Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZrDA2QrGMgjnpp4UXsoxoMspcmw.roa
File:                     ZrDA2QrGMgjnpp4UXsoxoMspcmw.roa (raw, json)
Hash identifier:          Ont77+pUwWI2A/MakAlicg82qgAPlM/RHLGWqdgbuHM=
Subject key identifier:   66:B0:C0:D9:0A:C6:32:08:E7:A6:9E:14:5E:CA:31:A0:CB:29:72:6C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       41
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZrDA2QrGMgjnpp4UXsoxoMspcmw.roa
Signing time:             Mon 17 Oct 2022 01:33:51 +0000
ROA not before:           Mon 17 Oct 2022 01:33:51 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        61.215.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:33:51 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=66B0C0D90AC63208E7A69E145ECA31A0CB29726C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:c1:e0:0a:73:cd:1e:f8:08:de:be:b5:b4:
                    04:9e:08:23:cd:1e:5c:23:ee:15:9e:77:ef:6b:b1:
                    f6:15:c9:02:9f:14:5b:7d:be:39:3c:ba:d4:54:ac:
                    ab:c8:bf:39:49:07:36:30:31:db:92:18:42:f0:85:
                    ac:0d:95:5f:40:a5:94:90:1a:cd:f5:f7:80:8e:b2:
                    65:b4:fb:9c:04:c5:65:bb:7e:c7:0e:3a:09:c0:10:
                    d9:64:c8:61:b7:4f:3a:a6:c0:7c:cd:7b:72:c1:a9:
                    1b:75:50:6e:b5:a0:cc:0a:f1:e3:72:25:5d:02:45:
                    15:24:d5:c2:27:43:95:2f:61:d2:9c:8d:ca:19:e9:
                    77:ac:b5:5b:ae:e5:bd:cc:0e:34:de:34:c9:0e:84:
                    e3:86:b0:5c:1d:b2:fb:b7:d1:a9:4c:13:ef:26:10:
                    4a:3f:68:37:60:64:6c:56:32:06:77:c0:a0:ab:7a:
                    0a:76:ba:de:1f:1e:20:bc:e2:67:7d:c5:b1:de:17:
                    11:f3:02:0a:25:ce:31:58:c2:d0:26:d3:54:de:b9:
                    aa:aa:5c:29:66:5b:44:26:c5:cb:83:2e:16:f8:45:
                    ee:a8:03:48:b7:4e:40:83:47:e3:72:b6:1c:93:52:
                    c9:82:69:47:cd:0a:6d:99:f7:53:8e:6d:a6:05:89:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:C0:D9:0A:C6:32:08:E7:A6:9E:14:5E:CA:31:A0:CB:29:72:6C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZrDA2QrGMgjnpp4UXsoxoMspcmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:d3:63:42:dc:a0:36:1f:73:ef:3c:0d:13:d1:d9:c2:33:e2:
         1a:09:fc:c6:8f:af:b2:df:56:26:3d:7e:ac:8d:6e:46:68:cf:
         76:7c:7f:55:4d:89:23:64:d8:cb:05:e2:2f:87:e8:e8:86:aa:
         63:50:e3:37:e7:ca:41:da:a4:c6:1c:ba:d2:03:c8:d2:6e:41:
         8a:40:41:d4:c9:94:1f:94:64:2a:2c:d6:52:3e:4d:56:d5:b0:
         00:8e:80:9d:6c:ff:7f:9a:24:8e:0f:15:3d:95:df:f1:1d:85:
         e7:8b:cb:57:d9:26:b8:f4:00:28:76:d9:59:b5:a7:c0:cd:46:
         20:ea:60:a7:0c:16:67:8f:49:8a:72:3a:ab:16:98:e8:5a:08:
         21:76:25:21:d9:16:ce:26:c2:94:0e:99:c0:18:a0:6f:8a:cd:
         52:b3:10:55:cf:d7:b9:cc:0b:24:3f:23:71:8b:50:98:b5:ba:
         2a:7a:75:1b:b5:90:f7:82:89:2f:c4:8d:b0:8b:d3:58:df:15:
         6c:0e:f5:31:a0:db:82:27:6b:9d:9a:93:66:1e:51:bf:a5:d6:
         7e:29:ef:fe:f1:da:37:1d:ad:87:c9:33:fc:ad:ae:d1:a4:64:
         0b:ec:6d:98:de:0c:99:cd:b3:be:a2:fa:80:26:85:f7:22:be:
         fd:20:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org