Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hGHo3i4iIajJQNIfuTzQ_JhedWY.roa
File:                     hGHo3i4iIajJQNIfuTzQ_JhedWY.roa (raw, json)
Hash identifier:          uthMmtS4fiIot4VhZEpqf3vaP/bD9hIVzEln5u2XKp0=
Subject key identifier:   84:61:E8:DE:2E:22:21:A8:C9:40:D2:1F:B9:3C:D0:FC:98:5E:75:66
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       B3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hGHo3i4iIajJQNIfuTzQ_JhedWY.roa
Signing time:             Mon 24 Oct 2022 04:34:54 +0000
ROA not before:           Mon 24 Oct 2022 04:34:54 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        211.19.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:34:54 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8461E8DE2E2221A8C940D21FB93CD0FC985E7566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:14:88:0c:71:52:1c:5f:dc:d9:e6:18:71:
                    9e:94:fd:ef:85:3c:47:33:fb:1c:8d:b5:96:25:20:
                    dc:1a:01:48:71:8a:6e:95:8e:51:44:31:9e:90:f3:
                    1d:ae:68:c3:f6:8d:a6:28:b0:91:78:f5:e8:41:18:
                    8a:3c:87:06:c3:df:9c:cc:b9:f4:47:01:7c:8f:0c:
                    d4:31:3a:c7:14:0d:d2:ce:35:14:61:74:71:78:00:
                    d9:24:76:2f:15:37:5f:1d:50:67:65:14:72:77:06:
                    12:bd:16:84:7a:e4:85:9d:24:31:d5:3c:66:4c:21:
                    2a:cf:09:af:88:57:b1:aa:1c:36:41:df:e9:df:e8:
                    44:b6:21:8a:b1:de:09:d3:09:16:62:73:e5:d5:81:
                    44:a1:f3:68:4e:1d:c1:a5:48:8b:c8:94:c0:5e:41:
                    82:bd:5e:6e:a2:f1:9a:2e:43:b1:c1:37:b0:cc:80:
                    a9:12:8e:61:87:4f:e4:eb:b4:5f:0d:60:d4:b9:ec:
                    b1:20:43:0c:11:10:8a:c6:e6:7c:76:ed:e0:d1:ea:
                    86:7f:88:49:6b:1e:00:cc:7f:fa:7f:e9:af:36:c6:
                    20:83:7d:bb:61:83:91:02:63:91:20:aa:ab:2c:e8:
                    92:a6:c1:ca:cb:c2:56:27:98:9c:78:70:11:69:8a:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:E8:DE:2E:22:21:A8:C9:40:D2:1F:B9:3C:D0:FC:98:5E:75:66
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hGHo3i4iIajJQNIfuTzQ_JhedWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:95:58:fe:b9:ed:ef:b3:86:1a:e6:65:93:30:b5:ca:23:11:
         96:0c:0d:36:ce:11:5f:91:4e:89:b4:db:36:a3:c9:15:f5:4c:
         5b:f0:74:23:2f:27:41:cb:8b:1c:14:17:16:bb:c1:24:d6:49:
         88:5c:7f:0c:3d:cb:e1:06:36:ec:cf:ab:4b:03:19:3b:3b:63:
         d4:67:36:35:f2:d5:0e:3f:e3:72:73:0d:39:e5:8b:03:c9:c2:
         2a:7b:31:2f:1b:f0:4f:8d:db:30:ff:a5:f8:fc:56:d5:16:9d:
         03:3a:ba:6b:05:0e:76:31:56:a5:e4:ef:99:a4:bf:7e:74:ac:
         71:6c:15:08:06:59:9b:4a:47:f6:10:23:29:1f:82:5f:b2:ba:
         64:11:f8:c7:52:3b:d0:64:c4:03:aa:36:24:c9:b7:0c:b0:fb:
         06:5f:de:fd:55:2d:59:c3:cc:a9:e5:9c:e1:c3:f9:12:a8:03:
         70:fd:d4:bc:0f:37:b9:21:15:93:55:43:18:21:a1:72:58:8e:
         77:e6:e7:a2:28:20:73:b7:ba:35:ce:a0:20:6a:de:e7:97:a1:
         d6:cf:5d:55:5e:7e:bb:74:16:a7:45:5a:06:5a:e3:23:8d:5b:
         c8:1f:a4:ea:da:c3:99:1c:71:02:da:d4:6f:30:f3:63:77:d0:
         c3:c0:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org