361163D37F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:77:1e:8b:56:25:ba:49:6c:36:1f:a6:19:3f:
                    a6:f7:d9:95:1e:32:cc:64:3a:df:17:a1:f0:27:26:
                    38:cc:23:1d:a6:9c:b0:57:38:db:a9:f7:b2:a4:df:
                    41:e7:fb:1d:a6:1e:49:6f:20:a8:bf:c6:86:99:01:
                    62:ed:22:4a:d4:95:51:93:21:f4:26:8c:46:75:93:
                    9f:6c:52:87:4c:84:2f:55:18:f3:c4:38:a9:dd:5e:
                    c8:6a:62:51:30:8d:5d:61:2d:df:f8:bd:05:d5:ed:
                    6c:00:e7:0d:e1:7e:5c:24:57:0b:92:d4:dc:ae:49:
                    82:ca:62:a7:0b:6f:de:68:32:14:7f:af:25:7d:38:
                    2f:5c:de:f9:32:73:f1:0e:33:6d:54:8d:3c:c9:86:
                    6f:80:c9:f9:cb:3a:ea:5b:5d:e7:e4:ca:35:c0:5c:
                    d0:3b:ce:81:73:81:51:3c:50:71:7a:86:76:d7:89:
                    7c:b4:77:39:f3:fa:8c:01:3a:d6:03:72:fc:35:1b:
                    ca:80:aa:f6:c2:25:34:57:95:02:93:75:0a:6c:26:
                    54:53:3e:e1:0c:8d:c8:fc:28:4d:ea:c8:f4:e9:4f:
                    c3:50:89:9d:0d:fa:1d:65:b5:c8:bf:67:9b:3d:cb:
                    a5:79:f0:3a:eb:69:7f:17:2f:fb:16:a0:97:28:f8:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:0C:E9:9A:12:F4:6D:4E:42:37:3B:CD:39:36:11:63:D3:7F:22
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VnEM6ZoS9G1OQjc7zTk2EWPTfyI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:6f:62:50:93:f6:dc:14:41:12:f6:30:6d:6b:02:5b:16:09:
         8c:d5:36:f1:39:c3:13:3b:24:fa:1c:10:07:b1:ea:88:3c:cc:
         da:99:79:d4:4a:6d:93:3b:29:23:80:6e:7c:1a:58:62:60:04:
         5e:5f:68:14:3b:51:cd:87:24:1d:5b:c9:b4:ff:39:4c:74:73:
         14:a2:d9:0a:64:08:63:45:c4:12:46:18:0c:5d:96:81:e9:f4:
         95:e5:9c:c0:61:41:de:7b:4c:cb:12:bb:d7:37:80:bc:eb:44:
         3e:7e:ae:7a:63:79:00:31:81:a8:84:7b:b2:b1:09:60:76:82:
         05:b6:f6:85:ea:d2:a0:77:b9:79:7d:21:87:48:6c:56:34:fd:
         42:cb:5e:ee:5b:cd:ba:c1:94:e2:25:0c:6b:cd:6e:a9:ab:ff:
         9e:00:0f:38:6a:0a:0a:17:6b:cd:1d:0f:01:f0:26:92:ae:26:
         42:cf:db:17:ed:06:0e:b7:b8:39:ea:32:08:04:24:e0:3e:e4:
         59:9e:b3:a9:52:36:f5:69:64:0a:2b:5e:ac:b5:0c:de:72:a7:
         ad:44:13:c6:02:d4:90:05:08:69:54:fb:df:89:ca:ba:75:8f:
         b4:ac:c2:8b:25:06:5c:3f:f5:e7:f6:ca:5a:40:44:1f:45:df:
         36:27:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org