Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/1NbCMi3YEyxG7oho-ZAk5Id4MeQ.roa
File:                     1NbCMi3YEyxG7oho-ZAk5Id4MeQ.roa (raw, json)
Hash identifier:          zponupQt1s4NVgW2q+DQ2p/KU9FDZR+ld0HTFFgaX9E=
Subject key identifier:   D4:D6:C2:32:2D:D8:13:2C:46:EE:88:68:F9:90:24:E4:87:78:31:E4
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       F6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/1NbCMi3YEyxG7oho-ZAk5Id4MeQ.roa
Signing time:             Sun 01 May 2022 01:31:07 +0000
ROA not before:           Sun 01 May 2022 01:31:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        121.112.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=D4D6C2322DD8132C46EE8868F99024E4877831E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:8e:06:38:6b:05:a0:f1:7c:8c:74:3d:dd:
                    79:2b:c8:38:94:21:49:f6:6f:da:f4:39:fb:b3:fc:
                    8f:c1:fa:f5:43:36:18:7b:5d:cf:09:8c:3f:27:28:
                    fc:d8:0f:a2:dd:30:f9:7c:1d:69:b2:6a:2e:c5:ca:
                    5a:7c:37:0a:88:ed:be:9d:fb:cf:32:aa:34:0f:1e:
                    b3:e6:39:8b:e2:f5:93:eb:80:11:cb:bc:b3:ff:b1:
                    a5:1e:18:eb:01:82:5b:d1:ac:0b:e9:34:61:68:96:
                    2c:52:e3:7f:46:ef:1c:3c:21:af:57:9c:5d:a9:62:
                    3e:c6:0d:ba:18:b1:0d:f9:fd:eb:b5:46:8c:2b:a0:
                    8e:95:ef:d0:85:7a:e7:c7:50:3e:cd:30:c5:d8:a7:
                    e2:74:cb:94:74:52:9e:de:41:39:90:29:81:33:fe:
                    3c:89:6b:b2:f8:c9:96:f7:bf:56:fa:ec:9e:df:c6:
                    0c:9c:b7:46:4d:95:08:d8:2b:e5:d5:5b:5f:09:82:
                    00:3b:f4:68:34:11:8b:a3:a9:45:f1:95:11:cb:eb:
                    18:2c:56:e8:78:ee:ba:8a:f5:77:66:b0:ae:ae:94:
                    52:af:d9:e4:20:43:ce:01:d7:85:93:fe:27:c8:bf:
                    d8:57:e9:9e:6a:2a:cb:d5:67:ae:96:4f:42:91:da:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D6:C2:32:2D:D8:13:2C:46:EE:88:68:F9:90:24:E4:87:78:31:E4
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/1NbCMi3YEyxG7oho-ZAk5Id4MeQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.112.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:ee:97:ac:a1:b1:bb:8e:7d:05:e5:a5:ad:ff:2e:de:40:
         be:95:53:60:85:8d:bf:af:1e:4e:74:dd:bc:f8:0b:da:48:ed:
         46:63:f5:b9:9a:4b:43:c4:9e:32:e8:4d:42:aa:2a:07:fe:f5:
         72:e0:85:2c:2d:68:04:2e:a0:b8:ad:7b:2e:25:8e:96:a7:f6:
         14:e9:c6:c3:39:fe:28:07:e6:30:e0:ef:16:49:f4:69:b4:d8:
         92:c7:62:a5:c5:29:a9:09:1b:6c:d5:c6:60:a8:c2:c9:84:23:
         8e:a1:01:1e:d7:9a:48:a6:08:3b:8b:ee:76:9e:8b:94:0c:26:
         0f:5d:ff:12:13:1e:23:8b:5d:f5:f9:0a:3b:d7:92:47:5b:23:
         42:e4:cc:f1:53:a3:83:bf:82:12:c8:e5:bf:40:2e:44:45:db:
         f7:92:2e:74:69:29:2c:5a:73:3d:14:f2:fe:ed:0a:33:5a:3b:
         6f:2a:f8:88:ae:4e:4a:ef:fe:b6:b7:4a:43:60:86:3b:c5:d1:
         43:2b:f7:87:97:3f:6b:24:a7:fd:1d:8f:fd:6d:1b:3c:21:7b:
         86:1c:84:d7:e9:e0:e3:0c:e4:bc:48:4e:8b:5e:4f:0d:b4:ca:
         f6:a6:25:be:a5:ee:ae:60:cf:f2:ca:a8:b7:20:b0:61:08:3b:
         20:9c:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-ams.rpki-client.org