Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/iT7zjSGpX1vlhDJ5GxfoqY-fLpw.roa
File:                     iT7zjSGpX1vlhDJ5GxfoqY-fLpw.roa (raw, json)
Hash identifier:          O896XcOKynvTInjwEwTnw9isnxKPZ7tVsZbJ1IsLwL0=
Subject key identifier:   89:3E:F3:8D:21:A9:5F:5B:E5:84:32:79:1B:17:E8:A9:8F:9F:2E:9C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iT7zjSGpX1vlhDJ5GxfoqY-fLpw.roa
Signing time:             Mon 24 Oct 2022 04:19:10 +0000
ROA not before:           Mon 24 Oct 2022 04:19:10 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        202.72.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:19:10 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=893EF38D21A95F5BE58432791B17E8A98F9F2E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:94:9f:53:33:57:45:c3:6a:da:86:b9:4d:
                    d5:57:50:87:31:7c:c2:b2:d0:87:8e:46:78:d9:60:
                    99:44:60:8f:b8:db:c6:50:9a:65:a4:be:89:39:a3:
                    27:97:69:00:e3:18:b5:9b:fa:79:0c:87:e7:2f:e0:
                    22:6d:a5:6a:ef:6f:28:b3:ea:dd:e5:dc:ec:c8:4b:
                    66:2b:93:eb:f1:c0:ee:ff:18:7b:0e:19:87:51:99:
                    34:e6:94:f6:2c:f3:70:ef:46:fd:f9:23:2b:3c:f3:
                    f3:48:a6:4d:92:a5:86:0d:c6:2e:5f:e4:c3:69:3a:
                    c7:02:b6:1b:57:4c:61:08:63:09:f3:01:ff:68:98:
                    3f:46:f7:b6:6a:61:e6:6c:a8:02:27:f1:38:d7:e2:
                    97:db:47:56:1a:db:f9:e5:b6:c0:ec:fd:a3:43:f3:
                    60:e5:9e:12:b5:df:f3:21:1e:4c:85:35:72:d1:48:
                    eb:87:62:00:9c:64:64:ca:bd:50:84:84:53:7f:4c:
                    b0:57:71:9e:1f:fa:35:9d:b5:be:92:19:46:ca:5b:
                    b1:23:1f:b8:20:be:98:83:ba:fd:39:13:12:b7:7a:
                    ef:4e:29:31:c5:67:d5:f4:e0:f3:4b:fc:02:c3:cb:
                    ac:f4:b0:ae:87:35:57:3e:4c:18:35:77:89:79:e5:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3E:F3:8D:21:A9:5F:5B:E5:84:32:79:1B:17:E8:A9:8F:9F:2E:9C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iT7zjSGpX1vlhDJ5GxfoqY-fLpw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:4a:fc:4e:8c:ee:da:d7:4d:94:f9:7d:1b:47:5a:f3:0b:
         9e:d9:db:54:51:2f:8d:a7:54:9e:95:e3:60:f7:2b:14:56:46:
         dd:2b:6e:6a:cd:36:23:7a:63:c0:3d:0c:a5:d5:dd:c6:9b:e9:
         83:67:be:f9:ce:73:a6:3f:a3:95:2c:74:a1:ae:ef:a8:8a:15:
         10:32:a1:fc:e4:52:8a:f5:d5:9f:8b:cf:7c:36:a6:01:a1:0a:
         a4:eb:ed:75:b9:e3:ae:1b:b1:7e:61:67:bc:0d:10:8c:27:3e:
         72:82:eb:88:a1:13:44:d0:92:30:b2:ae:ed:cc:89:d8:5f:56:
         d6:c5:6d:88:f3:a9:13:fa:d5:d8:e1:48:78:78:46:75:12:50:
         a6:45:ea:e9:5a:c3:7a:91:b4:d2:08:8b:16:18:ef:c5:f6:97:
         36:bb:10:7c:aa:6f:97:be:80:fc:5d:47:be:b1:9d:ab:40:0d:
         8c:82:8b:9b:2b:fb:f7:0d:3c:26:c1:a6:92:dc:98:87:db:94:
         f5:44:60:be:d6:ff:c5:cb:0a:52:8f:02:50:df:60:ae:6e:d2:
         3f:99:0d:f7:30:2e:1c:de:71:99:ac:cf:4a:dd:e8:bd:28:16:
         b4:19:14:ec:06:4a:ee:86:59:42:d3:8c:4c:15:2d:d2:b8:a4:
         a1:8c:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org