Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/aKOkARM70fkXxjXX-fexlbqB3Is.roa
File:                     aKOkARM70fkXxjXX-fexlbqB3Is.roa (raw, json)
Hash identifier:          PNzcXt9zR/MbaYwTpq2jNAZQDI6zVG5HYeGuR1iYwGc=
Subject key identifier:   68:A3:A4:01:13:3B:D1:F9:17:C6:35:D7:F9:F7:B1:95:BA:81:DC:8B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       1B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aKOkARM70fkXxjXX-fexlbqB3Is.roa
Signing time:             Tue 11 Oct 2022 01:16:14 +0000
ROA not before:           Tue 11 Oct 2022 01:16:14 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        175.103.12.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:16:14 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=68A3A401133BD1F917C635D7F9F7B195BA81DC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:8c:0e:0a:80:87:40:92:6c:ff:a9:31:c3:
                    51:9f:a0:1e:01:c0:e3:26:df:a9:3c:b4:14:83:a0:
                    ff:47:a4:95:f7:f9:7d:e5:04:6b:8e:14:6d:02:26:
                    3d:f7:44:9e:2b:67:3b:cc:3d:7e:5f:86:6b:3e:57:
                    e0:32:4f:f7:9f:7c:d6:94:fc:14:ba:59:eb:c0:a3:
                    d4:79:71:cc:2e:b4:4b:57:a8:b0:ce:08:1a:65:c8:
                    ba:57:8c:77:02:ca:3d:be:02:49:f1:62:20:e7:6a:
                    3c:da:e4:32:c9:75:da:18:da:27:fe:50:96:da:ba:
                    74:c7:6e:81:ea:ed:9d:65:18:a7:b9:00:fa:a5:c6:
                    2a:71:9f:c9:6c:48:df:2c:38:c9:53:c1:9d:01:4f:
                    e9:46:da:91:26:48:7e:9d:80:8a:d5:13:12:8a:9e:
                    9f:60:a8:3d:fe:a5:98:27:a0:07:88:77:42:f5:4e:
                    94:fc:e5:f9:fd:33:14:fb:80:be:fa:f1:00:a0:ab:
                    92:0e:3c:00:4a:58:ba:0e:20:28:4d:bf:a5:48:86:
                    cf:7d:23:5d:e2:f9:05:65:45:56:26:bf:e2:9a:c2:
                    17:66:59:76:96:5a:7a:d2:17:01:a3:52:8f:33:86:
                    64:32:a9:f3:3c:ba:e7:aa:22:39:62:3b:46:9d:2c:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A3:A4:01:13:3B:D1:F9:17:C6:35:D7:F9:F7:B1:95:BA:81:DC:8B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aKOkARM70fkXxjXX-fexlbqB3Is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e8:96:94:32:3a:c0:8c:6a:3a:80:81:af:90:1b:78:6a:1d:6f:
         1d:68:29:33:2a:c2:a2:45:ff:f5:6a:31:80:fd:2e:32:f3:42:
         65:80:7a:0e:46:14:5d:bd:70:7b:be:70:b2:3c:82:70:e5:12:
         dd:7d:e7:3f:21:9f:86:bc:a6:b5:39:ec:23:8c:c5:40:15:bc:
         3d:ad:dc:ea:3e:43:13:16:73:6e:a0:32:65:51:2c:76:a4:f2:
         d3:c6:d2:a4:7d:a0:18:82:e9:e1:63:07:a0:c3:78:57:b4:4c:
         d3:be:99:7b:fc:38:e5:da:14:cb:64:60:7c:37:92:3e:4d:1e:
         d2:4e:48:09:ea:bc:ef:a6:84:7b:0b:13:ea:e6:d7:e1:e9:06:
         14:d2:b1:25:16:7c:c9:96:48:2a:bd:28:3b:d7:aa:50:3a:b6:
         a5:50:d5:94:33:0c:8b:fa:f6:03:e9:d5:47:ab:af:08:13:fd:
         e4:66:2a:7a:04:fc:59:90:d5:a0:05:24:d9:f3:c9:0b:04:61:
         55:af:4b:30:fc:7f:74:e5:31:6f:df:a6:8f:54:9e:ba:2f:ea:
         58:e6:3f:72:e0:97:f2:56:b3:69:7a:19:e1:34:d1:f5:de:00:
         69:4a:8f:db:68:77:44:df:8a:72:fe:4b:a4:5a:94:f0:17:9f:
         08:c3:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org