Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nr7mjUWvPkLrGoQMxGWnqZSyn3k.roa
File:                     nr7mjUWvPkLrGoQMxGWnqZSyn3k.roa (raw, json)
Hash identifier:          pStwTrp5UeOK+tpRMeunCItewE4rr8EBwiPWDnl1PYM=
Subject key identifier:   9E:BE:E6:8D:45:AF:3E:42:EB:1A:84:0C:C4:65:A7:A9:94:B2:9F:79
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       8E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nr7mjUWvPkLrGoQMxGWnqZSyn3k.roa
Signing time:             Mon 24 Oct 2022 02:44:40 +0000
ROA not before:           Mon 24 Oct 2022 02:44:40 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        114.134.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:44:40 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9EBEE68D45AF3E42EB1A840CC465A7A994B29F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:6d:2f:a2:dd:3a:15:44:01:85:28:c3:31:
                    2d:b1:33:e9:64:d9:92:a9:62:a9:58:2c:2f:09:e7:
                    8d:55:ef:49:5f:a4:9e:7d:61:fc:c2:99:83:81:31:
                    95:fa:e7:e6:95:48:e2:74:6e:9a:b5:a2:a4:5a:c4:
                    79:e5:70:67:48:0d:4a:73:08:de:7a:fc:10:2f:48:
                    7f:06:15:03:5a:e3:6c:83:73:04:fe:d3:b8:37:49:
                    a5:90:16:c5:99:c8:d3:a9:51:7b:7b:ec:20:39:94:
                    25:93:cc:85:13:ff:e9:36:b0:f6:3c:8e:ca:13:d1:
                    c9:0a:f4:e5:58:4d:5c:33:73:b3:0b:7c:03:06:58:
                    ff:02:10:aa:52:99:46:f2:fd:d3:01:81:e2:33:c2:
                    8d:3a:d8:8a:0b:5e:95:a2:46:ef:4b:d0:90:d8:83:
                    cd:6c:b4:9c:02:d3:e4:2d:0e:bc:5f:9a:c2:fa:f8:
                    a6:fd:e3:d7:06:12:f0:ad:20:8a:9d:fd:48:71:27:
                    5d:d2:93:f0:d7:35:0a:d0:0f:c0:45:59:4b:3f:db:
                    b5:51:a1:37:10:cb:6a:fe:78:4b:61:de:a2:79:e4:
                    35:ea:ea:07:e7:15:78:30:10:a0:3b:1c:05:02:c0:
                    6e:6c:63:5e:80:80:aa:bf:10:b5:10:b6:68:8c:05:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BE:E6:8D:45:AF:3E:42:EB:1A:84:0C:C4:65:A7:A9:94:B2:9F:79
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nr7mjUWvPkLrGoQMxGWnqZSyn3k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dd:1a:6f:92:48:84:fa:0d:ff:3c:42:81:3f:ea:50:a8:16:38:
         61:c8:b9:1d:e3:d8:7e:05:7a:81:e8:aa:3c:07:de:42:8f:dc:
         a7:80:bf:a7:5d:ab:2a:fc:39:1a:42:63:9f:e3:fa:c8:76:ce:
         13:dd:0d:6b:e8:f4:7c:82:0b:e1:3c:7f:f5:23:a7:59:d2:7f:
         9a:66:80:0b:31:dd:cb:e2:d2:5b:d4:95:b3:5e:8e:41:85:31:
         c0:d9:3a:19:7e:42:f9:d6:18:3f:16:44:f2:be:6e:85:bd:36:
         35:c3:5a:3d:1e:10:e0:af:38:80:07:af:eb:19:87:4a:70:9c:
         25:4b:f1:bd:42:25:52:d4:86:9d:64:ea:fb:0f:62:a7:7c:3f:
         3b:f0:89:3f:d0:a0:6a:02:e1:9a:21:ee:5f:1d:83:e0:82:87:
         0e:37:a5:83:8e:a2:10:9f:84:8b:63:6d:d6:43:23:0a:ab:e9:
         a3:c8:33:cc:8c:7e:84:81:39:25:2d:5d:4c:57:2f:e9:df:f0:
         6d:e5:73:eb:d4:af:c7:9a:18:43:9a:02:d3:7e:cb:73:4d:f3:
         68:65:3a:58:77:01:1d:a2:e3:fd:0f:36:fc:a1:9d:07:03:1e:
         a3:44:25:1d:fd:ef:15:a1:36:53:27:a8:1b:83:50:81:22:b2:
         a2:a0:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org