Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/FsQD5ziI0tTN6mAYbFT4Cj_YhAM.roa
File:                     FsQD5ziI0tTN6mAYbFT4Cj_YhAM.roa (raw, json)
Hash identifier:          Wzfm5HS8U0i0gawzH3ICZY3/JbeqcRnmxBhN7z/uqog=
Subject key identifier:   16:C4:03:E7:38:88:D2:D4:CD:EA:60:18:6C:54:F8:0A:3F:D8:84:03
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       F4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/FsQD5ziI0tTN6mAYbFT4Cj_YhAM.roa
Signing time:             Sun 01 May 2022 01:31:06 +0000
ROA not before:           Sun 01 May 2022 01:31:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        180.0.0.0/10 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=16C403E73888D2D4CDEA60186C54F80A3FD88403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:14:e7:f9:29:4a:5d:c9:b9:ea:8c:db:b3:
                    36:f3:11:fb:91:28:31:cc:b1:4c:1b:e0:24:66:ae:
                    a7:1d:d2:7f:13:78:bd:44:25:c5:4d:73:f3:98:1a:
                    02:3b:e3:76:f2:f4:9c:ec:f1:ef:6c:0e:d4:c6:78:
                    fd:ff:05:33:fa:35:56:ff:8f:a9:c2:dd:e2:ea:31:
                    f3:d0:6a:7c:77:d3:5d:60:15:d4:d4:7e:12:2e:38:
                    7d:e7:61:d1:55:77:84:d0:02:fb:fc:d2:2a:94:e9:
                    c6:7d:53:ce:32:a5:1e:af:94:e6:c1:64:16:f5:9e:
                    f2:b7:03:1e:a1:24:5c:f3:b8:2f:d3:5e:94:7d:31:
                    ba:bc:44:db:9a:8b:bc:02:fb:75:ee:3d:64:70:17:
                    40:a4:ce:fb:61:61:0a:87:ed:53:e3:5a:6e:b5:71:
                    da:5b:ab:c1:7c:64:97:e3:f9:eb:12:72:e7:ce:11:
                    d5:95:0b:75:da:97:95:32:ab:af:ad:6a:d2:4c:2f:
                    e0:aa:37:f8:0e:fe:c4:30:9d:5a:3f:3e:9a:4f:21:
                    48:df:d2:70:cc:4b:c6:a7:52:89:2c:3e:85:c8:68:
                    e7:47:81:89:f0:78:05:7e:f7:59:a5:7e:c2:66:c5:
                    ab:11:3e:bc:2b:8e:c8:e8:f8:8c:93:cf:ab:ea:79:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:03:E7:38:88:D2:D4:CD:EA:60:18:6C:54:F8:0A:3F:D8:84:03
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/FsQD5ziI0tTN6mAYbFT4Cj_YhAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.0.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:61:69:ab:35:bc:b3:9a:06:05:dd:08:9c:5c:fe:ef:6c:
         23:84:d3:84:21:ce:29:fd:1b:96:3c:f9:d7:7a:7c:70:82:e0:
         03:a8:cf:dc:72:3c:9f:41:c3:32:1e:89:26:29:3f:9c:63:d6:
         31:84:d4:73:0a:a6:63:1b:00:54:53:39:4c:b0:e4:58:70:af:
         cd:04:c7:83:a0:a6:b2:5a:80:3a:e0:66:7f:8f:24:aa:0b:b2:
         74:6d:6f:71:f8:77:26:8f:10:37:6c:da:12:6e:aa:d3:ba:de:
         5c:51:93:36:16:a9:f6:4a:9a:39:ae:66:21:e3:bf:10:91:7f:
         a6:e1:d4:8d:68:00:0a:46:51:03:80:7a:7c:c7:1a:d0:06:a9:
         ec:81:02:e0:de:52:68:4d:dc:89:6a:1b:68:e6:8b:fb:4b:7a:
         9a:30:fe:fe:0e:a9:c4:0f:f8:d4:91:0b:24:ed:fc:c6:51:07:
         bd:91:f5:dc:bb:0a:3a:f5:83:af:2a:f0:26:7a:ec:ef:60:56:
         bd:92:51:3e:07:86:b5:4b:86:33:ee:be:ef:d0:6b:ce:6d:86:
         2b:c2:ec:a0:95:a9:3d:f9:e9:26:bf:4e:fe:0f:5e:b8:c9:d0:
         5e:99:be:6c:9c:06:ce:e9:e2:80:96:49:66:5a:94:a4:bd:44:
         ec:53:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org