Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WLVZdoq6DIhLpD7BST5Xj2vjsTI.roa
File:                     WLVZdoq6DIhLpD7BST5Xj2vjsTI.roa (raw, json)
Hash identifier:          vxZp2OQPdbp8XzD1cA6NXqoP6C7H7EX93jNAkJNXHBs=
Subject key identifier:   58:B5:59:76:8A:BA:0C:88:4B:A4:3E:C1:49:3E:57:8F:6B:E3:B1:32
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       3D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WLVZdoq6DIhLpD7BST5Xj2vjsTI.roa
Signing time:             Mon 17 Oct 2022 01:25:43 +0000
ROA not before:           Mon 17 Oct 2022 01:25:43 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        27.116.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:25:43 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=58B559768ABA0C884BA43EC1493E578F6BE3B132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:5d:e4:a2:dd:cc:77:86:b2:5c:46:22:fa:
                    fc:99:18:61:5a:ed:e4:ae:4c:94:48:af:9e:56:43:
                    74:83:74:64:48:8c:4e:82:38:f8:fe:c5:70:fa:6e:
                    b8:ff:6c:49:3a:66:43:60:5f:11:15:71:1a:66:f8:
                    58:d1:76:32:3d:fc:eb:62:e3:bc:5c:0d:49:4f:56:
                    22:83:e7:1b:13:70:f5:fd:37:71:51:df:57:97:db:
                    3b:56:87:6e:e6:7a:f0:d1:9b:cb:8d:03:5b:05:eb:
                    fb:bd:1e:6e:64:a9:30:8f:2c:cc:dc:99:63:64:ee:
                    e0:0d:e0:37:ce:2f:e0:b1:17:3b:bc:c9:35:77:36:
                    58:ce:fa:b5:b6:09:e8:a1:0a:7e:03:c3:cf:9a:78:
                    78:05:c3:59:f3:e9:d7:b3:91:37:70:10:98:b7:5e:
                    ad:6d:c6:b2:95:e9:4a:d3:2a:90:a5:0c:62:7f:9a:
                    9a:46:f4:76:58:e5:e5:1c:a4:41:35:8e:c3:7d:0e:
                    0a:6b:b3:28:02:7b:f9:2e:52:9d:7c:06:62:5f:3b:
                    42:8e:b8:77:27:c6:eb:8b:f8:b6:42:ce:25:4b:00:
                    8c:b3:0c:28:83:83:9f:16:2f:3a:ee:b6:8b:0f:63:
                    69:7f:42:5d:50:d6:f0:4a:e1:1a:c9:b9:c5:12:b7:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B5:59:76:8A:BA:0C:88:4B:A4:3E:C1:49:3E:57:8F:6B:E3:B1:32
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WLVZdoq6DIhLpD7BST5Xj2vjsTI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.116.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:38:3d:16:20:41:42:ef:76:6b:f5:3d:35:6b:ad:a5:53:ce:
         18:a5:61:fd:f3:2d:03:2a:f2:c1:7a:2d:8f:2a:51:17:ec:5c:
         55:9f:af:30:96:03:73:75:6b:9d:98:3d:72:4b:b9:5e:9e:da:
         47:03:13:61:f3:20:a2:ed:9a:5a:11:ad:b0:56:8a:02:0b:4a:
         5e:46:cb:d8:97:c1:4e:e4:66:71:97:4e:8a:3c:77:b4:d0:0a:
         d3:d7:ab:c8:ae:e4:5f:58:61:53:c5:e1:ea:09:f3:c4:06:cb:
         53:78:6e:99:88:1e:a9:3a:d8:c2:d5:68:b0:40:9e:03:df:5e:
         a4:f0:b7:d5:33:02:37:d9:c7:04:79:6a:67:36:3d:19:54:11:
         a0:f6:c5:0b:a3:48:42:af:b1:36:ba:47:24:a3:54:b0:6d:d7:
         b2:68:bb:90:45:ad:70:2c:4d:a7:90:1d:19:b4:1d:dc:eb:b3:
         d6:9c:20:54:4b:ab:c2:34:03:0d:32:ec:d8:9a:d0:da:ed:cc:
         71:fa:5a:e0:32:e8:fd:1e:bf:6a:95:cd:39:83:e0:c9:ad:24:
         db:3a:a4:d8:e5:52:14:2e:24:38:ed:ec:61:5d:2b:2e:2e:3a:
         c4:3b:d1:e9:5c:d7:81:45:7c:3d:ac:7f:fc:3d:12:34:28:50:
         11:c7:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org