Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3VavW3yAiZBIP0wMLN7y6oi-yfs.roa
File:                     3VavW3yAiZBIP0wMLN7y6oi-yfs.roa (raw, json)
Hash identifier:          cbeHdknEWQX88R7RUQveGC9v8/YxTRzGSM2q+cCKubM=
Subject key identifier:   DD:56:AF:5B:7C:80:89:90:48:3F:4C:0C:2C:DE:F2:EA:88:BE:C9:FB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0136
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3VavW3yAiZBIP0wMLN7y6oi-yfs.roa
Signing time:             Fri 05 Aug 2022 05:02:46 +0000
ROA not before:           Fri 05 Aug 2022 05:02:46 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        218.230.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:02:46 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=DD56AF5B7C808990483F4C0C2CDEF2EA88BEC9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:24:ab:43:12:04:e2:be:67:e3:97:f3:0d:
                    e0:03:a5:ac:84:f6:c8:cd:a6:f5:d8:eb:54:f9:25:
                    1b:cb:b7:0c:dc:e7:d5:dc:9b:71:1e:8a:ce:f5:b6:
                    d5:75:ee:13:f5:7a:c6:76:ae:95:83:57:c8:37:08:
                    4a:99:3b:9e:2e:c0:45:3a:16:69:af:89:ef:77:ac:
                    2e:57:78:7e:a0:ba:95:dc:5c:56:0e:e4:47:d2:5a:
                    8e:30:27:0f:fe:e5:e2:62:99:c6:ed:ae:86:16:e7:
                    2c:81:1d:7d:7c:b5:ce:cc:64:07:3d:3a:09:0d:f9:
                    6d:68:ff:88:f2:90:83:d0:c8:2d:25:f9:9d:82:58:
                    fd:02:86:16:6d:46:b1:f4:63:e5:94:0b:11:25:34:
                    df:a9:e7:d8:d0:1c:b5:35:6e:74:bf:95:f5:13:5b:
                    f1:7a:39:7c:b8:b7:7b:d7:ee:f4:41:99:e6:c8:5a:
                    f4:fa:37:b0:3b:92:ac:65:7f:5c:37:28:c3:e2:b4:
                    a6:99:2f:8b:0a:96:45:43:ca:aa:b7:8b:1d:25:68:
                    9d:3c:f1:c6:4b:8c:b5:b2:99:8a:60:d5:d1:f4:0a:
                    e5:7d:b8:5a:66:39:46:34:e8:55:9d:c4:e5:00:5e:
                    e8:dc:57:3f:3d:bd:4d:04:a9:b7:33:49:e5:90:22:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:AF:5B:7C:80:89:90:48:3F:4C:0C:2C:DE:F2:EA:88:BE:C9:FB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3VavW3yAiZBIP0wMLN7y6oi-yfs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:70:48:b4:d0:25:c9:57:38:a6:84:80:84:93:c8:30:b8:e2:
         24:93:70:cf:db:b0:c9:42:82:af:5d:e9:10:7a:f2:b6:08:a6:
         fc:83:8f:6d:87:8d:c8:c0:be:7d:84:2f:aa:90:99:53:61:96:
         10:3a:fe:7b:78:59:eb:af:dc:31:36:2f:7c:32:d3:8b:0c:2a:
         ae:44:4d:41:b8:d4:5f:ff:09:e2:5a:54:1a:01:86:cf:9d:0b:
         35:ce:de:0f:25:5f:f7:07:fd:bc:c2:1c:9e:6f:8f:85:61:89:
         f1:7c:87:4f:67:c3:bd:92:97:bf:1f:eb:0e:b8:16:1e:2b:ee:
         a6:9a:fe:db:e8:a6:24:52:ba:3f:dc:65:76:27:be:dd:aa:2c:
         3a:6c:33:1f:85:07:ca:59:78:6a:36:05:26:5f:20:66:59:76:
         47:cc:5e:26:9a:bc:f4:2a:39:ba:0d:ec:c7:56:35:dc:70:29:
         4d:44:ef:fa:77:b9:4a:5f:b2:b1:05:48:6b:bd:f5:5c:0f:ce:
         81:43:bc:40:c7:20:a8:a4:b3:98:b5:00:dc:ff:85:de:1f:75:
         99:7c:19:a1:3e:c7:f6:56:96:4b:ac:b1:0c:a5:78:51:a8:6a:
         76:a3:6b:0e:c2:51:bf:61:7f:65:69:14:c3:ec:01:e3:91:91:
         8a:8a:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org