Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wStYj0Vf1jmXcxfIq3RSPfyWeIM.roa
File:                     wStYj0Vf1jmXcxfIq3RSPfyWeIM.roa (raw, json)
Hash identifier:          odEsIYvWVXefUcJlrkie3ad2Oh8ZmDDihNkKaacpMpQ=
Subject key identifier:   C1:2B:58:8F:45:5F:D6:39:97:73:17:C8:AB:74:52:3D:FC:96:78:83
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       17
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wStYj0Vf1jmXcxfIq3RSPfyWeIM.roa
Signing time:             Tue 11 Oct 2022 01:06:15 +0000
ROA not before:           Tue 11 Oct 2022 01:06:15 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        110.93.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:06:15 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=C12B588F455FD639977317C8AB74523DFC967883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:78:ff:71:53:3a:96:de:5b:2b:32:7d:80:
                    c1:41:1f:49:62:6f:c0:b1:c1:06:df:ba:30:41:82:
                    6a:d4:cb:2a:4d:d5:60:13:7b:bd:48:a9:80:e0:fa:
                    8f:7e:c9:de:98:c1:b4:d3:2c:47:aa:18:dd:33:46:
                    a2:06:6b:69:5b:df:d9:4f:8e:e9:0d:41:50:be:f9:
                    ce:4c:8f:5d:50:bc:86:d4:14:c6:a8:ad:97:4f:d9:
                    44:40:1c:73:0c:66:21:b3:c3:3e:29:39:a4:f3:05:
                    3f:18:60:45:e8:d6:f6:f9:03:df:11:19:a7:56:61:
                    b0:03:0e:63:6b:53:13:01:35:47:83:b1:67:d3:90:
                    3f:2e:54:70:a6:05:33:93:32:1a:5e:71:0d:40:24:
                    d1:3b:d6:52:31:19:ed:82:1f:f6:f8:40:2a:1b:5e:
                    d2:fd:5b:e5:6f:c6:0a:63:fc:1f:8c:d8:09:61:84:
                    9c:57:e5:db:e0:ac:c7:89:64:77:51:36:1b:a0:20:
                    35:2e:b4:9b:d7:81:15:74:08:58:23:0a:c1:ae:ca:
                    5e:0b:2d:fd:ab:4e:55:be:4e:79:3d:93:7f:07:19:
                    cc:dc:61:35:4c:4c:c4:dc:c9:c4:55:6a:60:99:ce:
                    c8:10:9c:19:7d:3f:cf:04:e4:16:8a:88:9a:2e:a3:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2B:58:8F:45:5F:D6:39:97:73:17:C8:AB:74:52:3D:FC:96:78:83
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wStYj0Vf1jmXcxfIq3RSPfyWeIM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e2:2a:27:5c:70:fa:a8:79:33:a0:e9:f9:f5:8c:fd:de:4e:ad:
         c0:a2:cc:6d:3a:99:12:99:85:cb:c7:43:d2:93:a2:eb:a2:39:
         51:eb:d3:c6:4a:09:4e:81:a9:8c:59:86:cf:ac:6d:70:b6:ed:
         dc:21:2e:59:22:a0:a5:b2:20:94:ee:1b:9d:e3:27:05:64:c2:
         e2:a4:35:0f:23:14:bc:c9:6a:10:39:97:58:59:6b:ca:ad:11:
         34:8e:e3:43:92:bf:1a:8d:4c:40:23:bd:96:43:bd:a8:c9:61:
         25:2e:3d:9f:7b:4f:33:bd:48:e4:3a:c5:c9:e5:35:68:52:6d:
         ec:de:23:5a:fe:5b:73:9e:04:04:06:86:cc:6d:2a:5b:97:c2:
         c2:13:2f:e7:19:ee:e0:97:af:c1:0f:a2:7f:6a:0c:29:e9:d1:
         5a:43:87:cd:11:5e:bc:18:3a:6f:14:05:2c:d3:6d:72:91:b6:
         2b:a7:ed:f7:fd:39:0f:1c:bb:10:aa:80:b3:29:35:0b:be:c9:
         19:9c:b3:ad:c2:75:44:9d:e7:05:35:b8:2f:b0:b0:2b:c9:86:
         92:d0:af:fb:71:a1:88:22:6a:74:59:54:69:26:62:07:d1:58:
         16:43:3d:5b:c5:ff:96:d5:02:a4:42:05:03:c4:86:33:9b:57:
         7b:2c:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org