Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/QFMukNTQphOOat7iuQIIZDGpE9M.roa
File:                     QFMukNTQphOOat7iuQIIZDGpE9M.roa (raw, json)
Hash identifier:          bDyENmnQJWvkQY1VVH5o4ynjGpe9K/oEQT1Cbiwg+qQ=
Subject key identifier:   40:53:2E:90:D4:D0:A6:13:8E:6A:DE:E2:B9:02:08:64:31:A9:13:D3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       011C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QFMukNTQphOOat7iuQIIZDGpE9M.roa
Signing time:             Fri 05 Aug 2022 04:24:36 +0000
ROA not before:           Fri 05 Aug 2022 04:24:36 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        153.248.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:24:36 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=40532E90D4D0A6138E6ADEE2B902086431A913D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:26:f8:6c:5c:e3:2c:12:88:e0:06:81:7c:
                    d8:16:6c:9f:20:27:a4:91:94:90:8b:74:c9:39:77:
                    9a:6b:93:9a:58:80:29:bf:2b:b0:1f:7f:d1:f1:6b:
                    39:fe:ee:90:87:9d:fd:1c:32:11:89:77:37:c4:48:
                    2a:6b:ce:d3:55:13:2e:76:34:03:9d:93:57:64:1e:
                    24:e2:1a:89:e4:c8:05:f2:80:a4:df:ef:ea:98:4c:
                    eb:19:ab:d4:de:2c:39:87:da:4a:a3:21:b0:a1:b3:
                    cb:95:3a:83:85:41:53:9f:ac:82:3c:c0:a9:4f:7b:
                    47:87:73:5c:a2:05:5f:82:68:bb:e4:01:57:0f:3d:
                    e1:7a:59:00:0a:0a:db:1f:99:b8:12:2e:55:5d:c7:
                    c4:65:8f:84:10:59:90:2f:42:a3:b4:55:dd:aa:3e:
                    42:9b:67:6d:d8:1b:02:75:84:3c:cc:7f:e1:d5:10:
                    e5:3b:31:7c:52:a4:3a:32:fa:82:db:93:f4:16:4d:
                    4b:fa:ad:ee:3e:f4:f9:55:59:59:9c:93:e5:f5:5d:
                    02:cc:66:c4:55:d9:14:50:82:2c:c3:f7:12:b7:21:
                    02:7d:a9:36:ed:c2:74:22:65:00:c1:db:8d:52:63:
                    28:50:8d:cd:b3:d5:87:c0:16:31:2b:3e:57:06:91:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:2E:90:D4:D0:A6:13:8E:6A:DE:E2:B9:02:08:64:31:A9:13:D3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QFMukNTQphOOat7iuQIIZDGpE9M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:54:b5:c0:53:28:b5:0c:e0:98:15:15:d9:7f:ef:e6:cf:
         28:89:92:d8:cd:92:bf:31:6d:b0:e2:b5:a0:64:9b:75:33:ef:
         e3:f9:63:ce:56:0d:e3:62:b9:7c:3a:e5:3e:fa:37:9b:6a:f0:
         bb:5b:60:76:7c:12:0f:f3:e9:31:4d:af:28:bb:15:e8:37:56:
         5a:e4:fb:ba:01:1d:a2:89:08:28:b0:72:e9:81:28:2b:9b:78:
         bd:2d:88:69:4c:ff:aa:ee:6f:90:65:e2:26:d7:29:9b:89:f6:
         99:bc:83:c7:37:b7:2b:1c:85:58:48:33:cb:f3:ba:a7:db:54:
         95:59:7c:b9:be:11:80:2c:b0:23:9d:12:9c:0a:4f:31:99:d3:
         52:6e:cd:fd:39:0d:c4:40:68:0c:fa:d9:f4:fa:72:84:ac:a6:
         c8:69:7c:f2:85:d7:83:13:cb:c8:89:cb:76:06:5f:00:d8:11:
         01:64:a0:4e:3b:38:87:f4:2f:30:a5:3f:a9:bf:40:b1:92:a8:
         77:79:93:be:89:3c:bb:5c:8d:9e:79:50:98:0f:31:c9:d9:94:
         a4:d3:b0:34:d0:b6:06:d0:bd:30:f5:ec:43:2c:df:c4:3a:22:
         52:30:00:e4:99:0d:d4:91:5c:03:6f:6a:8e:55:fe:00:c9:cf:
         89:49:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org