Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/FysVOd2wg210UVfF6RrNUUJ8ciA.roa
File:                     FysVOd2wg210UVfF6RrNUUJ8ciA.roa (raw, json)
Hash identifier:          1AiT/bKH5yVp0h1ZpN9xIENeFmh8QDRKrfJ7P+eEFhE=
Subject key identifier:   17:2B:15:39:DD:B0:83:6D:74:51:57:C5:E9:1A:CD:51:42:7C:72:20
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       016B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/FysVOd2wg210UVfF6RrNUUJ8ciA.roa
Signing time:             Mon 01 May 2023 01:30:25 +0000
ROA not before:           Mon 01 May 2023 01:30:25 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        153.224.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:30:25 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=172B1539DDB0836D745157C5E91ACD51427C7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:1b:ce:a1:08:46:c0:06:44:27:48:52:f9:
                    8b:07:a2:dc:f3:43:18:3b:8b:1d:f6:e9:b4:12:ea:
                    c2:42:71:d9:d4:94:55:dd:28:fd:26:32:dc:14:58:
                    5a:69:74:25:cf:77:2c:98:cb:38:69:8c:59:ed:f5:
                    60:71:40:d6:c5:f0:d6:c3:4a:71:7c:bc:2c:69:ed:
                    c8:e2:bd:af:6b:48:70:ac:3c:cd:ed:95:dd:f6:25:
                    2e:c7:35:f7:c8:18:fc:15:fe:9b:6d:e4:ad:43:a8:
                    f9:ce:68:f7:74:fe:9a:b8:cc:2a:ab:6e:8e:fb:ae:
                    a4:d8:f0:ea:dd:48:1f:6d:e0:99:cb:1f:45:73:f7:
                    f0:be:fa:cf:c8:dc:e3:6a:a9:9c:94:d6:d6:61:fa:
                    06:f0:05:64:d2:60:6f:b0:b9:97:50:97:07:6e:e2:
                    22:58:91:c6:66:3c:27:db:66:6e:c2:f7:36:ed:09:
                    a5:6c:fe:32:09:b2:d4:55:87:4b:95:e4:ee:81:c4:
                    21:d9:11:50:db:1a:80:6b:8e:2f:13:1e:f2:19:31:
                    37:67:1c:24:ef:a1:10:2f:6f:c7:7e:c4:63:49:ce:
                    b9:2b:f8:b7:da:a0:5e:7d:bf:be:a2:73:45:47:49:
                    41:d8:38:36:23:11:16:be:71:66:6e:09:67:e8:5b:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2B:15:39:DD:B0:83:6D:74:51:57:C5:E9:1A:CD:51:42:7C:72:20
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/FysVOd2wg210UVfF6RrNUUJ8ciA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.224.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         b9:85:62:cd:51:67:6b:e1:15:4c:c8:1d:f5:ff:52:5a:52:dd:
         32:40:7d:8c:98:91:0e:e0:4d:84:4a:d4:99:3c:ce:0f:50:26:
         f5:95:b6:5f:86:2b:2c:b8:fa:83:1a:45:45:71:74:2b:9c:c3:
         f3:16:44:b0:fb:7c:49:f0:15:d7:34:28:10:89:59:18:da:09:
         c7:a3:21:c7:a3:6b:8b:68:9d:59:61:31:f6:04:9a:5a:4e:26:
         67:2e:76:90:be:cd:76:70:73:e5:14:8c:6d:1b:6c:ee:74:97:
         ba:88:fa:92:e3:89:4e:37:61:99:d8:35:f2:c4:ec:b1:33:6b:
         0e:03:78:9b:3a:07:81:17:18:c7:8e:ba:90:75:33:51:4e:c8:
         44:4c:a1:13:fb:35:23:27:d6:3d:57:47:bc:73:12:81:03:80:
         79:e9:0c:99:d5:1e:dc:55:2f:f0:5b:2d:ec:d4:cf:f3:5a:42:
         e9:25:c3:35:fa:f6:79:a4:3e:15:6d:49:ae:b2:df:91:c5:1b:
         09:03:48:d4:98:56:7a:77:ca:3d:ec:d4:3e:70:ba:64:7d:bb:
         ac:0d:84:de:b0:5a:dc:8b:c3:18:8a:fb:35:31:0c:7a:3b:64:
         4a:46:1f:02:37:ee:40:75:c8:26:40:94:96:68:d0:a8:82:c7:
         ce:0e:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org