Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/SVFBCHxZSWeZClJNFQA5rUf2GIM.roa
File:                     SVFBCHxZSWeZClJNFQA5rUf2GIM.roa (raw, json)
Hash identifier:          x0F0oTMGq/+XmVLC21K8v3zpVHt/2cQFRIbmAUzOMAk=
Subject key identifier:   49:51:41:08:7C:59:49:67:99:0A:52:4D:15:00:39:AD:47:F6:18:83
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0157
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/SVFBCHxZSWeZClJNFQA5rUf2GIM.roa
Signing time:             Mon 01 May 2023 01:28:16 +0000
ROA not before:           Mon 01 May 2023 01:28:16 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        61.199.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:16 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=495141087C594967990A524D150039AD47F61883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:30:e5:15:43:63:8b:b4:45:93:da:b5:55:
                    59:41:46:01:0d:5c:2d:ac:43:f0:c7:69:42:53:15:
                    30:18:a2:66:82:a2:60:b1:ee:ed:f8:31:12:34:42:
                    cf:e5:87:ec:ca:4d:d2:2d:d4:4c:e4:ed:c9:83:22:
                    f2:ae:83:51:be:35:22:7f:85:31:91:2f:7a:b2:37:
                    29:16:d3:3d:1a:18:a7:fa:0d:df:a5:0c:52:c3:25:
                    a2:23:1b:e3:0e:e3:f9:04:8e:db:67:15:5c:2d:a7:
                    45:da:37:bd:45:c1:df:a6:b6:96:71:83:17:66:c9:
                    6d:03:98:dc:74:28:d5:75:2b:f9:eb:3d:d1:2f:05:
                    69:4b:37:f1:b7:ed:e4:3e:fc:43:45:5c:e3:a9:a0:
                    84:9c:9b:cc:43:60:b8:33:31:5b:21:11:c7:2d:46:
                    77:c2:ec:de:98:99:a4:69:b5:e6:af:c4:5b:e7:0c:
                    91:3b:86:f5:ed:86:e3:9d:6f:b4:0e:2c:ba:10:ad:
                    38:71:1f:3d:28:d9:e1:d5:b0:77:20:4d:48:57:cd:
                    36:9d:7f:2c:83:b6:c9:1b:b7:75:df:55:94:d2:ec:
                    17:4a:35:63:18:be:2b:67:b9:8d:02:cd:c9:8c:56:
                    01:88:f3:82:89:79:29:9d:f0:74:96:08:4d:2c:3f:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:41:08:7C:59:49:67:99:0A:52:4D:15:00:39:AD:47:F6:18:83
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/SVFBCHxZSWeZClJNFQA5rUf2GIM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:1b:34:ac:d9:a1:48:fc:f0:76:c9:67:f5:21:6b:4a:3a:
         85:92:52:b6:6f:17:6e:53:84:38:83:bc:be:00:20:e9:67:92:
         7a:58:95:4f:88:68:18:19:09:c3:3f:46:3d:c2:b0:35:4b:f2:
         38:b6:90:07:2b:85:68:7a:a7:4d:51:08:d5:25:3d:6b:8b:a7:
         c7:77:c2:5d:fb:89:a2:4c:74:54:fd:ac:a0:1a:5d:8d:44:b2:
         ea:0f:77:ba:f7:f5:76:49:e1:b6:62:b2:b3:2d:e6:7a:71:b6:
         88:50:a4:ca:00:94:4c:72:2a:2c:5d:e6:db:cd:94:42:05:90:
         68:f1:63:ec:68:79:db:36:32:59:69:f2:ba:23:d5:47:77:9b:
         cc:f5:ac:95:82:5c:3a:57:ce:17:33:66:ad:97:64:7d:a3:fc:
         aa:56:b2:39:8b:6d:e7:b4:95:89:a9:69:8e:08:1e:7a:3e:4d:
         ec:87:87:ef:2b:a7:bc:aa:b6:fa:f6:19:d9:59:c6:51:2c:70:
         b1:2f:98:99:bc:be:43:97:ac:5f:73:67:a3:75:fd:64:a3:5a:
         0c:ee:8f:cb:02:80:ff:da:be:8a:d3:d7:66:f7:e8:a9:45:94:
         16:5f:8f:6f:f0:88:b9:64:db:5d:28:42:a4:3d:f7:67:28:6b:
         63:4a:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org