Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/bUDasHJMirc1tvSOY6FskVwV62M.roa
File:                     bUDasHJMirc1tvSOY6FskVwV62M.roa (raw, json)
Hash identifier:          Ebx5/hrTbHQtQCHZx34LSu5g8A/YL1PurVyRTysemow=
Subject key identifier:   6D:40:DA:B0:72:4C:8A:B7:35:B6:F4:8E:63:A1:6C:91:5C:15:EB:63
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       F9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bUDasHJMirc1tvSOY6FskVwV62M.roa
Signing time:             Thu 24 Nov 2022 01:05:31 +0000
ROA not before:           Thu 24 Nov 2022 01:05:31 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        125.62.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov 24 01:05:31 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=6D40DAB0724C8AB735B6F48E63A16C915C15EB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:ba:85:c3:5e:48:8d:6f:d2:6b:0a:89:fa:
                    44:ca:d9:3e:7c:d8:ec:31:4d:b1:16:9a:76:be:a3:
                    5f:3d:fd:3a:92:fe:27:ff:5f:a3:1d:67:ec:09:2c:
                    ae:d9:f8:3a:d2:83:3b:25:a5:fe:a9:1e:c8:60:de:
                    6f:a5:6a:39:a6:41:ff:35:03:43:20:3e:19:e6:f7:
                    ff:8d:f2:7a:d3:4f:de:8a:60:6c:a7:11:79:fa:aa:
                    0b:8a:13:96:f9:6b:e4:7e:15:b7:2e:00:69:03:3c:
                    10:13:9a:18:51:9e:13:80:a8:45:97:2b:30:cc:7b:
                    b4:66:84:42:84:15:0f:62:12:6e:cd:72:75:1c:82:
                    d0:e1:b8:51:3e:e7:26:5e:2a:c5:e4:c4:80:78:b4:
                    84:0c:1a:71:77:15:cc:43:9a:48:ac:1f:0a:1a:48:
                    1f:ed:d1:59:fc:a0:28:19:0e:0a:b8:32:61:39:c5:
                    ec:ea:8e:35:f8:85:56:0d:f6:c2:bd:30:4d:a7:e3:
                    73:51:83:17:6c:50:9a:86:b4:8d:c9:7e:67:e8:70:
                    43:3d:07:e7:29:48:64:a7:7a:db:94:90:c8:06:d8:
                    02:63:15:8b:93:16:77:6a:39:d9:9c:01:1b:ec:28:
                    2c:0e:17:6c:7e:91:6e:a1:09:64:bb:fa:76:5e:65:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:DA:B0:72:4C:8A:B7:35:B6:F4:8E:63:A1:6C:91:5C:15:EB:63
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bUDasHJMirc1tvSOY6FskVwV62M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:13:72:2e:4f:2f:f4:07:24:c5:a4:6d:e1:4f:31:23:d4:
         6a:36:fb:51:fb:bb:c1:5f:14:1f:c3:61:d3:6a:93:40:5c:63:
         64:cc:98:2c:0c:70:33:01:d1:9d:e8:de:bc:bc:1f:9b:e1:47:
         32:b3:3b:c1:c7:08:4e:91:4e:b6:76:6d:d9:20:d0:b3:35:34:
         ef:ab:2d:e7:01:62:95:6e:a7:2c:ee:10:4f:9f:6c:80:f9:77:
         92:ae:af:48:c0:9a:ac:e6:12:96:d2:e1:f6:29:ad:13:82:dd:
         07:54:6c:c2:20:f7:75:78:e1:fc:3e:89:e1:ce:29:8b:c3:9e:
         60:de:9e:bd:6e:e8:aa:59:f7:3f:ad:b0:10:42:2a:3c:4a:b8:
         64:f4:3f:01:06:af:e9:f6:9e:c5:cb:17:0d:cc:20:38:89:ee:
         5c:10:7e:de:c6:c8:2e:ca:45:c7:9c:fc:c0:74:36:04:6c:29:
         93:ca:c1:5f:97:03:f3:0d:8a:ba:18:5c:e2:4c:6a:1e:ef:47:
         ec:c5:70:5d:3e:ea:2e:44:cd:0d:66:3d:a7:80:84:13:06:2d:
         65:ef:07:27:7b:bd:d6:be:4d:ea:7b:1b:d4:da:bf:aa:0b:05:
         52:19:51:48:26:54:be:4c:56:18:dc:ab:e8:d6:7a:cc:2f:2b:
         f9:89:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org