Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZV8ESX-2fK7n0tqb5nn74VQKMgA.roa
File:                     ZV8ESX-2fK7n0tqb5nn74VQKMgA.roa (raw, json)
Hash identifier:          C9vLz9dVOSCPoejMlPtLFiTK4/o5/OX9rdGqgoXIxdQ=
Subject key identifier:   65:5F:04:49:7F:B6:7C:AE:E7:D2:DA:9B:E6:79:FB:E1:54:0A:32:00
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       62
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZV8ESX-2fK7n0tqb5nn74VQKMgA.roa
Signing time:             Mon 17 Oct 2022 02:22:00 +0000
ROA not before:           Mon 17 Oct 2022 02:22:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        219.105.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:22:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=655F04497FB67CAEE7D2DA9BE679FBE1540A3200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:bb:02:19:c6:96:2e:e9:0c:b1:6e:c3:7e:
                    77:2d:ab:17:06:66:24:33:2d:f4:68:c9:0e:8c:4e:
                    bf:10:57:88:b2:63:cd:aa:03:ac:8a:cc:b2:fe:97:
                    61:7e:c1:5a:b6:ab:8d:13:d3:ac:0e:64:8b:78:76:
                    1f:a6:7b:23:0a:3b:dc:c6:10:8b:1e:28:bd:35:9e:
                    31:9f:4e:71:b2:0b:09:3a:81:2f:28:d0:91:35:71:
                    e2:e8:05:86:55:d9:0c:06:a9:48:7e:24:8a:7f:39:
                    d6:76:b2:1b:5b:25:14:50:cf:de:b8:16:32:22:aa:
                    a5:fa:9e:93:de:a0:44:77:96:ec:20:df:07:4e:ad:
                    c9:c9:16:c4:67:8b:0b:d7:9d:01:fe:f3:a1:f6:79:
                    2d:84:f0:af:dc:8d:96:3f:ee:52:bb:a5:c3:8d:0e:
                    36:ce:ef:79:33:dc:02:3f:c8:d6:fe:66:75:48:45:
                    48:94:a8:4b:4e:b2:d7:d8:1c:43:b9:72:b0:be:92:
                    9c:85:29:43:75:0a:55:1a:51:db:9c:c2:00:16:67:
                    ca:87:1e:21:33:43:39:19:70:c7:c6:76:fe:4c:ca:
                    9c:a3:4d:20:8e:f8:c9:30:b2:3e:53:09:6f:79:f1:
                    19:b4:15:6b:46:a5:5e:56:a9:7e:9a:6d:33:0f:82:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:04:49:7F:B6:7C:AE:E7:D2:DA:9B:E6:79:FB:E1:54:0A:32:00
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZV8ESX-2fK7n0tqb5nn74VQKMgA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:77:a4:fe:57:9c:f8:e6:15:60:ad:73:3f:ab:d5:0a:dc:dc:
         0c:9e:75:58:b4:28:76:85:c8:ea:0c:bd:bd:59:21:11:77:34:
         8d:7f:87:04:29:ea:ac:66:20:c3:0f:ee:7d:66:99:14:87:e4:
         1c:1e:a4:4c:6a:e6:d7:80:7a:d7:9f:07:46:7f:4a:c7:c4:d5:
         ba:17:71:b1:59:0a:57:b5:69:86:ae:10:16:2f:48:25:d0:40:
         6f:3b:52:44:e4:9c:8f:a5:d0:56:79:0e:3a:b7:24:2b:c6:c2:
         a1:54:4b:7b:30:a0:71:3e:29:25:d5:59:83:01:da:65:47:63:
         6d:ac:76:10:84:28:29:27:60:74:9a:e2:0c:f0:06:27:8e:e9:
         dc:d3:d5:75:77:5e:50:d1:8f:41:2a:09:a7:f1:4c:ff:b7:de:
         77:3b:3f:2c:ab:97:e7:09:56:5c:30:7d:5d:1b:03:f0:bf:8b:
         68:57:a1:36:c5:90:34:6e:38:a5:74:63:c2:d9:3b:81:e4:72:
         d4:55:35:61:a1:8d:52:1a:fa:92:65:95:b9:43:39:c5:17:f3:
         ce:54:44:8d:b1:cd:c9:34:e9:86:65:d6:b7:e8:72:f5:39:5f:
         84:d5:ab:18:fe:40:d8:33:0f:fd:61:e5:02:e1:0d:c5:b2:99:
         51:f9:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org