Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa
File:                     k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa (raw, json)
Hash identifier:          Q3S1XxDuMHLpcz1yC1v+l+xdyWuOd4ZkpqQOGbjYs6E=
Subject key identifier:   93:CF:B0:FB:86:97:84:5F:59:D2:2A:ED:75:22:6B:08:82:B5:16:A3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       99
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa
Signing time:             Sat 05 Jun 2021 03:47:31 +0000
ROA not before:           Sat 05 Jun 2021 03:47:31 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        218.44.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:31 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=93CFB0FB8697845F59D22AED75226B0882B516A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:58:a8:26:f4:e6:aa:44:0f:d5:ed:85:af:
                    92:00:83:23:81:3c:d1:ec:05:1c:10:41:b6:f8:c6:
                    f0:11:cf:fa:68:43:25:81:3f:3a:f3:7a:ea:c8:f0:
                    e1:24:4f:bf:bc:68:2e:e2:9b:f7:46:c8:0e:48:c1:
                    cb:78:5d:6e:0d:1d:62:96:52:e3:bd:dc:d7:54:ca:
                    0d:74:48:5c:a7:e7:c7:02:3d:b4:c0:7c:7b:c5:56:
                    5a:7a:86:33:00:bd:12:d2:2e:24:df:a8:1e:0f:70:
                    0b:10:dc:99:64:c4:f0:28:ed:95:d8:a2:86:d6:07:
                    56:6e:33:57:e4:f0:4d:e8:6d:14:8e:79:d2:ae:a6:
                    f4:a4:e0:6d:7b:73:2d:cb:b8:ea:69:b1:49:48:26:
                    c3:37:47:13:fc:33:90:37:9e:e7:ac:6d:c7:aa:dc:
                    da:6f:2e:63:53:74:c1:6c:88:70:26:9d:8a:90:fc:
                    f4:0e:8e:5b:ad:24:5c:50:e0:35:8d:b8:e4:31:53:
                    ed:b5:13:01:47:99:5b:88:c2:84:f4:71:ef:62:5b:
                    d6:d8:22:85:6f:43:3f:33:5e:1c:a0:d8:d3:ad:1f:
                    26:4c:34:a7:ed:47:30:e0:1a:2e:8b:17:7c:40:fb:
                    ff:af:b6:e4:de:1a:b8:f1:8d:e4:30:89:75:d6:1e:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CF:B0:FB:86:97:84:5F:59:D2:2A:ED:75:22:6B:08:82:B5:16:A3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:06:b3:b8:0a:e0:8f:56:b7:66:3d:b6:a1:ef:5d:3e:d7:
         65:ca:99:2b:9d:e7:23:3b:72:92:16:22:2c:60:c1:29:c8:96:
         9e:d7:10:37:60:19:85:36:eb:91:4b:5d:86:38:09:d1:67:4d:
         f3:5d:6c:0f:3e:ac:28:df:53:c0:ba:5e:a8:c8:1e:82:ed:24:
         e8:10:7d:85:d2:e1:19:e6:c0:0a:f0:8c:17:d7:f9:55:27:13:
         b1:5a:37:8c:16:d1:54:13:25:f9:ef:81:9c:f9:11:2e:6e:32:
         ef:1d:6c:76:71:00:ed:7c:c3:d9:ae:97:33:c6:cd:ac:b8:06:
         81:1c:66:95:da:54:ad:c4:0c:25:cd:c3:14:75:86:d7:c4:8c:
         d5:ed:2d:a2:a3:10:45:ae:e0:fc:64:49:34:7e:96:62:0d:e3:
         d4:5b:99:f0:3e:c6:21:91:73:f8:55:89:4c:7b:4c:74:e1:49:
         68:07:24:2d:fe:56:d9:1c:01:6a:a9:4e:c4:5c:2b:0e:85:0a:
         5a:2b:fb:80:07:ed:43:26:5c:39:1b:d3:0f:6c:82:25:70:05:
         bd:6a:d0:94:cf:0d:b7:fb:e5:0a:c0:b4:71:51:db:4e:14:c9:
         ae:48:ae:1e:fb:90:0d:19:6b:91:c5:f5:e6:30:fc:17:06:aa:
         5a:0f:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org