Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/vHVgoOsxKWEp8i0gA90tGy-rnFs.roa
File:                     vHVgoOsxKWEp8i0gA90tGy-rnFs.roa (raw, json)
Hash identifier:          M6g/9CJit1CwgEI4+i2uJkySVOOVNvEKHv7sSIrwwTg=
Subject key identifier:   BC:75:60:A0:EB:31:29:61:29:F2:2D:20:03:DD:2D:1B:2F:AB:9C:5B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       BD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vHVgoOsxKWEp8i0gA90tGy-rnFs.roa
Signing time:             Fri 01 Apr 2022 01:28:13 +0000
ROA not before:           Fri 01 Apr 2022 01:28:13 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        211.6.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:13 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=BC7560A0EB31296129F22D2003DD2D1B2FAB9C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:30:ee:69:93:5c:e6:90:15:fe:d1:38:c1:
                    72:0f:16:7c:b8:3c:1c:09:bf:52:71:75:e9:fb:77:
                    7a:24:ef:b5:1e:7e:28:c2:0b:73:cc:b9:21:51:1c:
                    f4:f1:73:08:0d:91:a4:32:58:b9:cb:ad:cc:9d:a0:
                    21:17:2c:5a:df:0a:19:2a:ef:ca:35:bc:9e:4b:88:
                    49:0b:fa:85:3e:c6:22:69:b8:1b:e8:bd:68:e4:e2:
                    48:4c:e7:0e:10:8b:e6:66:ac:9d:cc:86:ea:3a:29:
                    58:3a:90:0a:ab:b1:ed:d1:77:49:0d:5c:63:21:c0:
                    31:03:68:94:71:9e:f7:09:96:00:a0:43:0f:69:26:
                    56:58:f1:50:f7:ff:56:9f:35:81:37:77:3b:86:01:
                    53:81:af:9e:93:1b:4a:f1:3d:35:52:16:d6:50:32:
                    c7:86:07:86:0c:c8:41:2c:64:bf:3c:dd:cf:a2:88:
                    0f:94:1d:65:f6:bf:18:ea:7a:e3:ad:ce:c9:c5:03:
                    7f:2a:5b:ba:75:a1:b1:4c:4e:90:bf:15:c8:d6:bc:
                    3c:a0:b5:b5:51:f1:54:a1:eb:c5:c2:48:b5:73:21:
                    0f:a9:00:d4:ba:b9:1d:74:e4:a3:5d:21:a1:52:2e:
                    ef:3a:2e:7f:8c:e0:56:a9:66:67:c8:a2:21:d0:71:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:60:A0:EB:31:29:61:29:F2:2D:20:03:DD:2D:1B:2F:AB:9C:5B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vHVgoOsxKWEp8i0gA90tGy-rnFs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:d6:84:ad:98:1a:d7:9d:d2:96:4f:48:a2:b7:2f:bd:8f:f8:
         3f:3c:6e:43:a8:86:9f:42:77:a9:77:2b:db:8f:ad:4b:5c:8d:
         d3:f8:31:6a:1f:5d:48:85:48:3f:ae:ee:61:07:bb:a4:90:aa:
         35:a4:ad:ef:17:35:a2:e5:55:3e:b7:4c:f8:f0:e6:b8:c6:c5:
         6d:30:cf:dc:55:5d:f3:fc:76:22:51:36:5a:a6:6f:12:1a:27:
         00:f9:f5:cb:af:06:ef:98:99:79:7e:88:0b:88:d3:c3:8b:31:
         53:b9:c2:43:7c:15:91:1e:92:c9:1d:9e:ef:eb:ec:d7:7f:88:
         3e:ff:3b:98:84:2f:1a:f0:98:f6:f6:7d:4f:5b:a3:79:eb:d5:
         4e:cc:88:f9:52:2c:e4:af:de:00:71:bf:7a:51:fc:28:90:18:
         ca:1c:a0:71:4b:25:fb:e8:65:38:35:e6:ee:25:0a:0a:9b:53:
         c4:8d:83:78:b0:e4:f1:e0:74:65:74:24:4a:76:ff:ca:2c:2d:
         15:b6:2b:80:a5:00:6a:15:9d:2e:5a:c0:fb:5d:de:8d:e1:a3:
         0e:83:db:9b:76:1f:c3:a6:2c:4d:a8:6a:ea:70:a1:fb:f8:d6:
         40:b8:af:63:61:6b:4f:98:ef:1f:d4:7c:45:65:a6:fe:44:06:
         0a:80:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org