Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vWbkpI7eo2v0BotZIrmQ8d-BqoY.roa
File:                     vWbkpI7eo2v0BotZIrmQ8d-BqoY.roa (raw, json)
Hash identifier:          p3r5beypEe66bZ6dKhhB3nsnM5WLo68lKCAx3rqcF2k=
Subject key identifier:   BD:66:E4:A4:8E:DE:A3:6B:F4:06:8B:59:22:B9:90:F1:DF:81:AA:86
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       66
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vWbkpI7eo2v0BotZIrmQ8d-BqoY.roa
Signing time:             Mon 17 Oct 2022 02:29:45 +0000
ROA not before:           Mon 17 Oct 2022 02:29:45 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23788
IP address blocks:        119.82.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:29:45 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=BD66E4A48EDEA36BF4068B5922B990F1DF81AA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:85:c9:65:22:b7:6b:c7:78:59:c2:e9:d9:
                    81:a9:a8:c0:9c:5b:8a:89:8f:3b:3f:a8:be:15:09:
                    53:0b:45:35:22:6f:53:a9:74:a7:37:28:57:5b:db:
                    d6:6e:eb:2a:45:f4:0c:6f:58:a7:c7:2c:54:4c:e6:
                    83:42:1f:f4:bf:cf:cb:ae:5d:54:b9:d5:2a:64:5c:
                    32:67:96:30:e4:df:ff:54:8b:86:85:49:4b:41:0d:
                    b0:ba:4c:67:a5:b6:5c:9a:b2:71:53:51:30:7f:6b:
                    b4:be:e8:3e:73:bc:60:85:8d:29:78:85:f4:28:8d:
                    7c:bb:3a:40:90:e9:3f:fe:00:d2:b4:e3:c5:b5:c8:
                    69:7b:8b:64:eb:10:3a:55:2c:8c:e8:63:13:40:2d:
                    1d:25:d1:16:b0:6c:41:73:b2:ed:2f:0b:8c:ad:16:
                    49:09:2a:e0:6f:82:19:4a:63:38:4d:33:fb:70:0f:
                    ef:04:d6:45:70:ad:6e:a9:12:64:9d:be:bb:f6:38:
                    df:a1:6f:66:a1:ae:43:40:b8:bf:ba:1c:d5:c4:ac:
                    54:40:bc:5c:07:50:ae:ae:5d:a8:b7:c4:ee:51:27:
                    d7:96:bf:a8:9a:9a:0a:ce:9f:e7:78:2f:bb:59:55:
                    dd:55:b8:c9:0b:a3:9c:cc:e5:a1:10:e0:a5:20:ca:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:66:E4:A4:8E:DE:A3:6B:F4:06:8B:59:22:B9:90:F1:DF:81:AA:86
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vWbkpI7eo2v0BotZIrmQ8d-BqoY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.82.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:25:76:3e:f1:08:22:08:05:12:5d:5e:57:a4:d9:c5:69:
         29:82:19:92:f3:ba:6e:63:22:9a:f5:f2:2b:e4:bb:c6:cf:79:
         78:ce:07:3a:6c:86:03:87:14:7b:23:8a:d6:d8:48:9a:e6:71:
         e5:9a:53:ec:57:c8:66:4f:3f:6f:6d:77:6d:da:79:d8:ae:ed:
         2c:c3:56:c5:05:0f:26:46:e7:d4:8c:a8:ed:12:7f:57:94:6b:
         56:1c:81:fd:f1:0b:aa:50:d1:9e:76:8d:b7:80:ca:4d:95:1d:
         5a:f5:c0:d0:8b:f8:b9:dd:98:8d:cb:38:1d:68:66:77:1a:14:
         58:60:06:c8:bd:4d:03:c4:99:9f:f2:7f:b6:37:30:be:43:b3:
         51:c7:d9:6e:e1:eb:0a:7c:28:d2:e3:0f:95:91:08:a6:c9:d1:
         75:23:0b:ca:86:e3:20:ba:9b:6d:80:33:7e:25:d2:8a:fe:41:
         d3:9c:73:7f:60:e8:a4:c7:1d:c8:c6:29:6f:84:d0:d5:0b:3c:
         ff:2d:d0:ac:ea:48:c2:47:c7:8f:0d:88:95:a7:6a:dd:3e:7c:
         c8:ef:4d:2b:cb:87:be:08:7b:f2:dd:37:e6:83:e0:85:47:d2:
         c9:c5:62:8b:89:6d:9a:e3:9c:74:d5:4b:f1:3f:53:83:d1:6b:
         38:53:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org