Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/8Tp-K4fGlEXoYRhRzE2__Z-Hm0s.roa
File:                     8Tp-K4fGlEXoYRhRzE2__Z-Hm0s.roa (raw, json)
Hash identifier:          lcot2DaRCjkDLV7GYq0eWcCXPtuoTjEmI1ZPoZyKIBo=
Subject key identifier:   F1:3A:7E:2B:87:C6:94:45:E8:61:18:51:CC:4D:BF:FD:9F:87:9B:4B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       EC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/8Tp-K4fGlEXoYRhRzE2__Z-Hm0s.roa
Signing time:             Sun 01 May 2022 01:31:03 +0000
ROA not before:           Sun 01 May 2022 01:31:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        211.16.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=F13A7E2B87C69445E8611851CC4DBFFD9F879B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:8f:3e:91:8e:90:73:05:83:85:c8:22:8e:
                    cf:63:89:b2:0e:3d:fa:28:ad:6b:be:6d:36:4c:35:
                    23:58:ce:2d:61:87:32:ed:6d:49:7d:27:e6:0a:2b:
                    36:f9:73:ab:49:26:45:52:be:69:32:a6:7d:c7:ee:
                    e7:11:81:ee:d2:ba:0c:21:dc:88:31:43:c8:33:8e:
                    19:bb:8d:f8:09:9a:b2:ce:4f:dc:9e:69:2e:ce:d1:
                    da:72:31:47:62:63:ff:47:fc:90:f3:66:f6:bc:d2:
                    0f:6f:68:bb:61:63:99:ea:3a:28:c9:d2:a4:7d:9d:
                    35:96:a3:6a:b4:27:7a:46:59:1c:af:7e:0c:ea:7b:
                    53:80:56:4f:9d:89:7b:82:bc:3d:85:e4:e3:35:9c:
                    38:42:a9:0b:62:89:2d:e0:74:a8:58:2f:0c:c2:bb:
                    1e:fd:3c:2a:3d:27:d4:d4:78:ad:ce:be:ec:36:3e:
                    2b:55:91:69:43:7a:3c:94:4e:dd:a1:25:a5:fd:d9:
                    fe:37:43:9c:6d:b6:43:2f:64:a7:a2:31:c2:be:0e:
                    9b:6f:77:26:a2:a8:a2:03:dd:83:d4:34:59:ed:a4:
                    18:a6:53:32:08:72:c3:58:c8:38:1b:54:6b:5e:4c:
                    28:9b:0f:c0:de:32:8b:9c:c0:ac:14:68:44:2e:e6:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:7E:2B:87:C6:94:45:E8:61:18:51:CC:4D:BF:FD:9F:87:9B:4B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/8Tp-K4fGlEXoYRhRzE2__Z-Hm0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.16.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c9:d2:c7:35:02:58:c4:66:95:bc:fe:f8:09:b0:35:1a:cf:21:
         66:ba:2a:ff:c4:97:bb:35:eb:b3:3e:ae:f9:61:34:50:a5:a8:
         6c:11:35:dc:c9:2d:2e:e5:d7:90:ba:32:99:44:83:c6:58:25:
         5a:5b:23:85:c7:af:fc:69:65:1e:27:b3:46:b4:ff:15:34:1f:
         9b:57:76:37:6f:69:55:54:6f:e3:37:7e:a2:b1:b5:05:f3:55:
         9d:85:e3:3d:2b:5e:c8:2d:45:41:d9:2c:ed:f6:49:52:c0:4d:
         60:ce:16:d7:fd:4f:6f:5c:36:81:2e:8d:80:bb:f5:ef:a7:cb:
         1d:db:32:e1:ca:19:6b:c3:18:95:0f:65:b7:06:dd:d6:20:2b:
         f5:3a:5d:af:33:bf:d9:e2:b2:de:d9:aa:73:0b:44:ca:17:e1:
         c6:19:03:9c:92:ce:88:86:4c:71:17:39:88:d4:27:65:75:d7:
         5a:35:54:5a:63:a4:fb:50:ac:c1:fb:55:31:a5:4a:64:14:a9:
         a2:99:eb:aa:43:df:1a:6b:86:5f:72:69:87:c3:e1:3f:2e:c6:
         7c:42:8a:19:8c:b2:b2:86:03:3e:59:78:60:ab:7a:3c:59:84:
         6d:96:bc:3e:a9:b9:fa:a0:a2:3a:27:9f:06:74:e9:39:71:5d:
         d7:77:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org