Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/lqnGcZEzdor6XtV2DIxZTziWCm4.roa
File:                     lqnGcZEzdor6XtV2DIxZTziWCm4.roa (raw, json)
Hash identifier:          9kqmD+/XasP9YyB/WhaYMvVVX4ZplaErODRkWoSvBUM=
Subject key identifier:   96:A9:C6:71:91:33:76:8A:FA:5E:D5:76:0C:8C:59:4F:38:96:0A:6E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       2D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lqnGcZEzdor6XtV2DIxZTziWCm4.roa
Signing time:             Tue 11 Oct 2022 01:50:08 +0000
ROA not before:           Tue 11 Oct 2022 01:50:08 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     18134
IP address blocks:        219.100.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:50:08 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=96A9C6719133768AFA5ED5760C8C594F38960A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:9b:95:9c:08:33:7c:f3:73:86:50:62:32:
                    82:1d:ed:94:f2:a5:1e:82:bc:48:8b:71:c0:04:3c:
                    69:da:a4:a5:4f:22:be:d4:32:48:e9:6d:6e:6a:40:
                    56:e8:c8:b1:66:f7:bf:c8:5e:fb:15:53:29:61:56:
                    a2:92:9b:98:3c:a9:53:b3:62:6d:9f:fd:d5:f8:59:
                    5f:6d:36:15:36:37:0f:74:2a:c1:0e:8d:23:07:96:
                    85:db:3f:2b:61:81:75:8a:d9:e3:a1:e6:9d:36:85:
                    67:ae:e6:0e:ea:57:25:57:de:bd:c5:cd:1a:17:3e:
                    68:1b:56:53:59:c7:9c:5d:b6:49:b4:b2:98:c7:ab:
                    52:17:4b:0f:e2:9c:58:ec:cf:8d:6b:a9:fa:85:1a:
                    2b:78:86:21:0b:2f:0a:64:de:30:16:6c:43:24:ff:
                    6f:f0:e9:88:e0:28:c6:d5:f2:92:49:24:2e:d0:4d:
                    b1:90:90:69:7d:8b:51:22:cd:78:e9:d2:33:10:89:
                    26:25:3d:5f:ef:c6:17:9a:57:e7:58:a8:7b:2f:a5:
                    60:6b:a2:0f:f6:64:88:23:75:8b:53:40:90:e5:42:
                    9b:ec:24:48:70:f6:9e:ef:59:23:10:13:15:81:2b:
                    74:0c:09:63:a8:60:36:56:1a:2a:28:12:84:30:e4:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A9:C6:71:91:33:76:8A:FA:5E:D5:76:0C:8C:59:4F:38:96:0A:6E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lqnGcZEzdor6XtV2DIxZTziWCm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:59:72:0c:69:b9:ce:f0:50:8b:41:b7:72:05:de:05:80:
         04:0e:43:a0:8e:e7:17:83:93:b3:3a:08:90:94:7a:1e:7c:38:
         00:92:99:f7:37:8c:09:6e:41:31:a4:d4:28:2a:03:73:ff:d1:
         2a:6f:8a:9a:d1:9c:05:db:c0:fb:30:07:fc:55:0e:9d:2e:af:
         6a:56:4b:9e:a6:8a:c6:ce:c0:af:a7:c2:96:d4:19:96:1c:e7:
         e7:5c:f4:c6:7e:f0:6f:00:3e:60:c6:b8:97:62:e5:8f:e4:7d:
         51:2f:3b:ca:43:cb:33:b2:8d:00:48:1d:59:36:3e:98:b4:2d:
         f0:81:bd:f4:3c:2f:d5:fb:a7:9a:28:2c:8d:1a:4e:8d:ea:df:
         18:52:f6:d1:cf:1d:93:1d:8e:fc:ec:6b:4c:bc:13:fe:f9:1c:
         bb:77:16:9f:4b:2b:ba:f8:34:f0:b8:1f:92:8f:29:39:ee:40:
         29:27:26:8d:50:bc:a1:e0:ea:6f:29:e6:b3:35:25:7f:c1:05:
         93:ce:a5:bf:53:a5:27:f4:76:9e:8e:18:7a:05:9d:e4:69:0b:
         3d:d2:18:f2:93:ac:aa:b4:76:9a:e7:5e:b6:85:af:a9:38:07:
         f8:0e:8f:1b:f1:96:17:1b:be:e1:62:d6:0c:37:ca:d5:81:59:
         3a:6b:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org