Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/FTnamd3psYNN4NV8bbfExN_kD5Y.roa
File:                     FTnamd3psYNN4NV8bbfExN_kD5Y.roa (raw, json)
Hash identifier:          vuHGSjgQYwN8Fnjico5XUuDTFrhUDY2ERIYb14JZWUo=
Subject key identifier:   15:39:DA:99:DD:E9:B1:83:4D:E0:D5:7C:6D:B7:C4:C4:DF:E4:0F:96
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       17
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/FTnamd3psYNN4NV8bbfExN_kD5Y.roa
Signing time:             Thu 20 Oct 2022 06:26:24 +0000
ROA not before:           Thu 20 Oct 2022 06:26:24 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        218.223.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:26:24 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=1539DA99DDE9B1834DE0D57C6DB7C4C4DFE40F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:31:25:15:7c:89:37:a3:44:e0:8c:2f:86:
                    72:7d:ab:2e:f2:2e:21:f6:83:a9:fb:e9:ca:d8:8c:
                    bc:a2:ea:76:e8:26:7c:14:a6:ca:75:02:a8:4d:8e:
                    e4:32:91:64:0d:61:73:04:c6:18:98:91:6f:86:80:
                    3b:be:b0:ad:c3:7c:ff:01:a2:91:20:f5:cf:39:61:
                    20:64:7c:22:ca:30:e0:a7:8d:cd:4f:43:43:ce:70:
                    75:ac:92:d6:ff:9b:d6:67:3b:43:cc:68:17:3b:b3:
                    c8:b5:27:1e:dd:18:03:97:66:6a:29:93:d5:e4:4b:
                    f0:d3:1c:16:24:a9:e9:3f:db:4c:6f:83:de:89:d9:
                    28:0d:26:b8:c4:6f:86:9a:95:aa:50:6f:e2:97:9f:
                    48:99:cf:5a:12:fa:62:2a:ae:ea:d2:08:30:3f:c9:
                    57:87:7e:71:a3:95:bd:88:0c:e9:25:98:09:94:8d:
                    18:85:d6:d0:84:cd:e5:36:20:4c:f7:03:28:96:be:
                    f9:29:9c:40:0b:87:51:55:c1:3c:53:15:4a:e7:04:
                    65:48:77:37:a0:8e:3f:62:23:9b:f4:c2:c3:7c:bf:
                    b5:07:63:24:f4:78:fa:2f:82:d3:b7:10:ed:38:82:
                    ed:e5:ac:80:24:f4:34:43:ed:54:0b:f3:be:1f:b1:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:39:DA:99:DD:E9:B1:83:4D:E0:D5:7C:6D:B7:C4:C4:DF:E4:0F:96
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/FTnamd3psYNN4NV8bbfExN_kD5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:fd:86:c4:a2:2e:44:c7:32:4f:f7:5c:7e:3e:5e:08:e5:
         55:88:25:f4:dd:6c:cc:22:37:b9:91:32:7d:b6:3c:ae:d7:a0:
         a0:79:81:0c:5f:1e:81:6f:83:d1:84:5c:2c:ef:fe:ac:5d:af:
         32:73:ce:61:c6:94:48:d7:e5:bb:88:c0:ea:0a:c9:24:28:f7:
         59:0e:dc:a2:c6:c7:ca:b6:51:a4:43:4a:27:cd:87:bd:2d:57:
         51:91:81:80:1b:3b:67:d3:a2:5a:1f:b5:df:6b:e3:7c:e3:e0:
         e3:85:11:4f:24:ee:c9:52:44:05:cf:35:9e:6d:03:dc:21:b7:
         52:91:1e:3f:c0:0a:fe:4c:73:2d:d4:4f:a1:5d:80:a1:4f:f0:
         7b:6c:6a:31:72:f7:4b:ce:4d:4b:83:6e:6a:21:e5:1b:54:2e:
         6c:1b:ea:8f:cf:ed:b1:d9:66:fb:7f:c7:0f:d0:4e:c4:aa:d5:
         e3:3b:cd:a6:85:45:79:cb:35:41:70:b5:4a:55:19:f4:55:ee:
         3a:3f:ee:82:d9:88:f7:70:65:5f:e2:0d:d7:eb:a9:78:c5:03:
         82:56:04:49:3d:6e:b2:3e:70:18:bd:63:a6:ea:03:78:7d:48:
         3a:41:13:67:57:b4:ab:9e:00:bc:8a:f0:19:3b:fc:7d:e9:21:
         1e:40:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org