Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/HYlgNlHxks4fbF1-UpYbEAq7UXY.roa
File:                     HYlgNlHxks4fbF1-UpYbEAq7UXY.roa (raw, json)
Hash identifier:          gT1wRdOkwvFsxz0+NFWVkoVc1zn2AFaixliKWw9QpLY=
Subject key identifier:   1D:89:60:36:51:F1:92:CE:1F:6C:5D:7E:52:96:1B:10:0A:BB:51:76
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       E7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HYlgNlHxks4fbF1-UpYbEAq7UXY.roa
Signing time:             Sun 01 May 2022 01:31:01 +0000
ROA not before:           Sun 01 May 2022 01:31:01 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        222.144.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:01 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1D89603651F192CE1F6C5D7E52961B100ABB5176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:f1:59:93:3f:b3:03:bc:ae:87:03:34:82:
                    4d:fe:f7:fb:95:e5:e6:f8:e1:75:c0:0c:bf:f2:52:
                    ba:e7:75:e2:d0:99:a6:82:6b:b7:c8:c8:ac:c8:c0:
                    4a:bf:31:41:42:2b:6f:57:c2:6d:a5:7d:a7:a8:cb:
                    1d:98:3a:b0:f4:99:58:9d:6c:0f:41:13:4d:0c:57:
                    e0:50:2f:8e:ab:8b:2d:46:70:35:05:c8:d8:31:8c:
                    78:cd:76:00:0c:f0:92:60:dc:de:06:b2:4e:85:5c:
                    da:72:dc:ed:9b:68:51:6d:77:cd:f8:d6:83:eb:1b:
                    b6:5a:12:59:d7:06:8a:0b:b7:ca:ea:09:14:88:2c:
                    fc:d0:d4:3f:83:f9:4b:51:e1:a9:fa:eb:bc:52:e9:
                    61:ff:a0:25:b7:f2:32:ac:d7:02:ed:1e:0a:08:51:
                    3c:9b:d5:b2:63:88:dd:5c:c2:ea:8d:55:24:c8:0f:
                    14:b8:4a:5e:c5:38:eb:06:fb:52:7c:0b:95:27:9a:
                    26:4f:8e:59:af:8e:ad:ab:e5:8e:a1:26:7b:92:d8:
                    df:32:af:d1:31:1b:9b:33:3a:36:17:fa:ea:c0:52:
                    e7:c9:f6:09:ef:a2:56:14:b8:87:ce:38:c1:98:c2:
                    a5:85:9c:38:7f:b6:2e:a5:38:10:95:c8:56:d0:ce:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:89:60:36:51:F1:92:CE:1F:6C:5D:7E:52:96:1B:10:0A:BB:51:76
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HYlgNlHxks4fbF1-UpYbEAq7UXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.144.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         dd:b6:84:55:45:df:80:a1:99:be:78:e7:57:47:56:c1:5a:50:
         42:79:75:32:b3:47:70:0d:fd:26:b5:80:63:e1:36:86:f1:fc:
         cd:d7:ce:da:db:9e:89:2f:c1:df:1e:f8:4a:2f:5b:68:9a:ce:
         80:bf:c8:c4:7c:23:46:2c:20:b3:03:1b:87:6f:ac:1e:0c:ae:
         18:99:e1:6e:00:1b:6b:6a:c6:ea:18:f1:ee:a2:0f:0d:6e:1a:
         ee:3a:16:5c:3a:45:46:3b:b7:2c:60:d6:bf:a3:42:54:5f:8c:
         d9:ae:54:dd:ea:e9:a5:eb:69:ed:a1:78:36:21:1b:ed:96:b8:
         09:ce:ea:37:fe:86:30:92:fc:86:ab:98:48:4f:90:0e:f4:87:
         88:99:23:a6:29:a7:50:31:cd:49:be:1a:68:57:dd:1d:a0:97:
         6f:fc:6c:58:ce:68:72:aa:50:25:12:7b:cb:e8:fb:42:d3:eb:
         c4:a7:f4:98:0b:18:8e:3b:39:18:46:d1:80:d2:2e:01:94:9d:
         cb:de:62:3c:37:9a:b3:a3:b1:f3:cc:6a:63:31:d1:ce:32:a6:
         78:67:8e:89:c5:04:d3:e5:fc:a0:3b:30:da:82:4e:bb:03:df:
         cc:3c:3e:7c:a0:6f:99:15:5e:25:f9:8a:b8:8f:f3:03:b4:5a:
         4a:c8:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org