Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/8b-MMBVX9HU-z9uUPuUmvUn4b-s.roa
File:                     8b-MMBVX9HU-z9uUPuUmvUn4b-s.roa (raw, json)
Hash identifier:          SbcW/JHVYSurltYroCztnCuWq5HCdRMDex+AvXir7xU=
Subject key identifier:   F1:BF:8C:30:15:57:F4:75:3E:CF:DB:94:3E:E5:26:BD:49:F8:6F:EB
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       45
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/8b-MMBVX9HU-z9uUPuUmvUn4b-s.roa
Signing time:             Thu 13 Apr 2023 09:52:54 +0000
ROA not before:           Thu 13 Apr 2023 09:52:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7671
IP address blocks:        122.50.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: Apr 13 09:52:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F1BF8C301557F4753ECFDB943EE526BD49F86FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:f0:47:92:81:e7:f1:30:d5:f4:c5:88:d4:
                    eb:30:60:94:6a:33:69:04:04:81:94:fc:9e:a1:22:
                    58:e5:e9:3c:7f:79:81:e8:a6:96:dd:0d:8b:d2:95:
                    0c:5d:66:5b:30:06:be:ee:52:94:12:b5:47:ab:d4:
                    60:eb:52:63:1e:71:bd:21:db:b5:03:97:1a:95:bc:
                    66:ee:8b:a6:d4:66:56:80:53:d0:b4:16:2d:ee:c0:
                    9d:71:65:7f:23:0e:79:31:df:ba:6a:be:eb:6c:a8:
                    65:9b:60:aa:a6:49:66:bb:b0:31:d2:e7:2c:2b:32:
                    3c:55:c6:7f:81:ab:83:47:8a:40:1a:97:d8:d5:79:
                    9d:8c:c2:31:03:a1:b2:f9:42:c7:47:02:54:61:7d:
                    f7:ba:2a:27:e9:13:42:56:f1:90:3b:1a:8c:91:cf:
                    73:5e:82:4b:df:91:4f:98:a2:3e:47:fb:50:04:82:
                    b3:76:9e:5f:d3:91:39:9a:a0:af:00:0a:4a:6b:71:
                    5c:85:4e:b1:86:2b:d9:d0:be:a7:43:70:ec:b4:8d:
                    a5:c5:59:d5:18:37:0b:39:14:3f:ac:4f:04:9d:d3:
                    83:bb:fa:4e:42:ba:d6:03:e4:80:f7:60:79:2f:67:
                    d3:7d:47:c6:05:aa:82:41:fb:90:1f:5c:02:4c:43:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BF:8C:30:15:57:F4:75:3E:CF:DB:94:3E:E5:26:BD:49:F8:6F:EB
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/8b-MMBVX9HU-z9uUPuUmvUn4b-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:62:74:46:e9:53:4b:e5:be:cb:c7:33:bf:d7:9d:e1:54:ca:
         6f:9e:9e:8a:36:73:6d:df:4a:5e:03:93:5a:64:dd:9e:ba:f0:
         b5:ee:ec:bb:18:c0:f9:59:9d:8f:d9:49:da:f8:e8:ee:06:9e:
         93:ef:14:a9:e4:d5:05:de:80:08:9f:9d:2e:bf:e8:93:85:90:
         0c:c6:b1:2f:c4:d3:7e:29:d5:5e:73:c6:d9:02:d6:bf:a2:e2:
         ee:8e:de:ab:ea:34:9e:38:dc:91:ff:68:8d:85:ee:3b:43:68:
         f6:1d:41:b0:4f:0e:a1:13:45:ae:9b:78:79:df:92:f9:f5:42:
         fb:70:14:dd:2a:0d:30:a0:7a:77:77:5b:b6:9a:1f:60:8b:ea:
         30:9b:e3:8c:7d:fd:f5:a5:0e:9b:e3:eb:26:cf:89:13:65:3b:
         0d:0d:b8:03:7c:14:4d:b9:39:4b:4b:d1:3b:c6:b5:55:7d:bd:
         bb:2f:f5:29:ac:09:4c:f6:dc:61:02:c4:eb:74:59:ee:14:b0:
         58:d8:13:3d:50:47:25:82:03:7f:70:11:20:04:b8:66:6d:35:
         ba:5f:cc:46:0a:12:7b:3c:4b:49:bd:42:f9:22:a2:6a:e6:dc:
         b8:2e:91:ef:97:a3:f5:8a:02:99:d0:df:aa:18:b7:29:8f:ed:
         bd:2d:c0:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org