Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ivC4CaYJegVtyB6YrBBGB5pTGyk.roa
File:                     ivC4CaYJegVtyB6YrBBGB5pTGyk.roa (raw, json)
Hash identifier:          r3BggNRpq09X+u3PBPl0799kTiuVBIIxsqMp2w7N5n8=
Subject key identifier:   8A:F0:B8:09:A6:09:7A:05:6D:C8:1E:98:AC:10:46:07:9A:53:1B:29
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       A0
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ivC4CaYJegVtyB6YrBBGB5pTGyk.roa
Signing time:             Sat 05 Jun 2021 03:47:33 +0000
ROA not before:           Sat 05 Jun 2021 03:47:33 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        180.0.0.0/10 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:33 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=8AF0B809A6097A056DC81E98AC1046079A531B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:25:91:b4:af:62:51:2f:b7:41:29:c6:74:
                    d3:dc:3b:e3:6b:7a:a4:53:2b:ae:b1:c0:55:49:45:
                    cf:a7:27:33:ec:b5:5a:f4:12:7d:af:3f:bf:a3:cc:
                    84:f9:86:1e:20:cf:0c:db:4a:4b:3a:1d:a8:b0:64:
                    f6:e5:b4:14:32:bb:2c:fe:b5:e0:e7:52:0e:a1:53:
                    3d:36:7f:df:54:ce:b5:4c:9c:8e:af:1b:0b:d9:8d:
                    f2:03:16:94:85:1a:d9:75:32:85:7a:c9:3b:92:5c:
                    3c:f0:1c:6c:13:7f:5e:57:f5:96:0c:78:2a:a6:99:
                    d6:02:c6:19:d0:e6:76:6d:77:ca:9f:03:73:09:bb:
                    04:6a:47:73:68:1d:42:65:83:93:4f:8d:fa:19:e8:
                    82:df:b7:f5:00:62:8e:87:d6:6c:26:89:5b:25:a0:
                    e0:ae:4e:00:4d:d5:17:05:ba:52:ec:4c:d7:b2:85:
                    b5:52:07:98:0f:cb:a8:6a:c1:e7:93:77:28:02:66:
                    07:83:ad:cc:5a:f5:7a:36:45:91:3c:1e:ce:30:e6:
                    b1:9b:35:c1:8a:2d:d6:3e:09:e2:1c:e6:20:1a:cd:
                    cd:56:a7:d1:54:d7:d8:ba:25:c6:3d:9a:a2:5b:bb:
                    3f:bf:7c:96:91:d3:cd:2e:1c:04:a2:73:89:5f:9f:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:B8:09:A6:09:7A:05:6D:C8:1E:98:AC:10:46:07:9A:53:1B:29
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ivC4CaYJegVtyB6YrBBGB5pTGyk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.0.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:6b:14:3e:c6:70:f2:df:5f:e8:b8:bd:ab:49:2c:97:2c:
         8e:e1:4c:97:b9:46:95:84:8b:dc:d9:4d:94:94:66:df:f6:98:
         36:73:4f:63:cd:fa:64:f6:c8:a9:c0:8a:f3:82:c3:5f:61:a8:
         3d:64:6c:ff:c2:28:58:7d:c6:bf:59:6c:84:5c:ed:be:60:89:
         7c:75:04:a2:bd:31:e3:9a:d9:dd:37:c0:08:86:11:f4:01:a0:
         a2:77:12:6f:66:9e:29:d3:74:62:66:7a:6f:f2:90:6b:f5:f5:
         a9:78:02:d3:de:ca:a2:9a:c6:14:3b:5d:84:b1:5b:0b:71:a1:
         40:cf:e1:b6:20:83:fd:22:1d:a8:da:30:c2:6a:d6:dc:4e:ef:
         9f:ca:4b:ec:f3:fb:bc:0c:54:d3:28:2f:d5:e1:11:d9:92:88:
         49:6c:b1:c3:02:d2:72:c9:dd:a6:1b:e4:9b:5a:d0:25:0d:ee:
         f8:9d:bf:8a:d3:d4:14:05:5b:bb:7d:82:93:73:a1:92:b3:a7:
         4a:b4:c0:1e:17:e6:a1:b0:3c:51:78:b3:21:e4:c5:76:1b:b7:
         42:9b:82:a2:32:78:0d:73:c2:0c:bf:41:59:8e:01:aa:82:60:
         43:63:81:e6:64:8f:1e:28:02:54:5f:1d:2b:43:7f:b9:1c:fc:
         ee:3e:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org