Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/HQ-DeFmmI_ZZCOd9o9IMe-qBBIQ.roa
File:                     HQ-DeFmmI_ZZCOd9o9IMe-qBBIQ.roa (raw, json)
Hash identifier:          yI1RdaBIx2R/Nx7BBtk6/IDYCIfp57s2x/kTfZ8yoaY=
Subject key identifier:   1D:0F:83:78:59:A6:23:F6:59:08:E7:7D:A3:D2:0C:7B:EA:81:04:84
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       013A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HQ-DeFmmI_ZZCOd9o9IMe-qBBIQ.roa
Signing time:             Fri 05 Aug 2022 05:04:47 +0000
ROA not before:           Fri 05 Aug 2022 05:04:47 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        219.114.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:04:47 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=1D0F837859A623F65908E77DA3D20C7BEA810484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:01:b6:21:26:17:20:d9:47:9a:50:78:b7:
                    eb:41:bd:a8:5e:c1:8b:d3:57:5a:e6:bb:33:d5:58:
                    7f:2b:5e:ae:5b:29:fe:2f:c7:57:cc:4f:79:e2:32:
                    fc:8c:47:11:9f:31:63:29:b6:52:52:fc:34:d6:64:
                    2c:ea:7c:32:ae:1e:b8:88:e2:9b:f7:ce:90:77:71:
                    54:18:a4:b9:ac:c4:4b:1f:72:29:da:6c:c9:49:ff:
                    2d:39:e6:98:01:53:9d:37:51:09:95:1d:80:6b:6d:
                    2c:76:d0:f5:09:77:b5:6b:e9:0e:20:44:ce:83:f0:
                    e6:9a:e3:f0:e8:6e:42:08:4e:ea:98:b7:f6:e0:8d:
                    fc:e3:5f:a5:99:2c:8b:85:df:3f:00:23:10:1d:87:
                    1a:c5:84:3d:31:0f:2f:ea:75:25:33:22:97:cd:9e:
                    ab:9c:66:75:a8:b7:61:05:04:9d:3f:4c:26:ca:c8:
                    be:dd:72:f4:ff:5f:14:08:94:1b:73:16:53:e4:d0:
                    de:9f:34:f9:53:25:5a:56:bd:ac:f4:48:ed:80:58:
                    f6:50:74:be:66:c7:41:74:14:12:ef:92:3c:a7:b4:
                    6f:ea:df:ae:be:c3:18:7a:fe:23:34:b6:57:1c:1b:
                    d1:f6:be:d5:14:3d:93:c5:b0:74:ef:85:02:63:c5:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0F:83:78:59:A6:23:F6:59:08:E7:7D:A3:D2:0C:7B:EA:81:04:84
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HQ-DeFmmI_ZZCOd9o9IMe-qBBIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:50:ec:c2:e3:d1:8b:db:8b:ef:ab:34:c3:c4:df:2c:f6:
         68:79:34:46:28:f0:f5:28:ca:b3:75:c2:93:95:07:b5:ab:f2:
         1f:c4:d2:44:9f:00:98:5a:ea:84:34:23:73:24:0a:99:9f:a5:
         98:61:e2:ed:2d:ed:b8:1d:e1:95:ee:b2:9c:37:7d:32:a9:13:
         d1:57:b3:7b:d4:32:29:00:86:53:a4:33:a7:dc:c8:b4:1d:9a:
         aa:66:14:3f:2e:2a:05:72:0c:6e:75:c0:16:25:2b:a8:8f:64:
         ab:83:91:b0:43:c3:36:5f:b5:fc:95:96:cb:8d:60:50:95:a0:
         77:33:72:62:ce:02:65:a7:38:22:68:ba:f7:16:32:be:15:79:
         07:fa:72:95:72:d0:94:d5:6f:3e:61:0a:43:eb:28:4e:70:ad:
         2b:f4:f1:b0:12:35:1f:33:bd:8d:5a:d7:dd:96:ae:c9:c1:89:
         46:00:4e:5c:aa:93:5b:2c:7b:69:f8:3b:48:8d:d5:e8:33:e3:
         c2:5d:3d:bf:a7:6b:e9:da:f9:ef:09:52:07:a0:3e:cd:96:81:
         b9:9a:e3:d8:de:76:29:f1:15:e7:79:e2:25:48:16:1f:01:2e:
         d3:6a:ab:6d:05:f9:50:58:a8:ce:40:71:90:f8:ad:ec:97:ec:
         c8:06:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org