Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/BF2tU1c1xniUs2jQ5iwwac49X1Y.roa
File:                     BF2tU1c1xniUs2jQ5iwwac49X1Y.roa (raw, json)
Hash identifier:          gxRzWGKjOR5ICwlzVHFYQojuGFxR+llSvNVQ9PPwJvU=
Subject key identifier:   04:5D:AD:53:57:35:C6:78:94:B3:68:D0:E6:2C:30:69:CE:3D:5F:56
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       FD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/BF2tU1c1xniUs2jQ5iwwac49X1Y.roa
Signing time:             Fri 10 Jun 2022 02:38:11 +0000
ROA not before:           Fri 10 Jun 2022 02:38:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        211.130.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 02:38:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=045DAD535735C67894B368D0E62C3069CE3D5F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:3a:18:fc:30:87:11:c3:20:90:27:aa:30:
                    cf:c4:ef:39:07:96:42:8f:7d:33:4a:73:60:23:5a:
                    20:9a:4c:41:79:f3:34:2a:fe:ee:31:29:36:83:62:
                    3d:8c:09:59:66:05:73:18:1c:35:f7:a7:71:89:0c:
                    34:fa:6b:91:2e:89:63:6a:fc:37:1c:38:01:21:73:
                    a1:d0:0d:f9:8e:d3:a5:ea:39:d0:de:80:33:ae:41:
                    2c:63:2e:9b:95:2a:8f:de:a4:9f:1c:ea:2e:c1:4d:
                    26:f3:83:0f:ca:85:ea:4e:c0:7f:21:94:2a:1a:86:
                    01:7a:ff:a9:03:7e:fb:55:a7:7c:f2:50:f2:e8:8d:
                    d8:f5:c6:c2:cc:53:2f:73:1a:6b:c8:1e:d8:e8:24:
                    0b:ae:07:5c:2f:a5:41:64:22:ec:2b:79:a7:5d:ef:
                    77:60:8e:4d:4e:15:9d:bf:be:71:54:45:1f:ed:13:
                    92:b1:68:57:b0:25:51:53:fb:94:b1:a4:e5:83:6e:
                    1d:5c:7d:50:bf:b5:24:c9:04:4f:0b:3c:ea:85:96:
                    68:93:6b:d0:59:0a:6b:b8:4c:a2:12:99:18:c9:cc:
                    c1:3d:25:0d:d9:f3:26:99:12:80:c8:f3:1e:ca:4b:
                    79:10:b4:15:10:a7:0e:0e:fd:3b:1c:98:a6:98:d6:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5D:AD:53:57:35:C6:78:94:B3:68:D0:E6:2C:30:69:CE:3D:5F:56
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/BF2tU1c1xniUs2jQ5iwwac49X1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:d1:0a:87:20:99:08:b0:fe:4b:93:11:a8:06:42:b4:e6:
         0e:80:91:d5:ac:da:4d:40:f5:89:38:f2:a9:86:8e:c2:11:23:
         00:16:3c:9e:11:7b:b0:3b:45:54:51:87:03:8f:d1:f2:1a:16:
         d4:cb:7e:6c:a7:ee:34:d3:5a:8a:8f:a9:e2:a4:47:6f:4c:47:
         cf:5f:be:c1:db:0b:c5:ed:ad:3f:42:66:0a:5a:5d:2e:b0:96:
         05:d3:0b:a8:0a:71:9b:7b:0c:88:58:40:f5:5e:c9:77:21:04:
         4e:12:3d:6d:63:52:da:12:b7:39:45:65:7e:75:21:d0:b1:1a:
         ca:8e:3a:f8:fe:03:98:9e:e3:9e:b3:4b:75:84:e3:f3:22:d3:
         00:bb:1f:cb:7b:60:97:33:67:ae:0e:f7:b5:65:af:97:17:0b:
         be:d4:3f:31:bd:1f:40:3c:0d:98:6b:50:b7:f5:16:5c:77:8a:
         4d:dd:d2:43:8b:d7:4e:02:b5:dd:0b:f9:24:f9:a3:47:c2:e0:
         fe:58:68:75:0e:43:a1:23:42:b8:91:3e:bb:f7:6f:91:b6:89:
         ce:0b:d4:43:33:36:23:3c:a3:ba:84:58:ac:59:4e:92:b6:b9:
         02:e4:36:32:a8:39:b4:b9:da:09:0e:dc:3d:6e:64:0e:46:ed:
         86:dd:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org