Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/io7455FCrUociuHk3zytHjxg6G4.roa
File:                     io7455FCrUociuHk3zytHjxg6G4.roa (raw, json)
Hash identifier:          dwT7A5+PuefiwLLEjyBfLWD+OWQ1w2KDgvVNejqsV6Q=
Subject key identifier:   8A:8E:F8:E7:91:42:AD:4A:1C:8A:E1:E4:DF:3C:AD:1E:3C:60:E8:6E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       C6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/io7455FCrUociuHk3zytHjxg6G4.roa
Signing time:             Fri 01 Apr 2022 01:28:15 +0000
ROA not before:           Fri 01 Apr 2022 01:28:15 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        153.224.0.0/12 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:15 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=8A8EF8E79142AD4A1C8AE1E4DF3CAD1E3C60E86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:74:d6:0f:b2:08:a9:ce:bd:08:2f:8d:71:02:
                    a7:e1:c3:07:36:91:50:56:96:bd:e9:25:00:57:cf:
                    a2:7e:d2:46:92:5f:2c:42:67:56:8a:ae:3d:2a:e7:
                    8c:81:6c:ad:61:06:76:22:32:00:84:d2:83:25:04:
                    a5:d4:cb:05:d9:9d:20:c7:2f:65:88:ae:31:4f:9d:
                    57:af:c5:ea:b8:4c:96:49:61:b6:a3:63:1c:b3:ed:
                    ea:60:b6:4d:83:a3:b0:36:b6:c8:a9:68:f4:09:c7:
                    65:20:cf:b7:bd:63:97:fd:ba:c8:41:ab:1d:43:55:
                    97:6b:9b:4d:53:13:8f:61:20:98:48:ea:e2:de:6b:
                    7b:2d:56:ce:f6:fa:54:13:92:dc:1d:9e:0e:ff:3a:
                    d0:fc:13:bf:ed:7d:b7:9d:a2:68:9d:1f:9b:62:72:
                    88:fd:05:93:52:cc:28:96:be:e1:f2:92:ad:34:9b:
                    e3:ba:23:1d:83:0e:24:43:14:84:0b:47:c3:d6:e2:
                    d5:06:30:51:b8:b1:d2:2c:d2:87:06:fe:f4:25:49:
                    d0:72:ba:a8:02:57:43:d2:3c:4c:5a:30:1d:47:65:
                    ce:41:fc:e8:3a:88:6c:bc:7f:19:d2:5b:24:34:6c:
                    48:3a:a6:79:5a:39:7d:d2:0f:52:60:3e:a2:eb:8e:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8E:F8:E7:91:42:AD:4A:1C:8A:E1:E4:DF:3C:AD:1E:3C:60:E8:6E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/io7455FCrUociuHk3zytHjxg6G4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.224.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         49:b3:e8:bb:8f:56:93:44:d3:12:33:ea:33:24:4f:8f:fc:ed:
         94:da:bb:de:75:b0:a6:bb:9c:94:1f:fe:ea:f6:80:ba:d2:b9:
         76:df:f1:a4:dd:14:f5:4b:8c:f9:80:6a:da:e2:2a:65:31:15:
         79:3c:1c:58:f1:fb:38:41:4b:6f:d6:b4:36:1c:d5:a6:20:15:
         cb:a4:c4:f2:95:04:df:6b:70:03:8e:0e:57:44:dc:e1:99:5a:
         55:a5:66:db:ab:0f:fd:ed:86:54:97:64:95:ea:cf:01:14:32:
         19:03:3d:75:90:41:0c:1f:ff:94:79:40:80:f1:ad:cc:35:3d:
         c4:e7:18:89:c0:9a:b0:1c:0e:ec:09:f3:70:b8:50:15:e9:d2:
         a2:f0:0b:ce:0d:61:fd:13:ce:b6:17:e5:0c:ce:15:27:99:c1:
         7f:2f:05:6e:cf:ac:08:2d:40:ab:08:56:9d:7f:db:bc:ce:d8:
         b5:91:1c:ee:41:ee:97:b2:6f:fb:0c:db:68:bc:56:2d:4b:fb:
         fc:5f:cb:9a:43:4e:8a:42:49:e5:42:a5:da:7c:a1:2f:89:d5:
         06:c2:3e:0c:7a:52:7a:e6:51:76:38:95:fc:d4:89:ef:e7:99:
         24:7e:cb:d6:80:16:5e:2e:d5:9e:c6:cb:f3:8d:72:cd:5d:cc:
         1b:c4:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org