Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/iuRN1i0fOFYu204s_0TKBNdLAoM.roa
File:                     iuRN1i0fOFYu204s_0TKBNdLAoM.roa (raw, json)
Hash identifier:          v11hd48xmqL8bhM6poEX2KjcwWVtr9+lVjezswDOG/Y=
Subject key identifier:   8A:E4:4D:D6:2D:1F:38:56:2E:DB:4E:2C:FF:44:CA:04:D7:4B:02:83
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       8B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/iuRN1i0fOFYu204s_0TKBNdLAoM.roa
Signing time:             Sat 08 May 2021 04:05:47 +0000
ROA not before:           Sat 08 May 2021 04:05:47 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        61.112.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:47 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=8AE44DD62D1F38562EDB4E2CFF44CA04D74B0283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:4e:e2:8e:f7:9a:c0:5b:84:60:92:8d:15:
                    75:f7:ef:73:57:f6:00:55:6f:d7:49:38:ba:14:00:
                    c1:10:3d:b0:b9:85:3a:18:ef:a9:95:21:5d:fd:84:
                    f2:86:15:b0:fc:1e:52:9c:d3:9b:86:3a:69:08:01:
                    f8:13:89:da:59:7c:35:96:f5:42:29:19:6f:93:16:
                    bf:ad:fa:e0:8b:12:67:17:a3:56:33:68:9f:cd:77:
                    93:77:0a:7f:3b:b9:3c:48:ac:2f:3a:0f:aa:db:28:
                    1d:dc:92:63:e4:22:d6:92:52:6f:cb:1c:a6:35:6f:
                    97:f9:c5:30:cf:82:c2:10:1d:53:cb:76:d3:33:06:
                    04:81:5a:7d:49:4f:25:7f:f4:b5:27:b4:70:3a:0c:
                    fc:b0:59:c4:8b:d4:1c:70:9e:28:56:3d:83:d6:8c:
                    fc:35:08:ad:58:74:41:c3:83:b2:05:63:72:64:99:
                    61:eb:96:68:9f:8c:66:01:a3:4a:b4:a5:00:de:b9:
                    58:54:f5:80:1f:d7:8a:e4:e5:68:4a:cb:e4:53:be:
                    60:df:0b:70:49:f1:6d:bd:13:6d:26:b7:e8:ad:9d:
                    79:fc:5c:1b:1d:72:e5:a0:59:9f:9a:3e:a9:5a:2e:
                    e8:5f:bc:dd:d4:96:cf:77:ca:ad:3d:13:e3:f6:4a:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:4D:D6:2D:1F:38:56:2E:DB:4E:2C:FF:44:CA:04:D7:4B:02:83
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/iuRN1i0fOFYu204s_0TKBNdLAoM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.112.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b4:38:8b:c6:04:78:78:ca:a4:9f:ac:80:00:ab:39:00:58:c9:
         8c:a3:b9:96:31:7f:0f:41:ad:2b:1e:1c:f8:8b:5a:28:c2:75:
         60:b4:b8:68:f5:bb:73:64:c4:eb:b2:8c:34:49:02:c9:0c:6f:
         47:47:f0:83:06:c8:33:74:02:2e:78:71:51:fd:a2:4e:76:d6:
         56:3b:e2:56:f7:57:7b:d5:e9:8c:76:3e:8c:e0:73:6f:b0:be:
         e8:49:cc:ab:d8:b0:62:ae:54:ee:cc:5e:c8:f9:f6:bf:ab:26:
         84:7c:59:e1:da:2e:b4:1d:7b:cc:12:12:b8:a9:8d:c9:13:b4:
         ee:6d:77:a5:47:ef:a7:6b:9a:76:84:ef:c0:e8:af:42:f4:37:
         08:4e:55:84:dc:9a:7f:4e:86:90:da:0e:a6:59:00:c3:d1:83:
         03:11:3b:e5:01:58:fd:50:80:00:6a:bf:08:3a:70:a9:6f:b2:
         2b:c8:95:5e:64:ad:f6:df:22:53:bb:de:4a:fd:62:4e:05:28:
         10:01:fb:eb:26:d1:17:80:de:77:e3:15:7c:cf:f0:a8:21:0e:
         12:76:c2:f2:be:b1:e7:14:45:87:66:b4:76:ea:1c:2c:1e:8e:
         e1:49:27:4f:be:00:8b:a4:3b:05:9b:56:18:24:c1:4b:6f:a6:
         71:76:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org