Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/L966G8zAhdZgpzzKnSpjQ01BlM8.roa
File:                     L966G8zAhdZgpzzKnSpjQ01BlM8.roa (raw, json)
Hash identifier:          HAGTj29d9AO5wLAXdGL+k9ClXZpk18yQff4G7agqZqw=
Subject key identifier:   2F:DE:BA:1B:CC:C0:85:D6:60:A7:3C:CA:9D:2A:63:43:4D:41:94:CF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       E3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L966G8zAhdZgpzzKnSpjQ01BlM8.roa
Signing time:             Sun 01 May 2022 01:30:59 +0000
ROA not before:           Sun 01 May 2022 01:30:59 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        61.118.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:30:59 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2FDEBA1BCCC085D660A73CCA9D2A63434D4194CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:fe:57:78:62:24:6e:9d:ac:e8:33:10:ab:
                    76:26:2d:ca:15:9e:1f:f3:00:6e:fd:f9:0a:1e:44:
                    73:7f:50:36:dc:f1:f4:c8:71:99:f3:2b:3a:d2:48:
                    b6:f3:ad:cb:0d:10:99:21:c3:1c:a8:83:3f:1e:fd:
                    58:23:86:7d:57:5d:b0:e2:28:db:e4:48:23:3f:8e:
                    df:f6:7a:f1:8e:4b:18:63:ee:16:50:df:12:0d:63:
                    e1:3a:16:72:4f:2a:15:61:48:9b:24:05:89:26:4b:
                    29:81:a5:4e:f1:b9:8d:69:a3:20:7b:6b:ad:0d:a6:
                    69:8f:2f:df:bd:61:ca:75:c8:65:3d:55:d8:ad:6f:
                    38:e8:b6:70:d9:96:69:8d:b7:8b:91:f3:7b:0c:e1:
                    0b:48:9e:a0:d3:45:ce:fb:ba:a8:be:2c:f0:0b:11:
                    19:be:49:01:ee:f5:20:65:50:6d:ae:e8:67:ca:0d:
                    4b:51:c0:b9:98:fb:f8:ff:ed:6a:03:fc:03:b6:f7:
                    8d:94:20:65:68:ee:62:45:5f:78:d1:37:eb:11:33:
                    ba:ac:bd:c1:83:b1:d9:ac:b0:b4:4f:f0:1b:02:b7:
                    d9:87:68:5c:f2:1c:7d:71:98:d0:f3:b3:c0:e0:fc:
                    52:fb:07:6c:e2:62:da:9b:92:eb:ed:ce:e4:08:c2:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:BA:1B:CC:C0:85:D6:60:A7:3C:CA:9D:2A:63:43:4D:41:94:CF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L966G8zAhdZgpzzKnSpjQ01BlM8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.118.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:9a:21:9a:ce:6c:87:47:fb:61:f1:58:22:c4:d8:c5:f3:
         82:74:59:00:ed:11:04:0a:ae:b5:1e:f2:44:46:2d:11:ed:37:
         47:38:92:11:5f:da:52:03:51:36:76:70:99:84:06:97:28:70:
         ac:4d:69:ef:e3:1c:fb:15:a5:f9:6e:28:05:e2:02:b1:f8:bf:
         31:11:fc:54:1d:3e:02:94:58:1a:86:86:ca:03:ab:60:34:5d:
         81:a9:45:90:60:26:5f:d3:0e:f3:a3:51:e4:97:5c:18:d9:e0:
         84:77:6e:32:58:fe:c8:32:44:55:d6:27:07:75:0a:5d:f6:45:
         1e:41:a6:d6:43:10:83:f2:06:f8:53:ca:90:bf:b5:2f:38:41:
         e9:ea:6e:a7:c5:11:cd:54:bc:76:c9:49:8e:2a:c9:cb:a1:7f:
         94:15:d2:ec:11:94:52:d1:6e:c1:97:cb:76:70:9b:01:13:f0:
         2a:1c:a1:68:86:be:03:88:87:82:de:05:ff:f2:18:de:14:af:
         57:37:a2:6d:67:03:a0:62:81:f9:61:a7:f3:c4:13:8c:11:5c:
         a1:3e:46:1c:77:35:29:f6:29:70:d8:a5:95:07:f6:17:38:61:
         fe:7b:b0:2d:4c:84:af:7a:e1:58:93:68:dd:bc:d7:2a:a2:36:
         9a:db:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org