Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/iIbf5pqyUtHLb8IcGu61nKrn_4U.roa
File:                     iIbf5pqyUtHLb8IcGu61nKrn_4U.roa (raw, json)
Hash identifier:          JBA2MTLDa+d+SF7iRH147ZHdCjCa+eSuoJCn4silGSE=
Subject key identifier:   88:86:DF:E6:9A:B2:52:D1:CB:6F:C2:1C:1A:EE:B5:9C:AA:E7:FF:85
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       8D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iIbf5pqyUtHLb8IcGu61nKrn_4U.roa
Signing time:             Mon 24 Oct 2022 02:44:40 +0000
ROA not before:           Mon 24 Oct 2022 02:44:40 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        114.134.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:44:40 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8886DFE69AB252D1CB6FC21C1AEEB59CAAE7FF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:5e:b7:47:27:7d:13:57:0d:a6:40:5a:fd:
                    5b:b1:9f:c4:6d:58:b6:0a:fa:34:a7:5b:73:9c:07:
                    f1:b4:ca:88:51:6c:19:0e:28:ea:34:e0:f2:08:4b:
                    75:7a:e0:13:33:e1:51:2d:b4:fa:87:55:96:f4:9c:
                    b8:d2:2c:27:1d:94:b7:e0:02:f3:cf:b3:45:35:6f:
                    7e:f5:96:19:98:2d:8f:cc:1d:b8:0d:11:12:a4:02:
                    c5:9e:c8:a8:fd:b7:65:a0:26:7c:af:30:e6:0d:e5:
                    d9:9b:24:de:a8:fd:96:4e:de:17:7b:d0:b3:dd:b1:
                    63:91:80:20:8e:19:7b:7f:72:7f:11:2d:01:2c:12:
                    89:ec:b7:1b:aa:84:97:89:73:26:48:44:4c:bc:52:
                    0e:91:b4:03:53:b3:fd:2e:9b:f7:f4:a2:1d:91:a5:
                    5c:93:91:3b:83:a0:e1:98:c8:79:86:d1:0b:eb:a7:
                    7c:a3:43:8f:0c:1f:f1:0d:fc:77:f2:fa:d6:a1:c9:
                    82:eb:a3:1a:84:c7:a8:a4:01:99:7b:de:74:6c:5b:
                    31:a6:af:c1:6b:52:49:6d:93:4f:c7:01:2f:40:27:
                    67:9e:64:65:18:a8:75:b7:ff:f6:ce:c1:7c:f0:33:
                    dd:6a:07:38:00:49:9a:4f:f5:ad:e6:cf:ee:f1:b7:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:86:DF:E6:9A:B2:52:D1:CB:6F:C2:1C:1A:EE:B5:9C:AA:E7:FF:85
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iIbf5pqyUtHLb8IcGu61nKrn_4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:a9:c0:df:7e:2c:c0:d3:c5:e4:07:3c:a7:b3:ec:7c:99:
         82:34:a2:f1:21:34:39:76:a5:7a:d9:0e:5f:6b:b1:a6:1a:72:
         89:8e:c8:67:76:31:e3:f6:a2:c0:49:5a:7c:8b:71:46:0f:ea:
         4d:4d:ff:30:e7:61:bb:05:db:04:8e:b3:66:f7:c0:fa:23:61:
         b2:c5:80:ca:a0:a5:62:e8:43:dd:5c:30:ba:eb:9a:0a:13:9a:
         76:43:03:f2:a3:c6:36:ef:4b:9d:e0:d9:9b:36:59:f4:28:97:
         c1:dc:ee:db:86:29:21:10:e2:24:05:14:be:5e:f8:04:6d:1c:
         59:7e:0d:35:2a:91:e0:92:d7:bb:6a:bd:6b:96:25:4f:0d:b5:
         2a:31:7c:f2:91:41:81:03:38:44:ac:79:a4:88:88:e3:48:72:
         04:c8:5e:2e:5c:10:e5:85:2b:25:2f:3e:3f:12:98:fb:1a:70:
         48:fd:a3:fb:34:58:2a:95:62:10:87:2d:ce:25:30:1b:a7:da:
         99:91:c1:7f:3a:87:43:e5:2e:5d:05:5b:80:d7:28:83:52:32:
         fc:dc:a3:15:b0:38:29:38:cd:dc:02:bf:17:e4:c9:76:38:c9:
         7f:f4:e9:b5:39:c7:a1:53:dc:ed:2b:55:b0:6a:f6:99:86:92:
         7b:4e:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org