Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/W5Lw3sFAIk-dl_w_iSUJEo6I9nk.roa
File:                     W5Lw3sFAIk-dl_w_iSUJEo6I9nk.roa (raw, json)
Hash identifier:          rN141iDKYMbz8gKA/xl0xfhVoriXkxZYqkIo2P8LgMg=
Subject key identifier:   5B:92:F0:DE:C1:40:22:4F:9D:97:FC:3F:89:25:09:12:8E:88:F6:79
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       C4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/W5Lw3sFAIk-dl_w_iSUJEo6I9nk.roa
Signing time:             Mon 24 Oct 2022 04:51:00 +0000
ROA not before:           Mon 24 Oct 2022 04:51:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        223.165.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:51:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5B92F0DEC140224F9D97FC3F892509128E88F679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:fb:6e:e2:64:14:7c:43:2a:7c:6b:4d:95:
                    7b:c0:70:22:94:e7:9f:f0:81:1e:ba:16:23:35:0c:
                    9f:86:cb:83:1f:cd:5e:f7:33:c3:be:5f:17:2d:86:
                    10:3f:55:06:60:87:9f:aa:be:d2:e1:04:63:d3:ec:
                    b3:da:19:13:e8:72:b9:f1:95:b2:a2:30:fa:b5:41:
                    c3:c1:06:45:5a:66:bb:c6:18:0f:f5:53:d7:63:bf:
                    1b:a0:67:0f:e3:d6:11:6a:1c:d8:44:23:2a:75:09:
                    59:8e:23:4d:2f:37:e9:11:3a:69:80:d6:ee:17:1c:
                    dd:5a:7e:c6:a3:f9:b5:1e:a9:3f:ec:0b:16:91:e6:
                    e4:bd:4f:35:14:bf:99:ba:70:1f:30:9b:c8:dd:04:
                    a1:e9:7a:21:da:0c:4b:20:f6:a9:7e:17:c4:b3:9c:
                    25:5a:ca:54:88:95:26:b0:b5:84:4c:ad:f9:b8:fc:
                    e7:8e:11:1a:3a:21:f6:c3:8a:26:13:07:d1:ca:a8:
                    f0:d0:de:5e:ca:b7:6d:d8:42:83:7f:f4:5c:51:3c:
                    7d:ee:e1:fc:bc:47:b7:3d:1d:16:01:68:50:3e:73:
                    bd:34:ed:bc:f8:98:ea:0b:66:75:c6:11:4d:4b:91:
                    b7:10:f0:75:b7:3b:7f:a0:96:98:67:e5:d8:25:5d:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:F0:DE:C1:40:22:4F:9D:97:FC:3F:89:25:09:12:8E:88:F6:79
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/W5Lw3sFAIk-dl_w_iSUJEo6I9nk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:8a:6c:70:e8:5d:e2:7b:db:06:f8:c2:02:98:e8:e6:f0:f6:
         17:3d:92:98:7b:18:ce:20:81:20:54:47:1f:dc:5c:c8:34:f2:
         eb:de:34:3b:0c:f0:50:29:25:be:96:1a:c5:c0:b2:80:91:fb:
         16:27:73:1d:ba:f4:22:b2:c1:7e:6f:12:0f:e3:d4:0c:34:cb:
         98:83:e8:7d:66:22:85:58:35:3a:57:54:b6:8c:03:d2:be:d5:
         67:a0:e3:1c:21:c3:68:03:97:81:59:b1:6e:09:3e:09:83:c8:
         07:64:0b:e3:47:56:94:71:f1:fd:cd:aa:d7:ca:4f:fa:6a:04:
         11:2e:e2:0b:8b:65:0b:a8:12:4e:28:78:00:03:8c:22:77:97:
         ee:c6:77:ac:f3:68:99:87:c3:68:01:b1:13:a1:ac:47:35:77:
         d0:5d:ed:b0:fd:94:dd:df:ee:78:69:f1:23:72:84:8d:de:cf:
         fb:75:27:36:f1:11:96:8e:d6:58:b1:62:a6:44:74:19:24:88:
         3c:85:65:dd:4d:86:3f:41:48:09:01:05:df:33:4a:ae:98:61:
         7d:72:10:cf:60:0b:62:41:18:fd:c8:9f:dc:65:7b:f1:ca:83:
         6a:e0:c5:de:d2:9a:5e:83:65:18:62:19:48:aa:0d:1e:bf:97:
         93:76:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org