Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZA1iw4v5vrV28ohXsi9ckbI4KEQ.roa
File:                     ZA1iw4v5vrV28ohXsi9ckbI4KEQ.roa (raw, json)
Hash identifier:          EA3JxIq6dlY+NcYbyza4D9j4SNsL7FWJ2jtNlYP4Wkg=
Subject key identifier:   64:0D:62:C3:8B:F9:BE:B5:76:F2:88:57:B2:2F:5C:91:B2:38:28:44
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       B7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZA1iw4v5vrV28ohXsi9ckbI4KEQ.roa
Signing time:             Mon 24 Oct 2022 04:38:54 +0000
ROA not before:           Mon 24 Oct 2022 04:38:54 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        219.112.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:38:54 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=640D62C38BF9BEB576F28857B22F5C91B2382844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:f0:4e:ac:29:10:74:89:63:dc:02:e7:66:
                    78:a6:8f:2e:fe:e0:64:86:49:c3:4a:7d:73:6a:c3:
                    e0:6f:cc:dc:66:82:51:43:26:64:f1:9d:3f:e6:30:
                    b1:73:59:62:6b:c3:4a:05:f9:04:17:68:79:c3:39:
                    b8:96:2d:2e:57:5d:93:0b:e5:34:bb:29:65:f0:09:
                    1b:ae:44:c4:65:84:74:09:7e:f4:f0:df:3c:00:96:
                    e3:0f:99:64:38:ef:b3:dd:5d:3c:4e:d4:18:e1:53:
                    85:0f:ce:44:bd:ff:0c:68:f0:73:0c:4b:b1:ca:56:
                    81:11:e5:e0:2b:50:7d:04:e6:0a:58:83:73:08:f7:
                    c4:58:b4:cb:ce:a3:f1:44:35:d6:95:9e:4a:68:a4:
                    26:f1:9b:19:89:73:e1:70:b5:37:9a:ce:88:47:12:
                    6b:46:38:5f:a3:2e:54:58:01:ac:fe:4d:d8:f8:6c:
                    30:2d:5d:9c:55:8e:54:65:26:c8:9f:5a:90:f6:80:
                    a2:93:1a:5b:ad:44:08:4c:1e:d2:4f:63:eb:ab:eb:
                    47:bf:7e:7c:b5:3b:fd:5a:5c:ae:f1:47:0c:db:a6:
                    63:d2:99:48:0e:af:5e:e8:82:99:36:47:81:c7:0f:
                    dd:16:ba:23:06:ec:62:f7:7e:1c:b3:7f:62:92:e6:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:62:C3:8B:F9:BE:B5:76:F2:88:57:B2:2F:5C:91:B2:38:28:44
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZA1iw4v5vrV28ohXsi9ckbI4KEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:36:8d:ee:d6:86:c3:b0:d0:a6:34:41:42:d8:a8:1e:3c:60:
         ab:0f:db:03:d8:ab:a4:a0:b0:03:99:24:fc:d4:ef:a8:f2:93:
         ee:39:e3:7e:6a:58:36:b6:25:18:3d:6d:13:00:2b:9f:be:bc:
         37:4c:30:01:a9:4a:cd:06:e6:61:9b:df:36:fc:dc:e0:99:f6:
         7e:f9:37:5f:1b:b4:4c:6f:2e:85:40:af:d7:31:8f:10:2e:ba:
         f7:2c:01:ba:ac:08:8e:da:ab:ee:37:13:9e:1b:cc:e1:74:cf:
         44:27:52:e0:23:26:c1:a9:aa:9e:d9:14:e3:33:bc:fd:3c:3e:
         41:64:96:ce:3d:1f:0c:1a:96:bc:77:df:32:c1:e0:25:28:7f:
         d0:94:e7:77:ed:54:59:ae:9d:06:8e:25:bd:6c:33:68:ad:f5:
         30:fd:1b:0e:b4:d6:66:5b:b8:16:d9:6d:1c:9f:37:32:a3:d7:
         e7:f8:bb:92:26:50:65:8a:65:37:a0:1f:41:28:b5:85:81:85:
         0d:72:cf:dc:0b:e2:80:84:ca:73:b4:a8:49:40:62:5b:cf:53:
         4a:a2:c5:4d:5c:a8:f7:ea:c7:a1:b5:5e:05:f7:01:cd:f9:d9:
         f8:ff:bc:bd:80:44:c4:95:b9:aa:6a:2b:eb:de:5b:f6:35:9b:
         17:06:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org