Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/slLwHae_gjZDGJXH1SGX_ZP_mco.roa
File:                     slLwHae_gjZDGJXH1SGX_ZP_mco.roa (raw, json)
Hash identifier:          micjKHKJYr8pxecatJVnARBdpbDMgimI3t5rdGclDy4=
Subject key identifier:   B2:52:F0:1D:A7:BF:82:36:43:18:95:C7:D5:21:97:FD:93:FF:99:CA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       1F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/slLwHae_gjZDGJXH1SGX_ZP_mco.roa
Signing time:             Tue 11 Oct 2022 01:29:56 +0000
ROA not before:           Tue 11 Oct 2022 01:29:56 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        203.114.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:29:56 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=B252F01DA7BF8236431895C7D52197FD93FF99CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:00:1b:60:4c:f7:91:fb:15:87:f1:dd:0a:
                    43:b6:4e:a0:28:be:c9:52:03:2f:08:1a:4c:e6:16:
                    ae:da:06:5b:2b:07:52:94:49:e1:cd:4d:85:ec:88:
                    6f:91:95:21:e2:7d:e6:b1:05:56:15:95:4b:8d:c0:
                    7e:21:13:a6:78:88:91:a6:f5:ea:f4:10:f4:80:21:
                    07:99:70:54:b2:e9:51:cd:86:5b:89:86:ca:b4:e5:
                    24:98:0c:ba:79:d5:4b:96:fb:68:51:5b:95:fd:42:
                    11:71:98:dc:95:a8:64:cc:9c:8b:6a:4d:80:9e:9b:
                    4f:b5:5d:cb:2c:41:2f:95:1d:ba:b5:ce:09:bd:e4:
                    f9:6b:95:37:21:bf:9c:17:0b:69:ac:ab:a0:9e:92:
                    1d:1f:0f:b7:b8:5f:f0:98:c7:7f:a4:f5:65:06:b2:
                    f9:7b:37:3e:15:42:ac:d3:64:e1:f7:c6:8e:f8:fb:
                    84:14:bc:c3:c5:04:83:d5:33:5a:c1:14:02:b8:96:
                    bd:6e:7f:8d:81:f5:44:a1:cd:04:b4:67:f2:c3:bf:
                    0e:b5:5d:8c:2d:4f:87:bd:d0:b9:f6:4c:c6:77:98:
                    d4:c8:54:13:ef:0a:50:29:85:24:2d:14:86:c6:cb:
                    ab:4d:5a:56:12:28:66:88:6a:17:fa:d6:b4:ab:d5:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:F0:1D:A7:BF:82:36:43:18:95:C7:D5:21:97:FD:93:FF:99:CA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/slLwHae_gjZDGJXH1SGX_ZP_mco.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:67:c4:37:06:f5:09:ff:b8:29:e5:2f:d5:77:85:d4:89:
         d5:d8:b1:73:02:82:66:2d:9c:c7:ea:bd:32:6c:62:3d:32:9a:
         51:8b:e9:77:dd:4d:28:62:fe:8b:32:d6:9b:52:37:ef:d8:c2:
         8c:c5:63:92:16:53:f8:9c:8d:36:f8:19:59:0e:15:e5:31:d7:
         64:ae:9c:5f:94:9c:33:23:3f:89:ad:c3:e9:c5:e9:d7:c9:16:
         2d:7c:f2:b2:ef:01:28:bf:8c:c9:9c:f1:1b:3a:b8:1b:80:84:
         3a:96:88:13:7c:2a:f4:b5:9d:9c:98:9c:d6:5d:3d:b0:05:45:
         a4:46:54:49:a8:27:bd:72:05:fb:97:a4:37:a4:5c:32:29:af:
         76:45:82:18:f7:ac:e9:93:fe:b4:63:98:55:b8:fe:db:ec:54:
         c2:9b:8b:70:24:0a:b2:8f:85:65:4e:30:8e:9a:a6:b0:1c:0c:
         4d:87:4b:60:6a:24:a0:39:8c:80:44:53:61:e2:07:ad:40:bf:
         00:56:07:e7:6a:e4:47:88:43:9b:d9:d0:c5:bd:f1:7f:36:50:
         d9:bc:f9:c4:25:6d:14:98:19:40:4c:59:45:d1:51:77:ef:ce:
         2b:1c:2c:79:53:7c:d3:1c:11:6a:27:96:aa:05:05:82:5a:35:
         96:db:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org