Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/32IudJXCshG9W2ofEVudQovZwrk.roa
File:                     32IudJXCshG9W2ofEVudQovZwrk.roa (raw, json)
Hash identifier:          kYbjIvzYc87YcCszHrsnutnUE4VKaRKQJU5dlkwzQEY=
Subject key identifier:   DF:62:2E:74:95:C2:B2:11:BD:5B:6A:1F:11:5B:9D:42:8B:D9:C2:B9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0110
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/32IudJXCshG9W2ofEVudQovZwrk.roa
Signing time:             Fri 10 Jun 2022 03:34:35 +0000
ROA not before:           Fri 10 Jun 2022 03:34:35 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        123.224.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:34:35 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=DF622E7495C2B211BD5B6A1F115B9D428BD9C2B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4b:e6:74:15:37:44:8b:64:66:35:4f:a6:25:
                    f5:42:1b:1f:a0:89:6f:9a:b6:17:28:50:97:20:aa:
                    6a:b2:2f:7e:7b:38:27:83:84:30:22:4f:b4:ab:25:
                    3c:df:75:74:a8:24:1f:47:82:ab:d5:e3:5f:d7:c1:
                    b9:20:64:40:ae:07:f7:f5:fe:4a:f1:94:1e:5d:73:
                    e9:e9:00:00:85:7f:83:b6:66:37:25:eb:66:f8:58:
                    d7:ca:7c:82:8b:51:a2:6d:8a:08:50:32:95:07:d5:
                    f3:77:c2:88:0c:a9:b4:86:8c:11:ec:71:fc:6d:9d:
                    9e:cc:2d:a1:81:37:e4:c4:63:95:44:b8:b5:68:16:
                    dc:4c:46:55:b7:94:42:f0:85:64:2d:4a:a0:1c:56:
                    7c:92:6b:7b:f7:17:6c:ad:61:b1:44:11:8b:f2:7e:
                    51:81:a6:08:dd:b3:ab:70:2d:7d:bd:e3:71:fa:ca:
                    cb:e6:ad:d7:00:5c:e2:31:e6:f9:4c:df:07:69:7f:
                    bc:20:08:97:31:be:c2:67:96:85:f0:e4:72:cf:6d:
                    11:2e:ee:2d:db:c2:fe:5d:3c:92:d8:ce:cb:df:8e:
                    d0:e2:39:bf:71:29:ed:ef:6b:cc:11:e3:f4:b8:c4:
                    ca:33:3d:4b:eb:53:e0:1a:3e:0e:8a:b4:2b:c5:50:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:2E:74:95:C2:B2:11:BD:5B:6A:1F:11:5B:9D:42:8B:D9:C2:B9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/32IudJXCshG9W2ofEVudQovZwrk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         ab:79:dd:fd:35:88:be:5e:55:d9:7c:44:ec:ef:36:ae:03:86:
         08:cb:bb:41:89:51:35:1d:b6:9a:06:06:58:b4:50:23:ae:40:
         8d:a7:bc:d2:34:37:a6:78:52:51:12:8d:c2:8a:66:d3:76:48:
         3e:73:aa:5a:65:9c:be:14:a4:53:69:76:b7:31:e0:de:c8:30:
         5c:71:d9:6e:a9:c5:aa:c8:d8:e6:24:8e:3d:27:05:38:a3:68:
         50:8b:a0:4c:4c:1d:7c:13:4b:60:72:0b:f0:1c:0e:e6:7e:b4:
         04:f2:25:89:85:75:18:e4:d5:50:3d:80:15:24:10:ea:6d:93:
         6a:ae:33:95:01:78:3c:35:8c:33:23:36:d8:0d:60:ca:e6:c3:
         d4:87:94:c4:a1:6c:98:f2:a2:11:cf:ff:15:c9:8b:d1:61:30:
         c1:02:f4:41:52:6f:59:ec:2a:a8:32:66:9f:05:37:3e:af:02:
         f7:16:26:5f:83:33:dd:9c:85:87:96:01:8a:8d:4b:da:29:d3:
         49:c2:cb:a5:6b:56:4b:68:01:ea:5b:9d:2b:c4:69:d8:0f:34:
         b2:4d:7e:b5:cf:fe:34:7c:a4:9f:38:4b:64:a3:92:27:8f:ed:
         ae:47:17:c5:bb:c8:c5:ca:43:9d:74:d5:fa:74:d9:0c:69:71:
         34:8b:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org