Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/-k_f5hV7b5d17mmkaEsruMffj-4.roa
File:                     -k_f5hV7b5d17mmkaEsruMffj-4.roa (raw, json)
Hash identifier:          +pw0AmAALdv+tLQNkn0xnw7FirV8XVv/FGgmSPFwY5w=
Subject key identifier:   FA:4F:DF:E6:15:7B:6F:97:75:EE:69:A4:68:4B:2B:B8:C7:DF:8F:EE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       014F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-k_f5hV7b5d17mmkaEsruMffj-4.roa
Signing time:             Mon 01 May 2023 01:28:12 +0000
ROA not before:           Mon 01 May 2023 01:28:12 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.130.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:12 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=FA4FDFE6157B6F9775EE69A4684B2BB8C7DF8FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:6f:43:db:5a:9e:61:7e:9f:f0:03:73:91:
                    03:a8:9d:31:20:7c:6c:1a:34:b0:36:59:1d:f2:09:
                    27:0f:15:b2:45:19:08:91:c5:1a:22:3a:de:d5:ad:
                    21:94:f2:69:8c:4e:be:6c:57:38:5e:dc:62:97:00:
                    e0:d4:99:0f:f6:11:8a:81:9d:82:db:3f:7d:1d:09:
                    18:b5:8b:37:31:55:aa:b6:10:da:c7:32:47:3d:95:
                    e6:4f:f4:f5:19:d7:73:6c:d5:bd:07:2b:78:95:6b:
                    80:8e:b9:a4:31:f7:44:5e:49:53:85:5f:5f:4d:3c:
                    a2:2a:31:ef:75:a7:37:f0:0e:84:8a:3c:6c:a3:79:
                    9d:4b:89:74:65:50:fb:48:98:fc:c6:fb:80:64:51:
                    0f:bc:2c:e0:98:f1:bd:06:05:23:da:9e:f5:63:41:
                    a1:98:4e:f1:5c:2f:e1:52:2e:81:12:4a:04:09:f1:
                    91:f4:a5:69:79:70:50:f8:a8:43:20:52:aa:d7:e6:
                    f1:77:38:59:71:3c:d2:4c:83:38:58:c2:6f:ab:48:
                    68:ac:b6:fc:2e:d6:96:70:39:69:53:17:b7:bb:9c:
                    b1:9c:90:48:e5:3a:4c:e9:53:2d:2f:b6:29:ec:a9:
                    7d:4b:09:18:c5:f8:19:7b:18:73:03:ef:b3:d0:d8:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:DF:E6:15:7B:6F:97:75:EE:69:A4:68:4B:2B:B8:C7:DF:8F:EE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-k_f5hV7b5d17mmkaEsruMffj-4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:96:e5:a1:f5:11:bb:6f:05:0f:22:1c:35:63:9d:65:fb:22:
         4d:38:cd:f0:1a:42:cf:4c:d0:69:dc:7e:fe:50:b8:3f:bf:27:
         ec:87:17:82:a3:1d:66:ca:aa:91:90:02:b0:41:73:4b:38:b8:
         c1:44:22:7e:8c:18:1b:7a:bc:61:3d:87:8d:16:34:69:14:aa:
         99:d4:43:f0:13:1f:0d:e2:13:22:3f:0e:0e:68:e0:54:17:ea:
         35:23:12:64:db:b8:bd:91:3b:d4:f6:c0:fe:ed:97:b9:b9:51:
         bb:dd:2d:3b:44:a6:81:b1:1e:2e:98:c5:df:84:d0:d0:40:52:
         12:38:19:96:80:a2:84:ae:97:7c:d6:2b:53:ca:08:48:25:5a:
         8b:df:c4:20:77:fa:31:28:c1:02:28:4e:8a:93:3e:74:0d:e2:
         59:f5:2d:b4:af:9f:e7:5e:6b:f7:73:5b:38:9c:41:4b:b4:52:
         bf:d9:06:40:df:95:f8:09:bc:6f:4a:97:fa:f7:b8:2a:56:69:
         cc:95:b7:26:56:bd:d8:a1:45:67:c3:a3:73:cf:b0:4e:80:86:
         43:bd:ac:8c:5c:dc:2f:07:82:89:41:cb:86:3f:65:8a:87:a8:
         a2:d0:ef:01:21:1b:ea:3d:55:ed:bf:e4:16:f3:ff:65:e2:26:
         ef:6a:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org