Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YadZThcmhZjLI4ejAoblK1kBuXA.roa
File:                     YadZThcmhZjLI4ejAoblK1kBuXA.roa (raw, json)
Hash identifier:          Q6A1en1CKCXr/8yx0neY0BcgmlDGxp/hIopM0a0CKPE=
Subject key identifier:   61:A7:59:4E:17:26:85:98:CB:23:87:A3:02:86:E5:2B:59:01:B9:70
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       93
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YadZThcmhZjLI4ejAoblK1kBuXA.roa
Signing time:             Mon 24 Oct 2022 02:52:39 +0000
ROA not before:           Mon 24 Oct 2022 02:52:39 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        114.198.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:52:39 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=61A7594E17268598CB2387A30286E52B5901B970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:6c:76:cd:f4:9b:29:37:68:5f:03:cd:12:
                    ec:3e:f2:c1:80:ad:dc:77:45:89:63:52:9f:f5:b5:
                    f8:89:38:b5:87:ed:38:df:6d:19:cb:d9:66:c5:57:
                    f5:d2:d0:35:47:33:aa:b5:44:07:9d:6f:74:73:2f:
                    4b:a1:9b:8e:87:75:e7:44:2f:8a:56:7b:df:58:82:
                    e1:b7:d6:83:4d:67:f9:17:57:4c:b2:9e:19:bf:b1:
                    8a:cd:8a:58:95:63:69:d8:a2:5b:8c:02:3e:9d:92:
                    dd:31:12:4b:8c:ce:cf:6d:38:9a:ec:87:b6:da:a9:
                    06:ae:97:1b:fd:ed:89:cc:fa:91:48:de:8b:d7:aa:
                    00:fd:f2:1f:6a:20:e0:1d:17:71:10:c4:9a:1c:58:
                    fc:ab:79:3e:a3:dd:6f:0e:fd:e6:3f:05:f2:c7:7e:
                    21:ac:67:d3:ae:93:e4:67:7d:4e:99:54:31:93:0c:
                    23:6d:68:60:38:91:ed:1c:ed:7f:66:68:2e:2e:fe:
                    b3:91:2a:98:bf:02:6b:ef:b1:16:4d:d3:01:94:7b:
                    04:a5:e7:ca:dc:90:e6:06:68:40:7a:d3:3e:8a:92:
                    08:36:cb:c8:c4:e3:f3:c4:2d:fe:01:95:a5:b0:06:
                    01:29:aa:ff:31:32:85:1e:46:1b:03:2c:1d:61:6d:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:59:4E:17:26:85:98:CB:23:87:A3:02:86:E5:2B:59:01:B9:70
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YadZThcmhZjLI4ejAoblK1kBuXA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:26:c0:75:c9:37:0a:52:15:6b:a7:4e:90:be:90:a1:69:4f:
         72:33:fc:10:45:42:17:38:7a:86:ca:25:9f:43:ba:1d:b9:db:
         7c:6a:cd:82:b1:3a:a0:8a:da:d4:f8:56:fd:42:ac:b8:da:5e:
         0f:ce:5c:fa:0f:81:0a:d2:7a:cb:57:e6:65:98:85:d8:c9:c4:
         d8:a7:79:56:b7:6e:4b:a7:2e:e4:87:be:f9:3e:14:6e:19:7f:
         92:d2:55:5e:7b:ad:a6:ab:92:c6:8e:27:2d:e0:68:8f:4e:71:
         a7:05:56:52:3c:90:0a:6f:3e:1e:a9:87:11:2f:33:19:ff:63:
         a5:83:0e:16:92:c4:d4:26:29:c7:3c:67:f9:2d:8f:62:3d:39:
         98:fe:b8:df:97:89:e7:c8:23:6e:d8:01:eb:be:02:03:48:54:
         73:70:bf:96:b8:a0:79:47:8c:cc:73:bd:ef:41:d1:0f:32:70:
         29:e2:37:60:3f:5c:c5:53:f1:6b:d4:7e:84:03:4a:48:bf:39:
         e5:43:23:2e:93:b1:bc:87:07:87:c6:94:37:c7:87:25:d3:5d:
         69:eb:d9:b0:b7:79:2a:c1:de:6c:16:f8:4a:5e:47:f8:57:6e:
         6d:12:8c:0a:10:17:1b:b4:e3:42:e7:df:35:4f:6a:34:e7:82:
         26:5b:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org