Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qgFjGgvDIGQ5DHRCxWp7P6UI9rE.roa
File:                     qgFjGgvDIGQ5DHRCxWp7P6UI9rE.roa (raw, json)
Hash identifier:          Sp3FhXOrWB5iUacrQexNmrwPB1rhWDCTwfnNPGxK1to=
Subject key identifier:   AA:01:63:1A:0B:C3:20:64:39:0C:74:42:C5:6A:7B:3F:A5:08:F6:B1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       5F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qgFjGgvDIGQ5DHRCxWp7P6UI9rE.roa
Signing time:             Mon 17 Oct 2022 02:17:58 +0000
ROA not before:           Mon 17 Oct 2022 02:17:58 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        117.53.32.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:17:58 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AA01631A0BC32064390C7442C56A7B3FA508F6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:71:51:33:6c:ae:59:66:e2:7e:ef:51:91:
                    73:83:8f:27:fe:7f:fd:ac:3d:2e:37:dc:23:51:9a:
                    9e:09:2f:33:4f:bc:75:30:c8:20:88:a6:0c:2d:44:
                    57:9a:d8:c9:09:fe:ab:34:94:5f:a6:91:f9:5e:cf:
                    28:ea:18:27:06:f3:60:d7:81:ab:69:b9:bd:e7:dd:
                    24:36:86:95:d2:71:2e:15:01:92:63:97:3e:c6:95:
                    5a:0f:fa:2c:d4:e9:f7:50:b3:ad:8d:5f:0a:5e:72:
                    e3:df:51:c5:30:ed:40:0c:1d:0b:74:e6:e9:27:0e:
                    ee:4d:7e:51:98:41:77:68:31:fa:ef:8b:87:86:0a:
                    a9:30:8a:2d:30:2e:f0:13:0c:67:8a:87:cc:65:14:
                    08:f8:ea:d7:fa:4d:10:e5:93:43:92:4a:34:13:92:
                    8d:cc:b4:d4:61:ec:3a:6c:97:b8:a5:e7:26:0a:54:
                    34:2d:6d:b2:47:c7:9e:5d:e8:75:7d:7f:81:6c:b2:
                    4f:5b:96:e1:69:33:f8:9d:ca:b1:5e:80:4e:f4:5b:
                    68:af:85:d9:52:d6:91:10:d7:8e:c6:09:4c:8d:ff:
                    34:82:bb:9c:8c:03:11:3c:e6:b1:75:e1:40:57:00:
                    5e:43:21:87:89:fa:b5:49:1d:16:0e:aa:a8:a6:9f:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:63:1A:0B:C3:20:64:39:0C:74:42:C5:6A:7B:3F:A5:08:F6:B1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qgFjGgvDIGQ5DHRCxWp7P6UI9rE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:00:86:97:03:53:db:84:8e:d1:b6:1e:2e:b0:87:8b:8c:
         70:b9:6f:f3:54:97:e9:9a:da:ab:1e:a1:b4:81:69:63:fe:43:
         8e:3f:b8:60:d2:e7:f8:c4:2a:5a:4c:73:99:e1:a4:8f:99:6b:
         6f:08:30:85:2f:6f:b4:22:66:59:3d:0f:da:73:71:83:c9:70:
         bc:0d:e3:47:48:d8:fc:42:28:3b:21:57:dd:8d:25:17:9a:83:
         38:f2:89:71:b4:09:f8:7f:44:96:a6:4d:00:8c:27:67:d0:0d:
         e6:23:e8:d0:55:15:b3:6b:1b:1f:6c:3b:f8:1d:5b:ef:28:c2:
         3f:b3:d9:51:62:5f:ef:5f:75:65:e0:d9:ee:7b:f7:dc:71:c0:
         d0:b2:1c:58:ef:ea:e4:fc:c0:b4:eb:02:72:ef:d3:2a:cb:73:
         3e:40:7a:12:9e:f3:95:7c:35:0e:64:cc:0d:f7:69:c3:bf:65:
         d6:60:40:cc:f5:32:b1:5d:8b:94:71:67:b1:3d:a6:d0:09:d1:
         e8:22:73:c3:40:e8:de:0e:a9:23:61:34:ff:9f:13:7e:eb:16:
         14:26:11:f8:36:3c:e4:3a:b0:7e:62:90:5d:55:67:6e:da:e0:
         a3:4c:3c:89:6a:fe:9a:02:2a:fe:f8:b5:bc:4a:06:bc:20:1e:
         31:b8:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org