Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqGnDAmsEBQ2Lv5m8-8R_6iqb8o.roa
File:                     LqGnDAmsEBQ2Lv5m8-8R_6iqb8o.roa (raw, json)
Hash identifier:          n04iwYAZQKylW64LAEMQwAvVaxge0Qcqf3ENQ99/8ZI=
Subject key identifier:   2E:A1:A7:0C:09:AC:10:14:36:2E:FE:66:F3:EF:11:FF:A8:AA:6F:CA
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       B9
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqGnDAmsEBQ2Lv5m8-8R_6iqb8o.roa
Signing time:             Fri 01 Apr 2022 01:28:12 +0000
ROA not before:           Fri 01 Apr 2022 01:28:12 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        210.164.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:12 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=2EA1A70C09AC1014362EFE66F3EF11FFA8AA6FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:6f:ec:cd:98:eb:ed:4f:ab:6b:f1:8e:bb:
                    3a:ab:1a:24:4c:9a:60:1c:96:f6:f8:69:48:c2:46:
                    a5:c6:ce:8e:2d:1f:44:3c:1a:9c:98:14:bc:c6:4e:
                    54:8d:e7:50:c3:09:f4:aa:54:00:0d:aa:82:30:e1:
                    bc:bc:18:19:3c:89:65:cc:f5:95:65:da:23:9a:e2:
                    1c:9b:06:41:82:d4:92:ae:e7:14:15:01:0d:68:c1:
                    3c:66:db:6b:d3:f3:73:9a:3e:29:99:12:0d:94:f5:
                    a7:4d:04:b5:a5:09:e9:a9:10:6f:fd:8e:82:15:3f:
                    d1:e6:5d:95:56:2a:0f:23:af:95:4c:ba:a8:70:2d:
                    1b:f1:e2:b9:26:a0:05:b3:ba:79:fc:ee:f6:b1:f1:
                    68:e6:49:2b:79:2e:0f:56:7c:e3:29:3d:fe:64:e2:
                    37:d5:87:ed:e4:6a:c8:74:ff:12:fa:72:cf:81:e3:
                    e0:b7:99:65:56:a3:3f:63:7f:5f:99:bb:b4:eb:cc:
                    5a:8e:2d:72:2b:30:47:55:5a:5d:92:1b:3f:82:a4:
                    73:6b:19:60:ff:ed:8f:b0:40:a5:25:d5:6b:e9:69:
                    54:e7:94:59:f2:9c:b0:ff:2c:16:4f:4c:ea:98:21:
                    b8:37:c3:5b:4e:06:51:46:60:1e:5b:7c:fd:ad:b6:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:A7:0C:09:AC:10:14:36:2E:FE:66:F3:EF:11:FF:A8:AA:6F:CA
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqGnDAmsEBQ2Lv5m8-8R_6iqb8o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:9e:ab:f7:39:8b:8a:56:01:59:59:28:e2:c6:e4:ef:10:
         0b:f1:53:cc:62:ca:c0:b1:e5:fd:b2:97:4a:d0:27:c7:c8:d1:
         ce:bf:4e:43:1e:c0:32:39:7c:66:f7:56:83:e3:bb:f1:cf:e7:
         33:ae:05:e8:90:f9:e4:06:3f:fd:d4:a5:c6:35:ff:99:27:e2:
         91:75:64:54:cd:9c:d3:02:4b:71:93:50:d2:24:2d:2d:80:23:
         a8:be:49:76:b9:83:59:b8:d3:52:50:19:cc:0d:af:e4:ce:49:
         ff:9a:12:8f:47:34:4f:29:08:1f:59:42:57:49:80:12:87:09:
         1c:11:63:48:7e:d3:38:85:73:98:f5:10:3e:f1:57:58:c3:7f:
         94:4a:c9:db:3b:16:f5:79:c8:5c:48:d8:18:fb:b8:31:cb:df:
         57:82:64:a8:8f:98:96:d0:2d:41:03:1e:39:24:1f:5d:89:14:
         66:48:d0:1e:a8:fc:55:3c:06:f5:24:a5:a3:e4:af:46:ea:bc:
         ab:45:af:25:6e:88:a0:45:68:91:17:e7:14:07:97:3f:e1:c7:
         22:4c:d8:0a:b4:02:cf:fa:fc:9a:3b:d0:17:91:3a:57:f0:8b:
         5e:51:82:8a:dd:3a:a3:d4:7a:5b:2a:c3:5c:cd:2a:00:4a:54:
         0f:f6:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org