Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/_e892Jjd02R5EuOsbgdtYF7sVmw.roa
File:                     _e892Jjd02R5EuOsbgdtYF7sVmw.roa (raw, json)
Hash identifier:          F0xBT1LGlDpCfzz5UpBQMVP6j3N/W04TJd8Id0nthV0=
Subject key identifier:   FD:EF:3D:D8:98:DD:D3:64:79:12:E3:AC:6E:07:6D:60:5E:EC:56:6C
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       B3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_e892Jjd02R5EuOsbgdtYF7sVmw.roa
Signing time:             Fri 01 Apr 2022 01:28:10 +0000
ROA not before:           Fri 01 Apr 2022 01:28:10 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        210.132.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:10 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=FDEF3DD898DDD3647912E3AC6E076D605EEC566C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:f9:09:33:e2:ea:a3:6a:24:1d:96:3d:f6:
                    e0:25:54:28:47:89:2d:a0:ca:04:71:8f:34:02:35:
                    e8:84:cb:61:74:47:a7:97:b4:29:72:f9:71:ab:d4:
                    f2:76:16:12:0d:64:40:af:0f:61:8b:dc:c5:a0:60:
                    c2:4a:6d:f7:0f:83:4b:15:0c:7a:e3:50:03:55:79:
                    14:e6:ce:8a:a1:dc:41:dc:77:97:7c:e7:5a:c7:da:
                    03:1d:ed:f9:9f:4a:c6:b9:3a:53:83:be:0a:5f:65:
                    31:f0:fd:86:cc:d5:55:be:fd:96:52:c7:9d:14:22:
                    1b:10:d1:8a:b2:92:a4:1f:71:d9:7a:bf:af:b3:f8:
                    94:03:b2:f8:5d:3e:d7:75:93:4b:b3:4e:b5:30:a8:
                    58:96:b8:9a:ff:60:d1:99:2c:66:41:d8:0f:19:be:
                    57:53:be:61:91:3d:74:d4:d9:c7:53:04:5a:b8:57:
                    05:2f:51:df:0f:c6:3e:0e:24:0f:4b:61:20:f8:d0:
                    e9:d3:f2:d9:64:45:c4:90:74:9e:a7:9a:32:75:e5:
                    bc:e5:81:5c:c8:29:e5:40:e7:1c:b9:7a:6c:d2:86:
                    42:4b:3a:4a:ec:4b:f6:a4:b6:90:56:28:5b:9e:a7:
                    a5:f0:3f:a3:9c:45:a9:9d:1d:49:5e:52:75:e8:5a:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:3D:D8:98:DD:D3:64:79:12:E3:AC:6E:07:6D:60:5E:EC:56:6C
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_e892Jjd02R5EuOsbgdtYF7sVmw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:6a:59:f7:e6:6f:78:a2:bd:64:56:16:3c:47:96:ff:28:24:
         1a:d1:ff:6b:b4:70:32:6b:cc:8d:41:4d:2e:92:e5:20:91:40:
         82:ec:a9:64:ee:0c:34:c5:b4:76:44:09:15:b0:8b:7f:18:4a:
         7d:96:03:8a:3b:24:36:b2:80:dd:91:03:7b:bb:6c:71:73:88:
         a3:f1:9c:74:44:ed:d3:ab:e4:95:ae:47:af:fb:dc:f3:e9:8e:
         8a:23:d9:9f:f9:1b:57:37:c8:70:55:1b:02:85:e6:54:b6:3a:
         ec:c6:39:c1:20:0a:e5:20:f0:74:da:72:65:4b:08:9c:8a:1f:
         82:40:8e:0b:59:0e:54:b8:a5:5d:36:03:ce:7b:cb:bd:e3:d1:
         eb:42:0b:dd:be:75:62:59:91:ee:04:5d:25:7f:b9:25:38:44:
         0c:11:1e:dd:6d:13:1c:6a:1f:18:93:9f:d8:3e:4c:28:97:1e:
         a0:20:bb:16:87:08:ce:60:6e:06:f9:aa:21:c2:f3:4b:fd:6b:
         85:ca:b6:fb:6c:83:cb:93:a2:2d:57:3b:85:f9:35:b4:36:d0:
         c5:cb:59:b8:bf:1a:25:d3:d3:ef:59:dc:10:ca:c5:e8:00:c4:
         25:f2:0c:f9:34:d6:97:da:d9:aa:d7:65:20:67:18:49:d4:83:
         66:86:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org