Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/f65EDN3KNTSQqA5eMO7HzFW1SsE.roa
File:                     f65EDN3KNTSQqA5eMO7HzFW1SsE.roa (raw, json)
Hash identifier:          nU3bhawO9FJUpB6h8sg7vdFaxowwXjns5Btnb/BE3Dw=
Subject key identifier:   7F:AE:44:0C:DD:CA:35:34:90:A8:0E:5E:30:EE:C7:CC:55:B5:4A:C1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       5E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f65EDN3KNTSQqA5eMO7HzFW1SsE.roa
Signing time:             Mon 17 Oct 2022 02:15:50 +0000
ROA not before:           Mon 17 Oct 2022 02:15:50 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        117.53.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:15:50 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7FAE440CDDCA353490A80E5E30EEC7CC55B54AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:b5:cb:bd:bf:8c:dd:22:03:4c:27:27:fe:
                    e1:d4:96:7f:7e:73:2b:ff:a5:6e:cc:22:96:72:86:
                    0c:83:5d:53:1b:e6:bf:1e:cb:54:09:37:53:e3:aa:
                    bf:a8:cc:1a:e8:82:45:3e:97:22:9a:95:4b:3b:b7:
                    78:50:70:46:1d:35:69:b9:d0:7f:a2:dc:9a:94:19:
                    ee:b2:7b:d2:c6:09:d7:b6:a4:f4:f0:2d:55:1c:92:
                    7e:99:06:59:bd:a8:17:a8:34:78:99:27:1d:78:1f:
                    46:a3:00:65:e2:89:ff:f0:f0:ad:b5:5d:c1:44:e0:
                    7f:34:d2:ed:de:64:40:12:46:09:47:8f:c6:8a:86:
                    03:d7:33:d7:4d:9d:fd:b3:ae:c0:9e:22:64:ac:e4:
                    f9:06:ab:2f:62:fc:54:2a:60:f4:a0:58:af:28:fc:
                    9d:13:2a:5d:66:f7:4a:ac:20:fc:c1:44:27:e6:f2:
                    24:d5:64:48:11:36:08:7b:b9:c2:47:6b:eb:14:45:
                    7c:22:d8:73:90:5d:62:a2:1a:2f:1b:0a:e8:ad:79:
                    a9:06:46:3a:df:2c:8b:e5:76:d5:41:b7:88:85:6c:
                    b0:d1:e9:d2:4c:6a:18:4d:c1:f2:8c:e6:f4:ec:3b:
                    9d:03:a0:40:80:35:88:91:f2:41:2d:66:d0:ea:f6:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:44:0C:DD:CA:35:34:90:A8:0E:5E:30:EE:C7:CC:55:B5:4A:C1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f65EDN3KNTSQqA5eMO7HzFW1SsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:b1:14:e9:65:6d:11:be:0e:b9:89:33:d0:d4:46:3c:b8:9d:
         c3:75:f4:f3:b0:21:86:f1:2a:3c:44:07:42:a5:73:14:3a:ee:
         54:71:1e:1e:6c:6b:ea:85:da:90:cf:0e:ea:4f:6c:88:d0:ad:
         06:7e:16:1d:f5:07:1e:3a:2f:73:b5:f0:7c:92:98:84:cd:83:
         1d:b5:b2:43:a6:89:ae:12:0f:69:52:8d:24:19:10:aa:55:bf:
         f7:c9:f2:8b:ec:a7:4f:98:63:16:6c:cb:49:0a:6c:87:1b:b2:
         dd:eb:10:2b:ae:20:fd:f4:f7:d7:af:61:5a:fb:cf:a3:f4:c5:
         15:c9:a7:85:29:8b:8d:cf:ba:41:f0:ac:40:e7:ac:0c:83:66:
         8e:99:53:64:45:21:92:a2:f7:a8:7d:74:b3:40:82:31:6d:01:
         82:d1:4c:ca:8d:63:77:22:c3:92:de:4f:bd:14:ef:64:38:41:
         e1:66:79:16:08:27:30:b1:d4:7a:08:49:f9:58:78:6d:73:d7:
         c0:f1:20:0d:d9:12:f2:ad:a6:80:90:1b:4c:dd:7a:7b:7a:d4:
         58:6c:be:38:30:03:85:ce:62:19:f8:a2:e7:f5:73:6c:6c:21:
         af:59:68:1e:17:84:42:f8:41:10:54:c4:55:c8:c5:03:84:ed:
         66:81:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org