Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/C9Cr2RNxQihpb3Jl2leBOaq1w1A.roa
File:                     C9Cr2RNxQihpb3Jl2leBOaq1w1A.roa (raw, json)
Hash identifier:          sW8HTR7hiZ3q2J3VsrOJEHC5N+AP1YUbnW1GZTsehaI=
Subject key identifier:   0B:D0:AB:D9:13:71:42:28:69:6F:72:65:DA:57:81:39:AA:B5:C3:50
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0143
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/C9Cr2RNxQihpb3Jl2leBOaq1w1A.roa
Signing time:             Fri 05 Aug 2022 05:16:49 +0000
ROA not before:           Fri 05 Aug 2022 05:16:49 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        223.216.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:16:49 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=0BD0ABD913714228696F7265DA578139AAB5C350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:e4:c9:b0:85:67:b5:34:17:5d:e1:4c:17:
                    b6:2e:23:d2:a0:9e:17:a0:e5:6f:05:58:40:aa:e3:
                    d1:01:95:05:e7:e7:02:ec:c0:55:e9:b9:00:e7:43:
                    68:08:c8:71:12:d3:2a:30:b9:05:4a:21:6d:f2:70:
                    8c:c1:31:81:cc:1c:4f:d0:68:9f:7f:5b:a4:99:ee:
                    43:b2:90:02:8c:fe:cd:2e:0b:05:46:77:6e:9b:4f:
                    e6:3b:2b:9b:52:b9:92:a4:d2:83:26:c1:74:49:f6:
                    0c:0d:fa:4a:0c:ee:2d:fb:eb:51:f7:aa:b5:79:11:
                    21:6b:be:3e:c1:f0:c3:9d:73:f3:38:73:c9:b4:a4:
                    b7:7c:b1:ba:5f:6c:a9:ea:15:83:d7:c5:f6:b6:0e:
                    5e:e8:8c:57:8e:f7:e7:41:b4:c4:51:11:bf:ad:5e:
                    2e:13:3a:de:cc:41:b3:dc:23:bf:db:b6:f3:f3:fb:
                    45:1d:1e:be:25:14:47:5a:56:35:4c:79:ac:cd:21:
                    e9:28:c7:19:69:00:2b:53:0b:d6:bd:a2:07:e4:f5:
                    3b:85:1a:67:a6:f5:15:d7:d4:20:f9:db:59:69:fe:
                    03:97:c7:d5:d1:5d:7f:1d:b8:c1:6a:f4:e6:23:b8:
                    42:3b:d3:31:ac:8e:b8:0e:4a:9b:3f:fd:15:c3:c6:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:AB:D9:13:71:42:28:69:6F:72:65:DA:57:81:39:AA:B5:C3:50
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/C9Cr2RNxQihpb3Jl2leBOaq1w1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:c4:eb:e3:9d:aa:dc:ab:f8:fd:6d:1a:f8:9c:f2:57:11:
         0e:1f:e5:78:11:09:df:cc:2c:b9:f8:11:01:4b:c4:f0:e1:5d:
         a7:6c:c8:ab:ec:a8:55:b0:34:35:16:86:21:1e:45:d9:c8:93:
         99:6b:09:35:fe:b2:84:23:52:00:39:cf:85:bf:3d:25:2c:b4:
         a0:2c:71:aa:d8:93:8a:24:ad:d4:73:4a:54:3a:0e:51:44:35:
         bf:90:57:4c:87:6f:83:8f:ef:eb:5b:58:44:41:ea:61:83:12:
         9e:fe:21:b2:43:ad:fb:5b:9e:b7:f9:20:5c:8f:87:db:9f:d1:
         7a:d4:4c:e6:52:81:33:6e:9e:9c:4c:b8:61:17:30:cb:b8:0a:
         92:a1:5a:9f:5f:e6:d5:21:e6:dd:c8:13:06:99:43:a6:93:25:
         1e:98:9b:67:fa:82:08:44:97:92:cb:d7:59:d1:92:22:b7:65:
         c8:41:44:28:3a:c4:bb:b0:9e:c7:df:de:02:72:7a:64:3d:ed:
         ca:05:f1:0e:fe:6f:4b:9b:e9:27:fd:6f:17:e0:3d:43:81:9b:
         f1:fa:88:67:f7:fd:b6:74:54:38:d5:18:d6:91:5e:f5:85:d9:
         c8:67:61:fd:85:6f:bb:c3:b9:47:7a:3f:3f:14:2d:40:ae:9a:
         6d:21:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org