Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqmgvDuwW6r09ROQO1bcLoDz2wU.roa
File:                     LqmgvDuwW6r09ROQO1bcLoDz2wU.roa (raw, json)
Hash identifier:          L/RawMudodFMFA0auwF4p+mN1luGFHA+ODXOLa7Q6d8=
Subject key identifier:   2E:A9:A0:BC:3B:B0:5B:AA:F4:F5:13:90:3B:56:DC:2E:80:F3:DB:05
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       B6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqmgvDuwW6r09ROQO1bcLoDz2wU.roa
Signing time:             Fri 01 Apr 2022 01:28:11 +0000
ROA not before:           Fri 01 Apr 2022 01:28:11 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        211.129.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:11 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=2EA9A0BC3BB05BAAF4F513903B56DC2E80F3DB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:6d:c8:b8:41:65:55:31:e0:95:bd:92:00:
                    a8:67:00:78:b8:c5:d7:c3:9e:78:d1:d1:db:dd:ba:
                    ea:9a:bc:1a:a7:5a:66:c8:e4:2c:4e:5e:42:50:11:
                    ee:82:1f:1b:73:2b:c6:04:f7:bd:a1:b7:5b:f9:44:
                    c0:e5:32:4e:9f:cf:fb:54:8e:54:62:10:94:2b:37:
                    c0:57:48:04:9c:ae:33:71:17:13:ff:c3:ad:75:bc:
                    cc:8d:fc:e9:55:24:86:5c:7c:1d:c6:57:6c:83:21:
                    23:63:4f:c1:09:c3:77:8e:5e:5f:8c:d7:1b:04:ea:
                    78:49:4d:80:a3:29:a7:b8:38:b5:e0:ee:26:e8:a3:
                    47:c3:45:dc:af:36:b2:4c:8e:18:71:fd:7f:b3:a2:
                    93:c2:bb:ce:59:aa:02:d6:1b:40:c3:b2:92:93:5e:
                    09:61:a9:d4:ae:12:a2:33:b4:95:d4:13:4c:ce:71:
                    e2:bb:9a:65:19:7d:30:fa:09:73:5f:c7:61:16:20:
                    02:4a:e6:31:f3:28:e3:3e:43:b4:90:38:db:f5:fb:
                    d5:c0:d9:48:3b:f5:70:ed:59:c8:05:14:51:0d:3e:
                    21:44:a8:48:94:05:e8:c2:af:74:09:41:1a:c1:43:
                    aa:33:29:b3:36:7e:fe:fb:24:8c:64:6a:b0:92:b8:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A9:A0:BC:3B:B0:5B:AA:F4:F5:13:90:3B:56:DC:2E:80:F3:DB:05
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqmgvDuwW6r09ROQO1bcLoDz2wU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:11:6d:ac:90:5f:2e:b1:c4:31:c1:5c:6b:f2:da:b7:af:87:
         75:60:df:17:40:b4:65:96:cc:f0:e8:2b:0d:dd:55:a5:7b:63:
         78:3e:84:6e:0a:03:33:9d:ac:91:d7:26:85:f8:32:29:13:cf:
         7f:b2:fa:ea:a4:d4:5e:b8:d8:dd:d9:e4:9c:27:2a:ab:59:1e:
         0b:de:82:34:32:c4:83:15:33:ab:4f:74:7c:90:83:46:10:ca:
         cd:7c:d9:8e:ab:45:1c:c8:51:3e:51:b3:3b:e2:14:62:f1:51:
         05:44:0e:61:93:8e:51:34:b9:c7:b4:e0:20:9a:05:54:82:4e:
         b3:e3:0a:3a:50:d3:5f:47:ad:6b:c0:14:67:9a:5d:e8:c7:31:
         6f:be:d7:f3:0c:2e:19:70:0c:97:dd:e5:92:a3:91:e7:14:66:
         b0:16:b7:f0:a6:3e:8c:af:fa:f2:6d:7c:d0:24:25:f3:60:21:
         75:84:45:1d:3d:f8:6f:c5:03:52:d8:5e:b2:50:c0:42:46:9f:
         b8:05:5a:e5:07:d2:84:cd:bd:cb:ba:56:6f:bc:cb:19:d3:9d:
         e5:e4:3f:a7:6f:41:aa:fb:d0:e0:ad:3c:ee:9c:bd:bf:9c:76:
         fa:50:44:07:66:60:04:2b:0a:eb:d5:e8:c6:ee:8d:e0:12:e9:
         4a:82:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org