Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/9AQUsB-Jd7A1uGXA0Hyp2tpv93s.roa
File:                     9AQUsB-Jd7A1uGXA0Hyp2tpv93s.roa (raw, json)
Hash identifier:          +8CtfW1bGN+0IAL0FkuUdKxOhCYi9hjVTwpTU1y7YeM=
Subject key identifier:   F4:04:14:B0:1F:89:77:B0:35:B8:65:C0:D0:7C:A9:DA:DA:6F:F7:7B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       BF
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9AQUsB-Jd7A1uGXA0Hyp2tpv93s.roa
Signing time:             Fri 01 Apr 2022 01:28:13 +0000
ROA not before:           Fri 01 Apr 2022 01:28:13 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        61.207.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:13 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=F40414B01F8977B035B865C0D07CA9DADA6FF77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:dd:a2:8d:4c:0e:5f:2c:07:f8:cf:40:2f:
                    77:be:9c:06:16:28:80:df:21:29:00:eb:83:37:f6:
                    35:b3:21:e1:c8:ca:3f:74:d6:cf:73:eb:19:04:07:
                    8e:0d:f2:d9:f4:84:d5:a3:a6:f4:79:b4:31:5e:07:
                    a8:8c:f6:b1:3b:4a:de:94:86:d2:74:eb:7d:3b:8a:
                    8e:b3:1d:1f:46:0e:f8:b3:47:94:27:f6:99:9a:25:
                    5b:5a:70:12:89:ff:c1:05:47:8e:44:37:f8:47:e8:
                    67:74:18:c5:c1:7e:20:ba:c2:04:91:b7:9a:8a:17:
                    08:8c:1d:08:22:03:67:48:53:6c:5e:2a:db:2f:4d:
                    e1:08:2e:dc:a5:6d:22:e6:6b:c8:a8:23:00:27:73:
                    eb:ba:0a:93:ee:8c:70:38:23:3c:5d:51:f0:c2:50:
                    f4:a4:f4:d7:20:9d:20:a6:63:27:ae:f9:c3:d6:df:
                    a1:0a:cc:31:31:a5:a2:e4:97:62:09:94:77:05:b2:
                    03:2b:73:fa:03:3b:65:c1:8a:f7:a3:c8:9e:92:f3:
                    70:f7:80:2d:87:19:30:28:04:61:50:70:a1:d1:08:
                    e8:3b:0b:be:1e:ce:d7:5d:2a:9a:6e:b3:69:25:30:
                    0d:59:1d:ca:52:9f:3d:98:59:24:2f:e1:e4:41:2e:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:04:14:B0:1F:89:77:B0:35:B8:65:C0:D0:7C:A9:DA:DA:6F:F7:7B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9AQUsB-Jd7A1uGXA0Hyp2tpv93s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:1a:9c:84:5f:73:0d:37:7b:eb:05:7f:ff:10:f3:8d:7d:
         51:74:99:97:2d:8e:f8:0c:65:1f:e0:19:7d:f8:96:65:46:30:
         56:04:e5:52:07:4e:b3:cc:cb:48:31:68:86:b2:71:8c:37:44:
         6d:85:3f:9a:27:38:e6:88:1e:08:ac:1f:ed:ae:85:f7:6b:b2:
         cc:c7:26:52:5b:75:ce:00:cb:50:19:4a:06:be:0f:ba:69:1b:
         3b:5e:31:dc:03:65:20:de:4b:41:5c:cb:6f:bc:39:e9:26:f8:
         d4:a4:a8:e2:ac:f3:b8:19:1c:2f:b8:fb:bf:d6:a6:86:9d:cf:
         5c:6d:5d:16:48:db:29:34:09:d1:f8:17:22:af:0a:f2:8f:39:
         82:9a:44:b8:f7:c2:3e:c8:d1:0f:9d:58:88:52:09:3a:16:32:
         b9:d1:83:d1:d2:e7:f6:5b:7a:13:c3:3b:66:5f:4f:c5:39:20:
         6b:84:4d:31:3d:de:c3:67:bf:ff:6d:b3:bc:fb:8c:ce:6b:4c:
         79:78:52:a7:44:b4:a6:f9:d7:fe:21:4a:ed:9c:6d:64:d6:c0:
         4e:71:63:bd:78:05:6a:ad:da:e9:0b:f3:88:a8:7d:5b:de:27:
         ed:ef:3e:06:ad:b1:d0:64:14:55:30:db:6c:1c:f4:74:3e:90:
         c3:df:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org