Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/9tLTPAiDJ6I3EsA7ovsGOc1XqbA.roa
File:                     9tLTPAiDJ6I3EsA7ovsGOc1XqbA.roa (raw, json)
Hash identifier:          /Jh/z2eSRIHFL00vm1I8Zi5470YjKP5P82dD8CkXJPI=
Subject key identifier:   F6:D2:D3:3C:08:83:27:A2:37:12:C0:3B:A2:FB:06:39:CD:57:A9:B0
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0128
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9tLTPAiDJ6I3EsA7ovsGOc1XqbA.roa
Signing time:             Fri 05 Aug 2022 04:40:41 +0000
ROA not before:           Fri 05 Aug 2022 04:40:41 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.170.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:40:41 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=F6D2D33C088327A23712C03BA2FB0639CD57A9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:1b:e7:5e:91:16:c0:6d:a5:f6:0d:10:57:
                    1d:47:0c:4c:d8:df:a4:40:9b:49:68:61:c0:93:80:
                    54:7c:9d:5b:c3:5d:12:b0:61:55:33:05:21:71:7a:
                    9a:32:d9:d5:33:41:c9:e4:cf:e5:46:aa:5b:1e:37:
                    74:67:0a:5a:88:67:49:e3:44:85:24:5f:59:0d:6f:
                    fc:61:f8:d2:e5:30:e9:84:67:d4:22:d1:b5:57:33:
                    55:42:9d:50:5a:40:0f:b4:25:44:57:b2:18:b5:eb:
                    7a:a2:c6:a2:e1:5b:f4:77:3e:a7:02:29:cc:cd:0a:
                    98:fa:dd:5f:43:f0:ba:38:94:9b:9f:80:a9:48:1c:
                    ca:dc:9d:3e:c9:57:56:aa:36:f1:b7:a7:fb:e2:0b:
                    4b:20:69:a9:cc:ce:58:8e:91:9a:f6:a0:b6:d0:d9:
                    89:43:ce:c5:5d:20:fa:e2:f4:d5:66:fa:2e:ed:6c:
                    ce:1d:44:37:a7:86:f9:a6:68:e0:e3:e2:53:63:f8:
                    2f:38:a1:50:df:90:7b:f9:21:2a:35:06:72:2f:2b:
                    76:b1:44:e1:f6:36:fb:37:73:a8:cd:2a:b3:02:0e:
                    fc:19:bd:f6:5c:9a:d9:52:2b:b2:6d:21:09:31:7d:
                    cf:2d:e6:3b:f6:92:14:e2:a8:ae:b1:84:49:88:24:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D2:D3:3C:08:83:27:A2:37:12:C0:3B:A2:FB:06:39:CD:57:A9:B0
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9tLTPAiDJ6I3EsA7ovsGOc1XqbA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:00:f6:13:fd:f0:30:5a:f1:21:75:10:d9:1b:d7:80:21:c7:
         fd:4b:4f:0c:27:f6:0b:41:ba:37:ac:4d:eb:67:f9:9b:6e:8e:
         44:a1:c9:9e:21:ab:9c:0a:e5:50:7c:99:77:37:5b:ad:fb:6b:
         08:35:bf:0f:8d:ff:5e:41:17:e6:da:2b:e1:01:a5:3c:5f:41:
         ca:a7:f8:b0:a2:a0:7e:68:90:e1:d8:a8:6c:2d:c3:22:65:78:
         d5:a3:95:a4:d9:cd:b0:18:ae:a7:d0:7f:19:78:8a:ee:18:a0:
         04:15:0f:1b:92:dc:d5:6d:9e:d5:10:9a:a4:51:1d:4d:16:47:
         ce:3c:84:7e:44:a3:22:cf:20:e1:81:d9:61:1c:24:ae:78:5c:
         a2:b0:1b:b8:02:cb:6b:5e:2d:6b:65:3c:02:8c:67:91:db:a8:
         8f:dd:8e:70:7b:45:e1:d7:0e:d6:b7:ad:17:5a:72:84:47:02:
         17:67:ce:8f:7c:20:83:cf:51:30:8f:01:16:eb:80:3f:06:6b:
         ab:7e:03:b6:af:fe:f1:ee:e6:af:a7:df:fc:82:0a:06:cf:3a:
         fc:bc:22:ed:a0:0c:18:08:ef:a3:19:43:21:e5:d1:37:4f:df:
         cb:95:06:9f:0c:05:8f:31:ec:32:84:da:ec:94:a2:0b:17:68:
         fe:ba:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org