Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7czPX5VscvxLlsQpB1pUi6_-MWg.roa
File:                     7czPX5VscvxLlsQpB1pUi6_-MWg.roa (raw, json)
Hash identifier:          n9ja1Emu9YVhAZird8B45XS9k2J2xfXSic1rW+UhOK4=
Subject key identifier:   ED:CC:CF:5F:95:6C:72:FC:4B:96:C4:29:07:5A:54:8B:AF:FE:31:68
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0152
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7czPX5VscvxLlsQpB1pUi6_-MWg.roa
Signing time:             Mon 01 May 2023 01:28:14 +0000
ROA not before:           Mon 01 May 2023 01:28:14 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        58.88.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:14 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=EDCCCF5F956C72FC4B96C429075A548BAFFE3168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9a:fb:67:74:93:65:3b:7d:ae:82:dd:23:9b:
                    a5:8d:b5:0a:6b:1f:dc:ce:c3:8b:05:1d:1f:a1:45:
                    ee:93:d8:ac:15:f7:39:93:70:ca:71:3c:55:a1:68:
                    5e:af:85:6e:19:9f:28:76:f6:13:f9:f8:c1:9d:5e:
                    93:08:4d:1a:b0:d6:7e:bf:b3:a3:9a:98:d8:64:b3:
                    da:68:10:f8:21:7d:02:9b:66:27:29:ba:8a:ed:a4:
                    c1:5d:83:b5:ed:69:41:1c:4b:8f:0c:4c:20:09:cf:
                    ab:80:ca:e3:f5:7e:d5:4d:8c:6a:25:d1:32:96:fb:
                    ea:9a:bd:8a:f5:a9:85:04:92:01:bc:34:40:44:2a:
                    99:b4:c6:e8:18:e3:92:d4:a9:d1:3a:1d:b8:fb:eb:
                    54:eb:03:3b:9e:40:49:dc:6c:72:42:65:99:62:5f:
                    45:11:01:8a:b2:73:be:7c:5a:4c:65:a8:4f:0c:b2:
                    54:e2:ed:22:04:ce:02:7f:16:74:28:a2:ec:ca:fe:
                    f4:77:6c:28:ab:c7:1f:7a:03:3a:08:74:b3:8a:98:
                    45:6f:9a:f1:31:26:dd:f4:01:4e:dc:2e:29:56:76:
                    33:40:49:3f:85:e1:17:a6:f6:a1:d1:04:15:34:50:
                    94:d5:28:02:26:13:37:88:dd:c1:ea:b4:cb:70:a7:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:CF:5F:95:6C:72:FC:4B:96:C4:29:07:5A:54:8B:AF:FE:31:68
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7czPX5VscvxLlsQpB1pUi6_-MWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:c0:4a:10:7a:5c:fe:ec:21:a0:b5:f7:1f:c2:58:17:a8:
         12:4e:00:78:f9:7f:f6:9c:a2:de:4d:f2:4f:0d:dc:86:4a:97:
         dd:2e:52:7a:ef:06:f2:5e:8b:27:ea:48:c9:1e:7e:38:2b:89:
         f4:93:cd:fc:d8:1c:c2:e1:0e:4a:c3:19:4d:74:49:c5:4a:0c:
         0a:67:98:b6:23:c0:44:f4:2a:5c:e1:dd:fc:8e:41:5e:f4:29:
         d1:3a:67:36:96:24:99:f8:a4:78:df:c1:b3:85:ad:2b:d4:ec:
         a3:cb:2f:8b:72:78:35:e2:53:d6:d6:45:a8:d5:e1:41:fc:37:
         e8:67:7f:91:3b:50:a5:8a:30:62:29:95:1f:72:dc:ae:3d:57:
         a7:34:30:73:da:3a:cf:e3:f5:46:aa:f8:e9:13:6a:c1:d5:55:
         49:17:88:8d:2a:76:30:d1:df:98:a4:31:a6:e1:d1:49:d8:e9:
         ae:a1:70:da:04:3c:be:b9:c7:a5:b7:bd:6a:3c:be:e1:7a:17:
         da:60:07:9f:4d:49:c4:43:8b:2f:2d:5a:39:9f:1e:30:e9:39:
         85:16:c1:5b:f1:cc:74:90:27:e6:f0:18:9c:fa:88:7e:29:e7:
         5a:4d:cb:aa:5f:6e:9c:9d:df:3f:09:46:e9:1a:99:89:f6:e2:
         ce:b3:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org