Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dsBRdgcmTuVEe90EImDfH8OoeZ0.roa
File:                     dsBRdgcmTuVEe90EImDfH8OoeZ0.roa (raw, json)
Hash identifier:          J28YENCHvo7BJ7h0zBKsTisR6br1ge6FV3KJoX2VC6o=
Subject key identifier:   76:C0:51:76:07:26:4E:E5:44:7B:DD:04:22:60:DF:1F:C3:A8:79:9D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       F8
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dsBRdgcmTuVEe90EImDfH8OoeZ0.roa
Signing time:             Sun 01 May 2022 01:31:07 +0000
ROA not before:           Sun 01 May 2022 01:31:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        210.225.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=76C0517607264EE5447BDD042260DF1FC3A8799D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:f1:f8:f7:d0:3c:10:18:23:69:39:83:46:
                    f4:57:e3:9b:8d:2c:4e:53:83:ea:6b:42:d2:ec:48:
                    3a:0f:0a:19:31:99:a9:03:3e:68:99:b6:01:d6:b8:
                    78:57:5f:9e:21:ca:71:7a:0e:24:38:9a:b9:78:af:
                    0c:9b:b1:22:41:50:ec:02:dc:46:95:8a:2d:46:5e:
                    f2:22:e5:0b:9f:a3:b6:87:72:d5:c7:44:07:4c:f5:
                    9e:fa:28:89:1c:2d:e9:97:44:ba:42:e7:86:2b:ef:
                    6a:b6:60:2e:06:2b:39:c5:98:5f:ce:61:19:db:dd:
                    f6:f4:a9:bd:9f:21:ba:60:ce:6b:7a:18:4f:b9:00:
                    a1:4b:cb:90:a7:7a:8a:44:50:38:e1:c0:58:db:b8:
                    0d:88:6c:29:93:37:79:c1:db:98:bf:16:8d:6f:a9:
                    9b:24:2c:aa:62:c1:ad:e9:e2:05:48:cd:23:73:fe:
                    87:01:d5:84:46:3e:fd:1b:eb:ff:a3:97:a6:ab:e9:
                    83:7c:e0:be:8f:c2:fd:90:e4:2e:5d:af:21:08:fc:
                    c1:81:dd:51:e7:5c:6f:f4:7e:d0:2e:83:d0:3e:57:
                    c9:5a:0c:a4:37:18:ec:16:a5:4f:f0:4b:26:4c:d6:
                    e1:e4:97:91:ff:0c:52:d7:62:18:23:ff:ab:2e:06:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C0:51:76:07:26:4E:E5:44:7B:DD:04:22:60:DF:1F:C3:A8:79:9D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dsBRdgcmTuVEe90EImDfH8OoeZ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:04:2e:e0:08:6e:9c:78:c8:72:fb:0a:56:0e:98:f5:b1:
         05:61:14:c9:b0:61:a6:88:16:26:a6:04:3c:b1:f5:d5:15:d7:
         9b:16:3b:84:c2:00:f0:ba:a4:37:9f:19:39:41:76:a6:44:49:
         49:4e:11:c4:48:e4:f9:36:81:8f:4b:00:b8:2d:07:89:d3:0f:
         62:7d:d8:5e:48:97:7f:7c:a4:6b:e4:d9:c6:aa:d3:11:08:bd:
         0b:34:2d:18:cd:de:69:4d:d8:12:e6:ca:66:89:71:ab:f5:f4:
         4a:a7:62:3f:5c:74:0f:d0:b2:ef:3d:87:ea:4a:82:4c:bd:06:
         79:81:e8:48:a5:56:68:8d:0d:93:bc:53:1e:ec:93:4c:9f:31:
         a5:f3:2f:a9:63:a4:96:9f:11:66:b6:da:46:3c:f8:72:f8:bb:
         ac:6b:ae:43:67:bf:d1:12:08:e5:4e:d9:1d:39:b2:45:05:3d:
         26:73:8f:9e:1c:4a:26:26:8a:2d:b3:50:d5:00:ea:e0:01:e8:
         7f:b0:bd:74:b7:06:f7:b1:a4:ab:2d:86:cd:e1:c0:80:21:9c:
         ca:0a:f8:a0:b8:8b:20:c1:a6:47:e6:81:78:e6:14:5b:5c:56:
         6b:f5:4e:f0:73:81:54:64:05:da:b0:c0:46:6f:84:7f:38:9c:
         4f:33:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org