Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/AlcuekuGr-t7RPU8FhEVPuyQ9S4.roa
File:                     AlcuekuGr-t7RPU8FhEVPuyQ9S4.roa (raw, json)
Hash identifier:          N3ZJFSnyKE/RvFPMlWiXPpGJv4udKS8tbEk07e6Oqn8=
Subject key identifier:   02:57:2E:7A:4B:86:AF:EB:7B:44:F5:3C:16:11:15:3E:EC:90:F5:2E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       C2
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/AlcuekuGr-t7RPU8FhEVPuyQ9S4.roa
Signing time:             Fri 01 Apr 2022 01:28:14 +0000
ROA not before:           Fri 01 Apr 2022 01:28:14 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        125.172.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:14 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=02572E7A4B86AFEB7B44F53C1611153EEC90F52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:7c:dc:6c:cd:50:fe:3b:63:b7:3e:23:6f:
                    86:5a:a9:3e:60:ac:78:95:a0:e5:13:be:2b:ea:0c:
                    65:4a:12:c1:b8:f4:b8:12:f3:c1:6d:3d:43:bf:d5:
                    f8:e1:9d:32:65:de:6e:86:26:1f:3a:3f:a8:aa:5e:
                    76:3b:1f:2f:3b:ae:2b:2a:57:50:a6:7e:09:51:9f:
                    38:09:42:50:6f:30:a6:59:48:0e:b6:f5:fd:d7:dd:
                    85:de:70:28:5a:8a:55:d8:a7:78:c3:3d:cd:70:c5:
                    08:ab:2c:12:3c:40:23:47:9d:fa:f4:bc:a9:aa:2c:
                    c3:57:a2:e5:3e:ee:27:be:09:61:10:42:52:5f:42:
                    f9:e2:d7:cb:19:a9:3d:6a:39:ef:bb:27:0f:98:23:
                    ad:30:94:66:e6:44:d6:1d:a8:8f:51:24:99:a5:96:
                    79:ab:94:c2:37:29:55:ca:de:bf:29:61:c9:de:97:
                    9e:7a:a1:61:a9:ee:19:3a:8c:99:42:a6:ff:e5:0a:
                    06:2c:86:20:f7:17:b7:0e:5a:38:25:01:4d:c8:4b:
                    77:1e:7c:06:fb:40:d7:e1:63:d7:8d:10:03:30:ae:
                    af:e9:9a:a1:7b:e9:4a:d0:3c:63:cb:ec:a2:33:66:
                    25:0e:30:7c:96:24:08:d0:8c:00:08:83:e9:79:00:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:2E:7A:4B:86:AF:EB:7B:44:F5:3C:16:11:15:3E:EC:90:F5:2E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/AlcuekuGr-t7RPU8FhEVPuyQ9S4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3d:24:6d:83:90:2f:a3:c2:60:74:e1:ca:3b:45:96:d7:f8:92:
         de:93:a1:e4:0c:bc:d3:ab:05:54:53:5b:5e:b2:f9:b2:3d:28:
         03:23:15:ef:a6:0a:25:a3:90:fb:e3:57:5b:26:a1:2d:a6:bc:
         4f:20:5b:59:b5:3d:91:b2:f6:3f:32:f5:16:a6:39:94:42:7c:
         6c:6b:51:8c:4b:f9:56:ed:8d:d7:54:2d:83:98:3e:8b:f7:7d:
         e5:ca:4c:e1:76:a0:e1:72:2e:df:84:0b:a2:6a:c2:fb:ff:34:
         6f:72:5d:2a:ce:74:8d:40:f1:db:b1:a9:58:6f:3d:ed:96:62:
         6b:ee:10:29:31:89:e8:73:71:cd:6e:00:9d:2b:6c:6a:a8:cd:
         07:52:34:f8:27:42:8d:67:71:cb:dc:de:74:ea:cf:42:51:7c:
         ea:29:c4:1e:d1:23:e0:0b:4e:3f:9f:99:12:75:c6:9b:28:2a:
         19:77:ad:c5:b9:97:31:59:7b:68:a3:e7:25:48:5f:88:c5:bc:
         de:44:14:24:09:73:af:88:2a:85:9a:e0:7a:73:e5:d4:a1:8b:
         79:1a:03:2d:86:88:80:3f:bf:1b:8b:43:f2:06:af:8e:b9:5d:
         e3:89:cb:93:09:95:f1:40:6f:09:6e:34:f4:ce:c5:ed:93:8d:
         56:64:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org