Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7OlsazFZ35-l2_QalwlyT32KpO4.roa
File:                     7OlsazFZ35-l2_QalwlyT32KpO4.roa (raw, json)
Hash identifier:          /5dbTxL+rZLtfLSCRuDw3dwRcAfXBEBM4Uluk32DxCc=
Subject key identifier:   EC:E9:6C:6B:31:59:DF:9F:A5:DB:F4:1A:97:09:72:4F:7D:8A:A4:EE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0139
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7OlsazFZ35-l2_QalwlyT32KpO4.roa
Signing time:             Fri 05 Aug 2022 05:04:46 +0000
ROA not before:           Fri 05 Aug 2022 05:04:46 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        218.47.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:04:46 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=ECE96C6B3159DF9FA5DBF41A9709724F7D8AA4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:9d:14:61:f9:9e:5e:21:68:d6:00:db:54:
                    38:71:43:bb:ac:8f:0c:ea:8d:33:4c:99:d1:f6:f0:
                    cd:e2:51:c4:fd:00:aa:ca:4c:0f:f2:a3:5c:a6:c3:
                    34:44:0e:c9:64:47:89:f2:93:e3:21:ad:ba:a1:f9:
                    68:32:f4:c6:9c:4c:22:af:34:a8:f1:50:61:3e:7a:
                    40:0a:48:e3:80:97:3e:a4:4b:98:5d:45:60:37:a6:
                    d3:e8:a4:7e:99:c6:1a:6c:c4:10:5c:5b:9f:1e:0d:
                    4e:7e:ee:e7:a7:74:aa:26:db:60:25:b2:47:0a:c8:
                    52:a9:36:12:91:46:17:e4:64:93:7d:13:5a:a2:71:
                    53:b4:66:1f:8e:23:c8:f9:3e:19:2d:b4:e6:28:60:
                    f9:b9:1b:dd:f2:31:5c:c8:d7:8a:c7:55:d9:20:c4:
                    c9:28:4d:86:75:b8:eb:f9:24:82:a2:66:46:2a:78:
                    28:67:59:70:f1:7a:06:48:07:1e:fa:a4:77:cb:99:
                    24:31:a4:a0:b1:be:01:3c:22:70:e9:13:e7:5d:5e:
                    de:9b:09:d0:c0:8f:cf:a8:7a:ae:d7:6f:23:21:4e:
                    b3:97:1b:1d:30:09:c4:a1:d0:37:ac:c2:93:14:40:
                    23:81:b3:8a:61:a7:e4:58:71:59:3b:72:cb:de:a1:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:6C:6B:31:59:DF:9F:A5:DB:F4:1A:97:09:72:4F:7D:8A:A4:EE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7OlsazFZ35-l2_QalwlyT32KpO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:7b:bb:74:4d:f4:8f:4f:87:14:46:a8:d1:29:3b:89:68:
         26:a5:5d:85:48:8f:ff:2c:65:29:0a:ae:f9:f6:71:22:f3:4c:
         47:bd:d6:8a:7b:32:84:d5:de:d5:69:58:d2:eb:63:c6:2a:ed:
         45:85:a3:02:b6:27:f1:bc:5e:20:e3:e7:9b:63:8e:7c:42:58:
         ce:58:34:15:4b:40:74:d2:82:cb:ab:f8:a7:f9:f2:11:db:0f:
         e2:5c:9c:8c:ea:93:dc:f8:f7:d4:39:8d:bb:ae:0a:2e:09:73:
         74:32:35:c5:fa:39:9d:de:56:dd:b6:4f:d6:5c:5d:68:63:7b:
         89:bf:44:fa:4c:af:39:9a:0f:9e:a8:85:b6:8c:92:46:f7:99:
         57:24:47:a5:5f:e4:54:1d:6f:42:90:d1:63:7e:b3:a1:e7:d7:
         52:d0:72:69:37:ff:3c:5b:c9:c4:b5:e0:21:d7:cd:c3:0b:4f:
         ce:eb:b7:24:7b:31:01:40:fc:5b:9c:6b:b4:af:1a:3a:ae:02:
         64:36:a5:b1:c8:3d:ca:e0:ad:d1:25:cf:56:de:88:9f:d0:78:
         8c:49:a8:56:cb:8b:74:af:01:3c:23:35:52:c1:b2:48:7e:6c:
         52:30:7a:a9:ec:ee:95:c7:a3:20:1b:22:23:1e:6c:79:50:e8:
         3e:88:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org