Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/kG8o4u2-cs6Dq-uBW6R4hAvqQFg.roa
File:                     kG8o4u2-cs6Dq-uBW6R4hAvqQFg.roa (raw, json)
Hash identifier:          f7h89dfqXY9XnHzsGf89ogHVDamDsre0qduWkeA6Ug8=
Subject key identifier:   90:6F:28:E2:ED:BE:72:CE:83:AB:EB:81:5B:A4:78:84:0B:EA:40:58
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       016A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/kG8o4u2-cs6Dq-uBW6R4hAvqQFg.roa
Signing time:             Mon 01 May 2023 01:30:24 +0000
ROA not before:           Mon 01 May 2023 01:30:24 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        153.192.0.0/11 maxlen: 11

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:30:24 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=906F28E2EDBE72CE83ABEB815BA478840BEA4058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:75:57:88:02:10:13:8b:a3:43:6b:4b:70:
                    48:4d:cf:4b:79:7d:d0:a1:b0:2c:f3:6f:e0:1e:34:
                    cf:5b:e8:fc:ef:b8:a7:6e:3e:66:7a:a7:e8:8b:72:
                    47:d8:e7:61:bf:a5:63:3d:59:2e:57:e1:24:33:27:
                    18:61:3e:77:be:b1:7b:c5:46:52:d5:3f:ea:6f:0c:
                    5b:39:a2:c7:bc:70:c2:7b:d8:54:6f:19:2d:71:0e:
                    34:71:49:0b:89:e2:22:19:74:49:82:1e:86:9d:af:
                    fc:3a:4d:ae:72:93:01:52:c0:14:28:c1:4f:71:3b:
                    57:c3:2f:fa:b8:40:dd:7b:af:cf:22:7f:01:03:82:
                    76:1c:85:d5:62:95:b9:6d:30:0a:37:4d:d1:76:62:
                    70:f0:8e:50:bb:9c:a7:54:a8:5e:c2:cd:2c:21:54:
                    c4:61:15:f5:59:b9:81:da:f2:f3:57:e0:87:5b:ad:
                    d8:8c:a5:db:c8:1a:b6:52:cc:e2:73:26:08:49:7b:
                    1d:db:76:09:28:02:81:6e:ce:be:9b:be:a7:1d:5a:
                    64:02:b1:21:cb:5d:fb:65:bb:4f:ca:6a:2a:7f:e1:
                    cc:6e:2b:10:6b:f1:92:82:de:eb:ea:f2:66:95:68:
                    65:62:9b:7b:d5:b0:61:8c:f7:63:75:7c:97:b2:d8:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6F:28:E2:ED:BE:72:CE:83:AB:EB:81:5B:A4:78:84:0B:EA:40:58
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/kG8o4u2-cs6Dq-uBW6R4hAvqQFg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         75:87:0c:58:7f:e9:a8:37:f7:c2:d3:f2:15:f7:75:a1:92:20:
         0c:70:02:9b:4a:d4:18:31:45:27:52:77:7c:95:35:c3:5e:3b:
         73:41:ca:d0:0d:6c:8c:18:52:9f:5e:35:0c:f8:ff:37:da:39:
         42:87:1f:0d:3a:27:80:ca:bd:df:e0:c9:6a:e6:e0:b6:55:73:
         16:4a:09:17:3e:15:b4:14:13:3e:2f:c9:9c:d0:30:d3:7a:56:
         ad:09:59:e0:6e:9e:00:4c:12:7e:69:69:29:1a:2c:8a:9d:bd:
         3d:04:12:b3:b4:16:ef:47:85:61:76:32:53:32:7c:35:70:10:
         d7:42:7e:a9:3d:41:2c:82:48:bf:ed:b7:33:94:1a:ff:09:e8:
         63:a7:60:92:e1:9e:c9:00:aa:4f:9d:ca:c2:9e:60:00:da:68:
         20:4a:41:b6:3c:da:3b:27:04:94:a3:ad:db:4a:83:11:b3:9c:
         35:66:cd:b9:1a:df:3c:e4:26:6e:d7:5b:a2:84:53:3a:9b:b2:
         9f:1e:90:bf:01:be:b6:b0:6b:5e:ba:db:e8:aa:d4:26:dd:92:
         22:bb:dd:a9:42:31:4d:c1:3a:2e:8f:cb:c4:a3:bb:59:1b:7e:
         04:3c:54:aa:94:99:32:0f:43:fd:6f:f1:5e:1e:11:cd:cf:e3:
         60:ec:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org