Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mfxZXTCYi6iFrIoyz_WR2hU71X4.roa
File:                     mfxZXTCYi6iFrIoyz_WR2hU71X4.roa (raw, json)
Hash identifier:          rlMRpBg+phFnIpVLHbm7PuGtExRYoAa2MMg3vxIduuA=
Subject key identifier:   99:FC:59:5D:30:98:8B:A8:85:AC:8A:32:CF:F5:91:DA:15:3B:D5:7E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       6C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mfxZXTCYi6iFrIoyz_WR2hU71X4.roa
Signing time:             Mon 17 Oct 2022 02:38:07 +0000
ROA not before:           Mon 17 Oct 2022 02:38:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23788
IP address blocks:        202.162.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:38:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=99FC595D30988BA885AC8A32CFF591DA153BD57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:42:c1:8a:11:a4:73:0f:e6:a5:b2:0c:3d:
                    0c:13:f0:12:2d:1c:a3:20:51:91:f3:ec:74:da:da:
                    5f:ba:59:30:18:6d:10:f4:96:b8:72:52:80:81:84:
                    6e:0f:be:5c:ef:f3:94:8d:21:30:6f:ed:d0:f8:05:
                    8b:81:37:a2:fd:57:44:34:cb:95:2a:e1:aa:01:a3:
                    d8:0c:9b:86:07:d1:40:55:26:e2:78:7a:6b:c8:50:
                    27:18:dc:ed:c8:d9:8b:26:18:3e:67:e3:93:af:fa:
                    e2:e7:04:fc:53:30:c7:db:4e:48:c6:91:aa:c1:97:
                    60:f6:4c:ea:10:61:fe:6f:e1:ba:14:65:62:1a:75:
                    b9:eb:9a:04:08:5e:23:26:26:d8:ce:cb:61:51:e7:
                    62:3b:81:50:2c:ce:37:7a:bc:fd:8d:4c:d9:5a:f0:
                    6d:ec:ce:71:1c:b0:db:3f:f6:ed:39:71:e4:3f:aa:
                    5e:61:3b:06:5a:d7:5d:37:4e:c3:d0:dc:a4:39:42:
                    d1:81:b7:1e:de:27:00:08:f7:af:80:14:66:e3:8d:
                    4d:a7:46:20:92:e6:b4:46:e0:64:f5:85:85:8b:d5:
                    10:dd:ab:5f:2e:3a:b2:e3:d2:b9:31:d1:be:60:ef:
                    7c:2a:fc:9b:9e:a7:4d:fc:25:a5:11:b8:bc:07:46:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:59:5D:30:98:8B:A8:85:AC:8A:32:CF:F5:91:DA:15:3B:D5:7E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mfxZXTCYi6iFrIoyz_WR2hU71X4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:39:4c:b1:a6:c9:1d:29:a0:4c:44:f5:f6:0a:8e:e3:d8:
         87:5e:ce:9a:df:d3:d5:df:d2:cd:31:c5:e2:0f:dc:6d:ca:35:
         ab:2b:b2:a1:93:49:a8:e7:09:7d:75:65:f3:a6:21:6b:c0:ea:
         c6:e5:08:cd:ed:60:8e:29:1c:47:3d:a4:b4:8f:70:9e:8f:a2:
         e1:23:82:92:c5:46:71:80:d3:41:1c:f4:7b:4b:3e:20:82:50:
         ae:e0:8c:42:b4:68:ef:c6:69:70:80:b8:3f:4f:b8:c3:01:7e:
         7b:52:f3:aa:9b:7d:b0:21:19:38:a5:fa:7e:e0:25:52:82:0e:
         f4:13:10:98:a6:9f:1c:15:fe:df:d0:ee:0f:80:ad:a8:97:c0:
         f5:82:86:d6:e8:59:14:b1:71:0e:e5:3e:24:b5:30:69:39:52:
         ba:bd:6f:4a:e1:2f:fd:f5:c1:22:69:6b:a5:b5:e6:7d:87:d3:
         ed:08:80:3c:66:f6:83:bc:41:6a:5c:e9:a6:89:51:2b:13:2b:
         71:28:8e:9b:a9:08:13:09:b2:31:cb:5d:53:e7:cc:43:fd:c2:
         b2:c3:c5:79:02:84:4f:ba:2e:97:63:77:5b:3a:7f:0e:12:a8:
         af:d5:9e:0a:91:09:eb:a9:47:e0:81:a6:7c:6f:7b:4d:57:68:
         f5:0a:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org