Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/pqF2ZUhQGOxcGvNNKp1HC6rQxJ8.roa
File:                     pqF2ZUhQGOxcGvNNKp1HC6rQxJ8.roa (raw, json)
Hash identifier:          88wLN4Ybdu2WKOMOEGyXMdcrhRK+1tHF3WP6AWf/bKE=
Subject key identifier:   A6:A1:76:65:48:50:18:EC:5C:1A:F3:4D:2A:9D:47:0B:AA:D0:C4:9F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       10
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pqF2ZUhQGOxcGvNNKp1HC6rQxJ8.roa
Signing time:             Thu 01 Sep 2022 01:16:40 +0000
ROA not before:           Thu 01 Sep 2022 01:16:40 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        203.114.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:16:40 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=A6A17665485018EC5C1AF34D2A9D470BAAD0C49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:68:9a:0f:28:f1:d4:dd:8c:d2:7d:56:04:
                    22:d0:22:2a:ce:80:6a:d3:b8:e6:60:f7:45:43:df:
                    90:11:35:2e:d5:d6:c4:22:fd:39:ba:ec:21:0c:ac:
                    9b:c3:25:80:13:ba:49:f8:4b:64:f2:64:12:f0:12:
                    e0:20:84:fa:5f:03:96:97:16:a8:e5:d4:2b:36:96:
                    fe:74:f1:61:39:ea:bf:5c:de:ad:7c:34:df:ea:9f:
                    ac:32:8f:b3:cd:38:07:ae:4d:1b:92:54:fe:f5:84:
                    e9:c1:e6:99:73:28:a1:85:3a:d0:6b:95:be:63:cd:
                    1c:b4:ad:dd:d2:f6:89:4b:27:13:47:83:1d:a5:51:
                    a6:ce:e4:ae:70:69:52:2e:ad:dc:8b:44:ae:3e:e1:
                    26:be:f3:d7:f5:cd:a5:a4:a6:fc:d2:6e:cc:f0:3b:
                    d1:5e:69:f8:67:c0:01:88:c9:ab:6d:f5:8c:a6:3c:
                    0c:51:61:ac:bc:cb:32:7b:53:28:d0:bc:3a:6a:e5:
                    ee:cc:1c:f7:80:35:6a:69:3a:36:6e:83:55:24:a3:
                    d7:19:9c:a2:59:8b:94:3f:d1:44:a6:e6:e6:18:13:
                    84:e4:7d:10:9e:ea:a8:2c:25:25:c5:f4:7d:fd:45:
                    e5:20:34:d4:25:5e:85:9c:3e:b6:b2:56:53:d6:b2:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A1:76:65:48:50:18:EC:5C:1A:F3:4D:2A:9D:47:0B:AA:D0:C4:9F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pqF2ZUhQGOxcGvNNKp1HC6rQxJ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:8d:cb:16:88:6d:72:69:cb:75:5c:a7:e4:c0:76:e2:97:0b:
         08:d5:9c:9f:a7:6b:22:d6:da:a6:61:13:09:65:cc:d0:50:66:
         42:a3:d8:ec:07:82:0b:54:7d:a8:37:79:c1:17:01:06:c7:a9:
         ef:9b:e0:fa:ab:f5:0a:a0:2c:ac:d9:a5:2e:83:72:3b:76:89:
         85:1f:ce:86:e1:71:62:82:50:c0:37:26:88:e6:61:e9:d5:6a:
         ef:9c:8e:ba:4f:9a:ae:9b:bd:c3:ec:b3:eb:99:3b:be:ee:9c:
         7e:9f:6b:1c:06:b4:09:af:10:6a:2e:e0:9c:57:a5:e2:34:97:
         83:52:26:76:7d:ef:b5:9c:b4:36:ac:b5:a9:ce:ef:cb:d4:ae:
         eb:3b:19:f7:1d:38:ce:3d:f1:7d:6c:e8:37:4a:d6:38:37:fb:
         c0:1d:39:33:cd:b9:19:40:ae:a6:b3:17:68:b6:78:88:21:71:
         94:2b:1b:4e:a3:8c:48:f1:4d:4a:3f:dc:91:bf:db:9a:36:a7:
         94:bc:16:f4:1c:d7:9e:2e:fd:f1:4c:bd:ba:21:73:e4:53:0e:
         62:c8:b3:18:77:25:30:94:ed:7c:2f:c1:71:21:e9:94:59:7e:
         0e:2b:78:2a:0f:21:d5:9c:82:fa:04:df:be:ac:96:23:fa:06:
         66:f8:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org