Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/oOqi2fElVn6Vjq671P5PqhUWfX4.roa
File:                     oOqi2fElVn6Vjq671P5PqhUWfX4.roa (raw, json)
Hash identifier:          24hNWbOAPwZc9M7+zXuNM1HeBvR/QpDUzDq/skYXc2A=
Subject key identifier:   A0:EA:A2:D9:F1:25:56:7E:95:8E:AE:BB:D4:FE:4F:AA:15:16:7D:7E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       012F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/oOqi2fElVn6Vjq671P5PqhUWfX4.roa
Signing time:             Fri 05 Aug 2022 04:50:43 +0000
ROA not before:           Fri 05 Aug 2022 04:50:43 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        211.0.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:50:43 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=A0EAA2D9F125567E958EAEBBD4FE4FAA15167D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:ad:31:d2:21:3c:1b:fd:a6:61:7c:7a:5c:
                    50:19:87:60:fa:6a:2c:ee:67:cf:cc:cd:fb:d7:d6:
                    50:04:c2:bb:32:46:6b:b9:44:d2:4f:58:1b:ce:ba:
                    29:72:f1:db:79:df:ae:51:e0:4b:b7:d0:27:6d:e4:
                    73:c2:f0:fd:6f:b2:e0:b8:ae:fc:96:2b:e3:ec:4a:
                    a0:aa:0c:18:b9:71:e6:e2:0f:a3:80:f6:44:6c:51:
                    c4:8a:9f:8d:63:23:08:d0:70:eb:a6:80:91:61:a3:
                    6c:2a:5a:bb:14:4e:fd:81:c6:df:f4:e6:a6:be:e0:
                    24:b9:b4:18:5e:3f:73:1d:7e:63:97:e3:2c:83:9f:
                    bf:dc:d9:8f:77:93:b2:7d:49:fb:21:62:46:62:67:
                    fe:7b:1f:85:f6:c7:4f:0e:ee:b0:57:a0:3f:84:42:
                    b8:bf:0c:1d:d4:81:0f:99:46:86:ac:b4:83:1e:55:
                    ee:80:0f:c4:f8:55:51:83:14:5a:bb:e3:92:b4:6b:
                    f7:3f:93:1a:03:c2:3d:78:f6:89:ba:5d:6b:0a:ef:
                    b3:94:83:cc:b5:dd:29:ff:c6:67:b9:f1:67:6e:8c:
                    1d:1a:71:09:07:44:12:e8:c6:60:84:2d:64:48:c8:
                    31:9c:6a:71:a5:46:f5:48:a9:c9:9c:1b:46:43:00:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:A2:D9:F1:25:56:7E:95:8E:AE:BB:D4:FE:4F:AA:15:16:7D:7E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/oOqi2fElVn6Vjq671P5PqhUWfX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:8c:a3:38:a7:04:bc:5a:65:bd:9e:1d:8a:1a:c0:21:60:fa:
         68:7b:6a:ae:10:22:79:e9:c7:35:9c:19:3a:fd:8c:11:02:2c:
         7e:f3:2f:ec:24:cd:01:04:2e:d3:14:cb:81:4a:61:84:97:3c:
         a8:28:b7:c0:7f:ee:cc:be:e5:8f:9f:a9:42:24:76:7e:eb:ab:
         21:e6:3a:a3:4a:08:d7:06:d4:6e:32:40:82:d3:98:1c:60:8b:
         68:4c:43:d3:a1:de:7b:42:1b:f1:70:57:29:15:f5:d1:37:30:
         15:11:61:e0:c6:9b:ae:07:91:57:79:23:1f:47:c5:30:ff:e8:
         8f:4b:84:17:6a:24:cb:60:35:ae:cf:6b:18:44:7a:93:2f:15:
         5b:93:75:ce:0c:72:85:3d:21:cb:4c:cf:ed:ec:0b:01:91:c3:
         7f:f4:a3:0b:8b:f6:94:5c:b2:23:1b:55:d0:b1:94:60:54:9d:
         32:92:c0:29:99:2b:eb:e6:a9:9f:62:6c:2a:cf:9b:57:52:96:
         30:d0:20:a6:1f:09:ca:4c:79:71:b2:a6:d4:d2:c6:43:c6:8f:
         e2:70:8f:bc:e2:c5:34:fc:d9:56:cf:c5:fa:31:6d:3c:f9:b0:
         fb:fa:f1:c4:80:5d:6f:d3:7a:8a:41:ec:2b:ec:86:44:ea:e3:
         24:07:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org