Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/5xv4Cgjw0BxkT6fy2bSeZNcAcpo.roa
File:                     5xv4Cgjw0BxkT6fy2bSeZNcAcpo.roa (raw, json)
Hash identifier:          OSa/73A5zF8+CtV2buaa1kWY/baXAqc74amCzo9+/jw=
Subject key identifier:   E7:1B:F8:0A:08:F0:D0:1C:64:4F:A7:F2:D9:B4:9E:64:D7:00:72:9A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       010F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5xv4Cgjw0BxkT6fy2bSeZNcAcpo.roa
Signing time:             Fri 10 Jun 2022 03:34:35 +0000
ROA not before:           Fri 10 Jun 2022 03:34:35 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        123.216.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:34:35 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=E71BF80A08F0D01C644FA7F2D9B49E64D700729A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:41:14:26:43:7e:49:0d:56:de:59:95:ee:
                    57:32:74:b2:f0:4c:a0:d7:92:33:57:52:35:7f:fa:
                    2b:88:84:6a:3e:94:0a:cf:ab:cc:05:c4:e0:20:56:
                    16:c9:e0:c5:e1:d3:6b:9d:62:f2:ea:41:f9:27:d3:
                    03:16:47:38:94:66:93:13:28:12:c8:b9:47:51:c2:
                    cc:7d:88:9b:7b:1d:f8:55:02:7f:1d:33:cf:0d:84:
                    e4:b6:31:1c:d5:4c:d6:d7:0b:ca:07:ec:95:9e:69:
                    85:43:65:f3:4a:fb:3f:8f:a5:4a:5b:bc:f5:da:b8:
                    b8:05:97:54:b8:59:ba:56:3f:b7:6e:32:a0:d7:de:
                    be:10:37:a9:5d:12:cc:50:b3:91:4b:d7:40:d3:4b:
                    f9:5f:42:dc:53:75:ff:e1:1f:0c:bf:0a:02:72:02:
                    fd:96:51:47:58:28:54:b4:5b:e2:c6:b2:b2:12:eb:
                    6e:40:ff:9b:8c:7e:cf:8d:d7:93:a7:d6:f9:b9:ca:
                    d2:51:f7:e0:5e:74:0e:88:af:5f:75:44:9b:3f:1b:
                    28:58:19:8b:be:be:88:c4:39:db:30:c8:48:58:8c:
                    e0:b4:b9:e7:9b:34:67:a1:a1:56:f2:83:1f:4b:dc:
                    69:7e:ad:ea:f0:61:66:e1:45:64:c5:ce:0d:17:b6:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:F8:0A:08:F0:D0:1C:64:4F:A7:F2:D9:B4:9E:64:D7:00:72:9A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5xv4Cgjw0BxkT6fy2bSeZNcAcpo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:f3:7d:ab:83:ad:15:aa:5f:27:63:c7:c7:fa:f8:ce:92:
         db:af:18:5e:aa:e3:ce:7e:e7:b6:10:a3:95:f4:ae:ca:74:d2:
         9e:57:5d:e5:05:93:2a:2c:3c:86:91:aa:6c:61:10:73:54:bc:
         5b:29:50:b8:0e:e3:eb:0c:ed:e3:f9:de:fa:99:4c:bf:30:67:
         2a:39:2e:4e:23:45:9f:56:64:97:f2:05:58:13:31:60:e5:9f:
         48:bc:82:88:e1:e3:9c:42:f8:ad:f6:e6:d6:33:a3:a3:d2:6c:
         7d:89:76:da:ec:9a:1a:f0:69:04:3b:38:db:70:b0:e5:d4:8e:
         b8:a8:ad:48:9f:a9:1c:cc:a8:6b:6d:7b:24:63:c1:d8:49:9f:
         d7:84:71:71:e2:03:62:31:aa:d7:82:18:7d:a1:c6:41:08:9c:
         57:70:bf:fc:54:5b:05:1d:a2:fd:c5:02:c4:9b:3c:f6:cd:ba:
         be:1b:ae:87:78:5b:91:c6:6a:68:ff:0b:07:ac:90:32:af:1e:
         fc:da:0c:d9:0b:42:bb:6a:32:d8:cf:ce:85:23:88:b7:9c:13:
         49:e2:d8:d5:e6:7c:04:ba:c8:19:a4:83:4a:09:6d:88:68:4f:
         12:3c:b0:61:18:15:ba:ae:49:81:b4:cf:16:24:f3:a1:ec:3e:
         00:23:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org