Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/RjuxgPjeIvDzLCnuvlLbm_lJUG0.roa
File:                     RjuxgPjeIvDzLCnuvlLbm_lJUG0.roa (raw, json)
Hash identifier:          RZaz3hdW5pJ+Ed/CeO4agu6qmE271iz6t6Mh/OAy69U=
Subject key identifier:   46:3B:B1:80:F8:DE:22:F0:F3:2C:29:EE:BE:52:DB:9B:F9:49:50:6D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       CB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/RjuxgPjeIvDzLCnuvlLbm_lJUG0.roa
Signing time:             Fri 01 Apr 2022 01:28:16 +0000
ROA not before:           Fri 01 Apr 2022 01:28:16 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        202.234.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:16 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=463BB180F8DE22F0F32C29EEBE52DB9BF949506D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:93:52:d1:d0:2e:8d:18:e4:77:b3:32:c9:
                    ec:7d:c2:d4:2f:77:6a:ca:c0:87:d9:99:7c:20:37:
                    25:64:30:69:c5:ba:33:d5:57:c1:87:4e:87:5c:e5:
                    cd:f0:e7:28:68:3e:45:d5:65:c0:45:e1:70:e3:f6:
                    a0:17:58:b9:37:24:01:f4:cc:3e:2a:12:40:c8:a5:
                    c0:2b:0a:7f:78:d0:fe:ee:9f:09:dc:f2:fa:a7:05:
                    90:51:eb:b3:ea:69:f1:61:22:bc:b2:b2:c7:0f:6e:
                    d1:94:0f:1f:3e:08:c6:aa:c3:b7:11:cd:ca:3c:02:
                    bc:ef:2a:d7:43:d0:c8:91:e3:98:e4:71:db:5a:73:
                    81:1f:79:fa:e1:60:12:bf:9a:78:30:bd:e8:4d:d8:
                    9a:70:2d:2c:2a:39:94:3b:3a:9f:bb:53:6f:66:d8:
                    0a:03:60:c2:d0:a0:b2:ef:7f:85:de:9c:db:29:f4:
                    69:35:17:f6:39:b4:32:e8:f5:e8:a0:2f:65:65:ab:
                    7c:43:f9:f6:0c:53:04:8c:25:c9:fb:64:51:35:f5:
                    38:be:68:8a:d4:f8:fd:33:e0:50:86:aa:ed:bd:02:
                    66:b5:8f:4d:f5:c2:33:75:cf:52:ed:0d:a0:11:7c:
                    4d:1e:29:d7:73:b8:36:8e:fd:3f:d9:4f:fc:4e:89:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:B1:80:F8:DE:22:F0:F3:2C:29:EE:BE:52:DB:9B:F9:49:50:6D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/RjuxgPjeIvDzLCnuvlLbm_lJUG0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:02:5d:d9:82:6b:e0:94:7c:47:04:19:ec:1d:f8:51:ef:
         ce:2a:ea:4b:31:83:23:4d:7c:6c:ca:15:45:0e:3f:6b:80:68:
         2f:af:c8:a0:9f:66:85:67:df:4d:e9:63:06:f5:9c:af:3f:58:
         74:f6:24:aa:2b:9f:57:69:34:e9:e8:ed:f0:81:d9:d2:2a:86:
         3a:7e:69:60:eb:14:90:a3:78:2a:6c:90:c6:20:41:1d:24:35:
         1f:83:77:c6:f8:64:50:ef:c5:ab:48:ec:5b:8b:b5:65:9a:74:
         f6:f7:6b:4a:d4:76:69:ab:45:e2:86:3e:49:33:e7:5b:1e:51:
         b7:48:ba:98:43:ce:c9:37:2a:67:c3:a3:08:21:34:bd:aa:37:
         12:1e:55:7d:ea:a4:b3:0d:97:99:28:42:7f:4a:c5:db:9d:e7:
         1e:c7:31:2c:48:50:e5:18:9f:90:ba:90:06:f4:d0:0f:98:54:
         88:13:dc:b4:67:60:99:85:b8:5b:f1:d8:24:b0:e7:35:12:90:
         b3:6c:03:61:9b:ca:1e:cd:36:55:93:e6:e4:6b:87:e3:61:b5:
         38:44:2e:47:09:fc:c0:25:69:5a:40:7c:36:f7:d4:f6:43:3c:
         9f:1e:21:64:57:d0:cd:7f:4b:d7:d0:10:a9:2e:0a:7a:bd:6e:
         47:6d:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org