Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dQOUKMwkoyjVy9FIjUhHfZKIB4M.roa
File:                     dQOUKMwkoyjVy9FIjUhHfZKIB4M.roa (raw, json)
Hash identifier:          DsIBMuAJ8M81W6F73ZFRkDHtH8v0XG/bwDtYXhDJ1Z0=
Subject key identifier:   75:03:94:28:CC:24:A3:28:D5:CB:D1:48:8D:48:47:7D:92:88:07:83
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       F2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dQOUKMwkoyjVy9FIjUhHfZKIB4M.roa
Signing time:             Mon 31 Oct 2022 02:32:23 +0000
ROA not before:           Mon 31 Oct 2022 02:32:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        118.86.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:32:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=75039428CC24A328D5CBD1488D48477D92880783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:9f:97:38:3c:ff:96:6c:94:52:57:06:d1:
                    09:3e:8f:ad:6a:64:8c:c2:57:10:e4:0e:0a:d9:15:
                    88:a6:2b:cf:48:3a:3c:47:3b:dd:f7:09:3e:48:b1:
                    47:8f:c8:95:b5:05:32:7a:35:43:7d:e9:15:ba:79:
                    bb:26:23:f5:49:57:82:ce:bc:bb:a7:25:10:37:3a:
                    9e:11:93:13:7c:a9:ed:8e:f2:9e:4b:eb:af:ef:4c:
                    43:96:1b:85:1e:6d:60:19:e2:f5:a0:e9:7d:15:e9:
                    de:23:2a:a0:c4:5d:54:c2:2e:20:b3:5b:2e:5e:a5:
                    e9:09:25:61:db:b0:4d:ae:f2:49:54:39:3b:c6:db:
                    a8:23:05:74:49:e1:38:c3:6e:a8:f8:a1:9c:01:73:
                    d7:e9:06:1b:6d:e3:24:98:5b:3c:56:98:c2:e1:a2:
                    7c:7a:ea:08:f9:c0:d0:99:70:a7:d7:30:30:99:6f:
                    99:17:17:66:79:a2:56:1c:4d:73:62:a8:cd:06:2b:
                    0b:d8:80:5e:5e:2d:13:55:16:89:67:f5:5a:cd:6c:
                    bd:0c:e2:fe:f2:19:db:02:ab:51:e8:ba:cd:a4:57:
                    d1:60:b7:e4:78:a7:c5:74:5e:8e:a1:5b:4e:7d:ce:
                    5d:8d:93:da:f7:bf:fe:f0:47:3b:80:d1:ec:02:42:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:03:94:28:CC:24:A3:28:D5:CB:D1:48:8D:48:47:7D:92:88:07:83
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dQOUKMwkoyjVy9FIjUhHfZKIB4M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:43:c7:93:67:28:b5:fd:fe:09:41:d5:67:c9:ea:4a:a0:
         55:76:a6:b8:f2:6e:ac:19:80:b0:72:39:1f:83:9f:42:2c:a0:
         98:a4:9e:b1:f9:c7:e9:b6:ed:88:3b:8c:5d:f3:c4:cc:18:ca:
         22:39:cb:b4:3a:a7:c3:a3:12:a7:9d:8e:6d:da:75:92:d8:b9:
         54:5f:50:7a:8a:ea:bb:8a:86:cf:e7:e6:52:60:0a:31:f9:fa:
         df:fd:95:6d:f2:79:60:d6:2e:3f:5d:46:e3:a9:30:c7:91:39:
         51:d1:a7:d2:07:4a:ee:8f:a7:c9:ed:27:10:3a:5f:a4:88:5b:
         cb:66:3e:cd:49:19:70:ee:d8:9a:1d:6e:f8:2d:36:ff:42:9b:
         15:5e:77:bb:27:00:7e:36:6d:74:e0:c9:cf:31:79:4b:56:bd:
         aa:d6:09:37:2f:81:3e:9c:d3:d7:eb:c1:29:46:7f:3c:3f:cb:
         03:cb:91:3a:f4:a9:77:5b:55:89:cf:3f:90:b2:34:31:ca:a0:
         ee:ee:ae:dc:cd:a1:32:a6:0c:99:c4:2d:5c:ae:15:d3:e1:77:
         5c:b8:97:58:49:13:ac:9f:08:8a:fe:46:35:35:7b:4f:27:34:
         cb:5f:b5:a8:5f:f9:94:30:43:fd:2b:6a:56:d4:03:b2:ba:e7:
         f4:2f:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org