Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/R-rqLR-kGozEb--zD9DbFnwLE4c.roa
File:                     R-rqLR-kGozEb--zD9DbFnwLE4c.roa (raw, json)
Hash identifier:          3zOryIcNB1f0RCYMcvuHywTLtMS4roPfjm8iyIla0hE=
Subject key identifier:   47:EA:EA:2D:1F:A4:1A:8C:C4:6F:EF:B3:0F:D0:DB:16:7C:0B:13:87
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       9D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/R-rqLR-kGozEb--zD9DbFnwLE4c.roa
Signing time:             Sat 05 Jun 2021 03:47:32 +0000
ROA not before:           Sat 05 Jun 2021 03:47:32 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        218.230.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:32 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=47EAEA2D1FA41A8CC46FEFB30FD0DB167C0B1387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:b3:46:3a:56:66:08:b6:b0:6b:ae:0e:05:
                    3b:2a:24:65:62:6a:af:ae:22:e9:a2:1a:03:52:d7:
                    ca:8b:ea:c1:77:1f:0c:93:1a:8d:8c:a5:ed:63:33:
                    10:54:f2:0a:73:86:37:0f:be:bb:92:7b:7a:8a:23:
                    5b:6f:a2:a1:28:3f:02:99:44:cb:f0:f3:17:67:82:
                    74:78:5a:a4:1c:a1:bd:25:52:89:28:96:71:c5:0f:
                    99:c8:97:c2:9d:03:03:be:99:ba:18:e9:45:65:52:
                    39:5a:20:07:8f:20:8d:0e:0b:e9:c1:23:c3:4f:b0:
                    2e:3e:14:e5:b8:80:b3:e1:7b:64:9f:ad:76:37:c9:
                    79:12:d0:54:80:9e:50:be:56:59:89:24:f2:59:6a:
                    84:ca:08:32:be:b5:28:1e:c9:57:53:17:39:28:41:
                    6e:51:5b:a1:01:1d:1b:bc:a2:c2:8a:1c:d2:13:a5:
                    1e:d0:02:88:8f:c2:2d:51:35:48:82:66:8a:b8:d8:
                    9a:03:85:9a:47:67:87:5c:de:99:94:00:42:32:00:
                    62:3b:9f:c4:77:78:73:bc:e8:e3:63:9e:a1:8c:6a:
                    2d:83:13:83:d3:d5:68:1c:9b:68:94:2c:55:b3:2f:
                    1c:70:aa:8d:51:f8:2e:90:f8:2a:62:0c:0d:64:6b:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EA:EA:2D:1F:A4:1A:8C:C4:6F:EF:B3:0F:D0:DB:16:7C:0B:13:87
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/R-rqLR-kGozEb--zD9DbFnwLE4c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:37:42:ae:31:34:7b:08:41:dc:27:2f:48:78:8d:9f:26:99:
         b7:c4:41:a4:7b:4d:9b:f4:14:6b:74:75:61:67:5d:8b:b1:1b:
         b9:5b:36:f7:96:42:86:a8:18:91:d0:7e:8e:f4:e2:09:e9:2c:
         8a:a1:39:8a:52:75:f4:b0:aa:e9:a0:20:53:77:83:f5:f8:db:
         f0:c3:6b:d3:52:55:4a:ac:9c:07:1b:83:6a:c2:31:68:5d:3c:
         ad:b2:86:d3:3c:bf:41:a1:ab:44:88:fa:6d:a4:67:aa:94:67:
         38:f5:7c:c9:cc:fb:d2:e6:b1:86:f4:8f:bb:86:7b:87:6e:f9:
         2a:2f:56:64:7c:3b:c5:59:22:51:b6:3f:2d:23:8e:ff:0a:9a:
         65:30:86:7d:22:32:ea:fa:c1:3b:14:29:d1:ec:32:4c:ec:df:
         6f:fa:f4:a8:9e:04:fb:68:66:71:f1:bf:e0:48:6e:1d:f2:e3:
         9c:30:7e:aa:9d:22:31:f7:48:15:45:51:1f:1a:b9:de:ad:55:
         87:8e:35:96:bc:21:84:b5:c9:89:b5:8a:aa:d9:00:c2:a6:5f:
         45:df:11:fa:b9:04:42:51:19:2e:e6:4c:51:9e:c8:4a:1f:65:
         82:08:3e:9a:ae:0e:1e:9f:1f:1e:07:75:b2:f8:08:db:f8:a0:
         13:94:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org