Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/HxVHzPmWMcXl5ONehNvYkKrDCi4.roa
File:                     HxVHzPmWMcXl5ONehNvYkKrDCi4.roa (raw, json)
Hash identifier:          FCPDqp17kWbIrnZAJNOrlNoph/5bgzoiZCq6be4sKzU=
Subject key identifier:   1F:15:47:CC:F9:96:31:C5:E5:E4:E3:5E:84:DB:D8:90:AA:C3:0A:2E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       7E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HxVHzPmWMcXl5ONehNvYkKrDCi4.roa
Signing time:             Sat 08 May 2021 04:05:43 +0000
ROA not before:           Sat 08 May 2021 04:05:43 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        124.96.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:43 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=1F1547CCF99631C5E5E4E35E84DBD890AAC30A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:0e:63:bf:0e:bf:6f:31:3f:59:cb:15:29:
                    54:eb:76:33:07:2b:7b:0d:75:34:70:a9:d0:19:87:
                    58:56:9a:bd:ed:26:8e:b1:19:df:b3:47:b7:04:c7:
                    ed:e1:ee:6b:ae:63:c4:9f:7e:3a:f5:46:09:57:81:
                    28:ee:6b:73:0a:6d:06:64:a0:b1:df:be:ce:d8:75:
                    0f:14:6a:53:9c:39:27:98:a5:74:2a:3d:8a:17:ad:
                    2d:a1:fa:18:87:ae:97:bd:7a:ff:c4:0d:fe:e6:f0:
                    80:46:45:d6:90:6d:68:b6:e7:b1:a2:8a:b4:d0:9e:
                    ee:85:ef:9f:bc:27:23:83:45:20:56:f4:2f:d8:c8:
                    95:e6:1d:34:b5:82:76:15:da:a2:5c:47:06:7c:43:
                    21:a3:0b:2b:60:ca:c4:3f:c7:f4:a9:90:86:53:55:
                    8a:6c:15:a0:94:a7:a4:3f:da:20:09:cf:03:70:5c:
                    09:4d:7f:f6:dc:04:83:d9:2e:38:18:98:dc:5b:99:
                    84:e6:1a:27:61:e4:a2:f7:fb:5e:91:56:65:76:dc:
                    45:89:5c:54:49:49:06:e1:6b:6b:24:11:a4:35:50:
                    3d:28:a1:d8:5e:e9:77:4a:17:5f:09:5a:79:d1:c8:
                    7e:e1:95:da:1b:9d:c1:eb:25:5b:ef:1d:97:93:4b:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:47:CC:F9:96:31:C5:E5:E4:E3:5E:84:DB:D8:90:AA:C3:0A:2E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HxVHzPmWMcXl5ONehNvYkKrDCi4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.96.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:d3:4a:fc:2e:87:bb:2e:40:10:5b:9f:ec:ec:6f:61:8a:
         b4:d1:6b:da:bf:69:de:5e:60:87:a8:29:e0:e9:12:3f:23:d5:
         fb:73:4a:8d:26:7a:cb:23:69:50:d4:06:ae:21:90:26:d8:e6:
         be:80:ed:4e:65:9b:9e:72:8e:94:72:75:6c:6e:3b:8b:91:e5:
         51:4a:7b:10:b1:f3:bf:26:93:14:6c:1f:48:3d:a7:c6:9a:e2:
         46:2b:94:6a:cd:c9:5c:59:93:3b:ba:17:91:38:b8:5d:37:ad:
         cf:5a:2d:99:1e:3a:e3:92:df:f3:c2:1a:e0:fb:9a:0e:08:fd:
         a0:63:63:0a:4f:fd:a0:3a:6c:df:e6:67:54:21:cd:6d:5d:12:
         92:3b:67:ec:a3:a1:fe:7a:1a:b6:51:53:97:6e:0c:46:01:39:
         7e:e0:a3:5f:c6:ee:3e:37:71:52:47:5e:6f:9f:8c:cb:29:a3:
         3a:be:95:5f:a7:91:b5:ef:12:ef:40:63:c6:cc:6c:2d:c7:ef:
         2a:aa:8a:d5:33:ef:1f:c9:e9:c4:f0:71:b8:fe:0e:33:81:46:
         a9:a8:aa:12:2f:e4:76:0d:4c:6c:2e:15:62:23:01:5e:f6:af:
         8b:9b:10:67:2a:de:6d:1a:96:b2:c1:17:b2:c6:c0:51:dd:c2:
         8b:73:7a:12
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRkMw
OTkyM0IwNUE3RThGMUFERDlBNTk4NEVEQzE5MzIwREI5NzRCMB4XDTIxMDUwODA0
MDU0M1oXDTIyMDQxNTAxMzAwMVowMzExMC8GA1UEAxMoMUYxNTQ3Q0NGOTk2MzFD
NUU1RTRFMzVFODREQkQ4OTBBQUMzMEEyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKGtDmO/Dr9vMT9ZyxUpVOt2Mwcrew11NHCp0BmHWFaave0mjrEZ
37NHtwTH7eHua65jxJ9+OvVGCVeBKO5rcwptBmSgsd++zth1DxRqU5w5J5ildCo9
ihetLaH6GIeul716/8QN/ubwgEZF1pBtaLbnsaKKtNCe7oXvn7wnI4NFIFb0L9jI
leYdNLWCdhXaolxHBnxDIaMLK2DKxD/H9KmQhlNVimwVoJSnpD/aIAnPA3BcCU1/
9twEg9kuOBiY3FuZhOYaJ2Hkovf7XpFWZXbcRYlcVElJBuFrayQRpDVQPSih2F7p
d0oXXwlaedHIfuGV2hudweslW+8dl5NLDRcCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBQfFUfM+ZYxxeXk416E29iQqsMKLjAfBgNVHSMEGDAWgBQvwJkjsFp+jxrdmlmE
7cGTINuXSzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lEYmwwcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lE
Ymwwcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMzEvSHhWSHpQbVdNY1hsNU9OZWhOdllrS3JEQ2k0LnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDA3xgMA0GCSqGSIb3DQEBCwUAA4IBAQBS
4NNK/C6Huy5AEFuf7OxvYYq00Wvav2neXmCHqCng6RI/I9X7c0qNJnrLI2lQ1Aau
IZAm2Oa+gO1OZZueco6UcnVsbjuLkeVRSnsQsfO/JpMUbB9IPafGmuJGK5Rqzclc
WZM7uheROLhdN63PWi2ZHjrjkt/zwhrg+5oOCP2gY2MKT/2gOmzf5mdUIc1tXRKS
O2fso6H+ehq2UVOXbgxGATl+4KNfxu4+N3FSR15vn4zLKaM6vpVfp5G17xLvQGPG
zGwtx+8qqorVM+8fyenE8HG4/g4zgUapqKoSL+R2DUxsLhViIwFe9q+LmxBnKt5t
GpaywReyxsBR3cKLc3oS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org