Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/cLu9bRCxVPqy1sxQVqxZ_YPO878.roa
File:                     cLu9bRCxVPqy1sxQVqxZ_YPO878.roa (raw, json)
Hash identifier:          DatMTHHMXRdJSl5QHTuJRrUclI9nq4urv5NhlY3/SNA=
Subject key identifier:   70:BB:BD:6D:10:B1:54:FA:B2:D6:CC:50:56:AC:59:FD:83:CE:F3:BF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       F3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cLu9bRCxVPqy1sxQVqxZ_YPO878.roa
Signing time:             Sun 01 May 2022 01:31:06 +0000
ROA not before:           Sun 01 May 2022 01:31:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        219.96.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=70BBBD6D10B154FAB2D6CC5056AC59FD83CEF3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:8d:52:9c:54:47:3b:34:27:0a:91:da:f9:
                    94:9c:c5:5a:ff:31:4e:15:a0:c0:8d:66:b6:fe:cc:
                    6e:4a:ac:3f:6e:93:aa:88:ba:0d:5d:a7:3b:24:37:
                    af:72:7c:d3:c9:47:81:1f:04:72:29:a7:bc:be:9f:
                    5e:de:5b:04:7f:4b:f2:58:35:4e:a2:c1:4c:6a:5e:
                    ed:65:f1:8f:7d:f1:34:e5:02:82:45:7b:36:84:2e:
                    ad:ec:1c:ce:04:0f:29:bd:c5:9d:2c:d1:c7:be:26:
                    8e:5b:a2:69:1f:11:cb:ec:83:38:7e:98:41:4f:d5:
                    14:97:13:82:8e:ac:5a:30:c1:c6:87:c3:7e:b0:e1:
                    ee:dd:0b:83:b8:e4:7d:79:28:6b:8f:51:f7:a5:3f:
                    96:b6:b4:6c:c0:85:16:62:ca:70:2e:1d:3a:58:f5:
                    f1:88:2b:19:cd:41:d5:34:6e:5f:18:5a:c5:83:44:
                    36:e9:e0:7c:82:27:8c:b0:68:99:16:52:da:4b:41:
                    47:be:fa:8c:16:44:0b:13:07:bd:cd:8f:5b:c9:40:
                    4b:f9:de:9f:bd:19:97:d1:90:81:e2:8d:1e:4e:8b:
                    01:cf:f4:96:4f:ba:9d:c0:42:08:44:a5:19:40:3c:
                    31:5f:dc:30:98:ec:7e:2f:a4:f1:53:28:30:06:b1:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:BD:6D:10:B1:54:FA:B2:D6:CC:50:56:AC:59:FD:83:CE:F3:BF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cLu9bRCxVPqy1sxQVqxZ_YPO878.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:fa:5e:49:96:c9:2d:37:9f:73:3e:3c:8b:9a:7e:00:37:
         55:c4:fe:f0:1d:f1:43:09:bc:8d:60:95:2e:e3:5f:12:4c:0c:
         c2:6d:6f:1e:51:0f:a9:f8:a1:1c:ba:6a:dc:aa:54:4b:5f:00:
         b7:6e:89:3b:ff:d3:6b:71:83:d9:00:41:bd:54:97:8f:ef:3f:
         5b:46:0d:f6:cf:91:90:72:89:3e:9a:c6:46:fe:5e:11:7b:3e:
         d1:34:3c:df:f2:4a:b1:db:9b:38:ab:16:8c:93:d5:f7:bb:1f:
         91:32:63:fc:fc:fb:1c:5d:ed:3b:94:5b:f6:44:92:ff:32:7d:
         41:c1:38:03:20:e2:98:1f:c8:a4:73:7f:a9:1a:7d:94:9b:b3:
         3b:09:dd:2c:da:69:8d:83:fa:d6:60:e4:45:26:2a:ca:41:46:
         da:74:b0:6f:7a:b6:7e:d4:a8:3d:06:3e:4f:e7:21:6d:f7:b6:
         2f:00:5c:e2:cf:2b:d6:3c:94:60:92:17:03:0d:53:49:e6:c5:
         03:eb:ff:26:55:7f:1f:c7:8d:61:30:3d:bd:a4:14:7b:18:d4:
         85:57:24:03:fb:8a:50:e4:fb:b9:cb:00:5b:6c:a2:54:ec:6f:
         ca:f7:c0:7b:36:d6:2f:a5:cf:5c:1b:2e:12:cb:76:8f:d8:94:
         27:b2:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org