Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/s-l7Z-S85edZbsLhFkvI_O5bLm8.roa
File:                     s-l7Z-S85edZbsLhFkvI_O5bLm8.roa (raw, json)
Hash identifier:          aNbK8/gj1wSeodSN3Xsre5+7Yq7STXHksGOmRLo4LrQ=
Subject key identifier:   B3:E9:7B:67:E4:BC:E5:E7:59:6E:C2:E1:16:4B:C8:FC:EE:5B:2E:6F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       26
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s-l7Z-S85edZbsLhFkvI_O5bLm8.roa
Signing time:             Tue 11 Oct 2022 01:40:22 +0000
ROA not before:           Tue 11 Oct 2022 01:40:22 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        103.3.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:40:22 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=B3E97B67E4BCE5E7596EC2E1164BC8FCEE5B2E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:e2:80:4d:ca:85:c2:56:9a:6c:e2:e6:55:
                    b8:5f:59:ae:38:39:76:67:52:17:96:16:b5:e4:a8:
                    f7:51:72:2d:d9:09:f4:f0:c4:45:e0:37:56:39:7d:
                    61:85:f5:c4:50:f8:f3:3d:94:37:18:34:18:ab:e4:
                    d8:11:9c:88:30:41:37:b8:5f:7f:48:96:5d:b0:2a:
                    b4:78:a8:7e:83:d1:32:22:db:45:3b:70:ff:11:1c:
                    80:ac:1c:b1:39:01:17:08:7e:e4:56:be:b0:c5:e4:
                    f3:89:87:4b:ea:c6:48:c8:97:ff:ca:a7:0c:25:23:
                    c9:25:62:f9:66:56:cd:42:69:40:82:f9:40:d2:56:
                    d1:f9:aa:08:d5:b5:33:40:3d:95:df:a5:4c:63:8c:
                    c1:bc:a7:77:8a:76:19:0d:1b:69:df:d9:72:93:d5:
                    d6:fb:fb:28:4a:50:6e:e3:43:3b:e0:ac:f3:a7:69:
                    bf:9f:34:d7:6f:83:7d:fe:5e:3a:7f:80:93:21:fa:
                    a9:4f:13:cf:2c:3b:f6:a3:81:ae:44:3f:cc:09:3a:
                    a8:ea:92:6f:c6:64:b5:82:64:c8:cc:2c:73:84:e9:
                    b1:a4:5f:22:49:90:0d:7f:db:5d:bc:cd:16:14:b4:
                    17:16:04:6d:9e:7b:74:cc:40:bb:ca:be:9e:22:43:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E9:7B:67:E4:BC:E5:E7:59:6E:C2:E1:16:4B:C8:FC:EE:5B:2E:6F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s-l7Z-S85edZbsLhFkvI_O5bLm8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:c1:06:7f:3d:66:20:13:10:2a:3b:0c:cb:f1:09:bc:22:d2:
         eb:dc:3e:c0:ee:3b:ca:a5:eb:8a:0d:3a:88:2a:1b:40:30:00:
         e7:fc:60:23:df:12:f8:f5:dd:7b:87:24:db:bd:02:ee:27:e4:
         5b:18:12:b7:ca:70:c2:ee:51:78:8c:21:84:e6:f0:5a:a4:63:
         23:bf:70:ce:d2:39:34:ca:8f:f5:2b:8b:33:a5:e2:f0:8b:0d:
         c7:83:c8:60:99:d5:79:1c:5e:e5:27:c9:90:85:31:73:ec:2c:
         a7:ff:91:49:07:96:18:b2:03:ec:e3:4f:4c:29:9f:71:fe:9c:
         e1:93:7d:d9:97:bd:7c:f3:39:71:65:24:56:26:a2:24:87:08:
         89:0a:bd:b8:ce:e8:50:a6:ae:51:2a:73:84:ae:eb:d6:fb:09:
         cf:85:21:19:25:3e:ed:05:b5:d1:28:25:ad:03:84:7c:fa:c8:
         a9:13:9a:67:6e:42:fd:62:9f:cd:b0:80:c1:03:4d:59:4c:af:
         55:25:45:54:02:9a:af:ec:e6:65:56:5d:d3:d8:03:3d:27:6c:
         2c:79:56:aa:03:ad:f1:36:6f:58:93:f1:28:45:86:ae:11:01:
         f5:fc:99:73:42:01:a1:b2:e9:c1:1b:05:78:c8:57:a2:1a:42:
         6f:3f:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org