Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/lrUx1Kl1kKsm-x4B_VEXCWIrFLA.roa
File:                     lrUx1Kl1kKsm-x4B_VEXCWIrFLA.roa (raw, json)
Hash identifier:          Ix32Z8/LzwUqOJn5Pikyl41glqXrxfaZVSZubeeXhuA=
Subject key identifier:   96:B5:31:D4:A9:75:90:AB:26:FB:1E:01:FD:51:17:09:62:2B:14:B0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       78
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lrUx1Kl1kKsm-x4B_VEXCWIrFLA.roa
Signing time:             Mon 24 Oct 2022 02:12:21 +0000
ROA not before:           Mon 24 Oct 2022 02:12:21 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        61.115.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:12:21 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=96B531D4A97590AB26FB1E01FD511709622B14B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:07:ac:53:91:22:9c:fa:e7:11:a8:97:47:
                    f8:a7:43:99:b9:11:45:ca:27:a8:d5:78:a1:3a:1e:
                    96:41:97:ac:fc:82:6d:1a:22:d0:e5:be:18:05:e3:
                    92:d1:b3:af:9d:ba:e2:a6:e7:51:be:32:a1:01:73:
                    65:ed:5e:b6:cb:2e:82:5c:8b:f1:46:d7:34:08:db:
                    7d:c4:37:6d:70:cf:3a:81:99:c3:4c:00:36:d8:10:
                    78:f6:84:e2:61:da:01:a3:bf:b4:0c:fc:2c:55:7d:
                    24:a9:b2:12:47:07:ec:ce:3b:8b:aa:03:2e:cb:3e:
                    7b:9d:72:af:5b:cd:ea:53:34:00:b7:00:2f:23:bd:
                    26:95:e0:52:06:ab:f6:d7:6c:c9:51:5d:e0:a3:5e:
                    d7:80:8b:90:4d:ef:fb:8b:40:dd:f4:48:cb:16:8f:
                    03:db:b9:ae:1c:74:d2:cf:09:05:20:52:46:f3:67:
                    25:b3:ac:a4:c0:68:aa:61:1d:a7:23:ea:a7:3e:75:
                    04:4d:7e:36:ab:5c:1c:ab:b2:b4:ed:16:30:8a:a5:
                    22:c1:43:f4:a4:3b:bf:84:e0:be:8e:9d:34:ae:17:
                    89:0b:23:ad:59:cd:f2:22:ae:61:da:0f:90:f6:5d:
                    92:cc:88:eb:88:3b:6f:c8:2d:16:93:41:0f:2d:9b:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B5:31:D4:A9:75:90:AB:26:FB:1E:01:FD:51:17:09:62:2B:14:B0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lrUx1Kl1kKsm-x4B_VEXCWIrFLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:10:db:19:98:0f:15:78:1f:94:2f:77:ca:b7:2f:70:49:8f:
         fb:aa:64:64:e6:98:7e:3c:a2:6c:51:b7:3b:d6:8f:a1:b9:c0:
         c5:23:28:21:02:44:c0:74:7b:6e:9c:09:87:c3:52:6e:c4:c1:
         6c:9c:63:7f:b4:07:07:ad:4d:38:ea:48:e8:8f:86:dc:55:89:
         cd:26:a2:3f:8c:03:01:21:66:b6:ba:df:7d:e3:a0:62:d8:b1:
         60:88:10:8c:10:81:1b:6e:8d:ac:dc:4c:54:21:6b:c0:3a:d8:
         3d:c3:dd:a9:27:ac:79:c7:cb:62:f7:95:68:f7:f9:f4:15:28:
         af:5d:db:8f:e7:7c:a8:72:85:32:71:2f:8d:e6:35:87:fc:42:
         23:a2:58:97:43:c1:8d:3d:b1:aa:db:c9:c4:67:32:43:e8:90:
         c3:c4:1c:ff:e7:b8:8b:8b:0d:37:8d:0f:67:a3:3b:dd:88:6a:
         ab:5e:1c:ff:96:bf:56:fa:eb:68:55:9f:5e:70:51:29:2a:fe:
         b6:2f:da:8d:fe:d1:25:ec:c5:4a:7f:d0:7a:65:45:d2:ff:83:
         11:df:37:86:96:6f:59:1b:0c:ab:84:0e:c4:5a:15:d7:e0:e8:
         dc:b6:eb:17:49:13:3c:81:8f:ba:a3:11:9d:03:10:ca:0f:ac:
         a2:53:8a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org