Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WTCZDvO48wMLtB2IaBhR-WVb-vM.roa
File:                     WTCZDvO48wMLtB2IaBhR-WVb-vM.roa (raw, json)
Hash identifier:          S0Dy9dwg7gEeGxQDPCL46pBkjR9J4ElJtG/rTUZYc5U=
Subject key identifier:   59:30:99:0E:F3:B8:F3:03:0B:B4:1D:88:68:18:51:F9:65:5B:FA:F3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       CE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WTCZDvO48wMLtB2IaBhR-WVb-vM.roa
Signing time:             Mon 31 Oct 2022 01:45:59 +0000
ROA not before:           Mon 31 Oct 2022 01:45:59 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        61.125.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:45:59 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5930990EF3B8F3030BB41D88681851F9655BFAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:37:11:0f:b1:ed:25:f1:cb:ef:4e:3d:24:
                    ff:cc:ae:ce:c7:98:d1:fd:9a:69:20:38:99:08:30:
                    f8:0c:6d:23:18:79:35:f1:df:0f:ef:2a:47:d4:d8:
                    c6:a1:b6:f6:80:fa:bc:61:e5:79:df:71:48:dc:97:
                    4f:45:4d:7f:f0:32:4e:15:39:35:e4:6f:05:df:2a:
                    9f:03:d8:8a:5f:33:e4:0f:9e:41:90:96:61:67:3d:
                    2c:b3:1f:e3:c8:2c:dd:f2:ce:7f:08:a8:3f:26:0a:
                    66:30:e1:0a:a5:8d:20:0e:ea:1d:2c:71:a7:86:f6:
                    ec:7e:8b:7f:5a:ef:40:58:8a:bb:7b:7b:36:98:1d:
                    44:88:02:41:12:d3:c7:b3:dd:88:e7:6e:b8:81:39:
                    72:2d:84:1b:45:90:64:6d:2e:c5:3d:39:65:e6:84:
                    4e:fe:f6:9b:4c:56:a4:63:36:ae:68:05:e4:b0:6a:
                    03:09:f3:14:aa:9a:ed:00:f6:40:a2:a1:92:a7:a3:
                    42:53:fe:4c:72:51:f4:74:ed:bc:1b:c6:0f:f9:6c:
                    ea:17:8e:b8:8e:23:1c:1e:b9:d0:cd:6c:46:37:36:
                    34:b2:b9:1b:d8:5a:fb:1b:d9:ab:3f:a5:7e:bc:74:
                    e5:d2:b9:25:84:b4:d3:b1:af:a5:e0:f0:61:06:90:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:99:0E:F3:B8:F3:03:0B:B4:1D:88:68:18:51:F9:65:5B:FA:F3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WTCZDvO48wMLtB2IaBhR-WVb-vM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:57:a2:5b:34:98:cf:39:0b:74:c4:0d:90:d4:7a:6d:6e:
         22:fd:e0:31:6a:f4:7d:66:77:58:7d:6d:8a:5e:f8:ed:e6:6f:
         ac:f1:29:a2:fc:8f:58:b7:e7:f0:59:f4:08:64:51:53:e1:e4:
         38:48:c9:94:a4:6b:5c:72:d3:95:30:1f:c3:6f:cd:a4:74:49:
         46:0b:1b:db:8b:94:b9:07:91:89:c4:9a:6d:21:d4:c5:dd:f3:
         8b:b8:fc:20:d8:1b:80:c7:8d:5f:7e:97:ab:06:41:4e:f0:a3:
         6a:e9:16:1b:22:d4:b6:f1:f0:59:00:e9:a1:9e:26:f2:7c:c0:
         19:28:70:fe:f4:08:87:40:ac:e2:db:94:19:dd:c1:ed:63:cb:
         3a:ef:a2:e4:95:b4:26:1e:18:91:c7:b5:9d:15:9a:11:5c:c7:
         40:55:45:3a:c2:42:dd:10:31:cf:2e:5e:a9:12:0e:2b:af:11:
         23:5b:48:d1:14:01:31:06:36:d2:11:bd:b1:ee:62:e1:85:ab:
         84:7e:1e:a4:a2:c0:00:04:55:b0:fd:97:dd:ac:d7:a9:f4:15:
         1b:f8:3e:fb:ee:9d:50:42:df:ce:af:96:41:66:f3:89:6a:25:
         e8:7d:ec:d0:2f:4c:88:bc:18:78:66:65:3e:33:c7:28:78:58:
         48:f6:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org