Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/IZxnByholXIugbu4WpUeCSkzc4Q.roa
File:                     IZxnByholXIugbu4WpUeCSkzc4Q.roa (raw, json)
Hash identifier:          u0CLpSd2ed70qfvx5tuT5rO30P/5TGi+aSxUmEGVFno=
Subject key identifier:   21:9C:67:07:28:68:95:72:2E:81:BB:B8:5A:95:1E:09:29:33:73:84
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0102
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IZxnByholXIugbu4WpUeCSkzc4Q.roa
Signing time:             Fri 10 Jun 2022 03:02:21 +0000
ROA not before:           Fri 10 Jun 2022 03:02:21 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        61.118.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:02:21 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=219C6707286895722E81BBB85A951E0929337384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:30:ff:82:a0:03:55:68:76:66:b9:fa:26:
                    9e:26:af:8f:0e:f0:3b:23:fe:39:0c:0c:59:26:81:
                    b5:40:4f:ef:ad:96:ba:ea:4d:ea:f3:ea:76:1f:d5:
                    b4:c1:39:0e:ad:a9:f0:11:07:ef:12:b0:8b:eb:dc:
                    52:79:37:d0:64:9e:af:4a:27:d3:85:84:d1:b2:43:
                    10:9b:89:bc:ed:27:08:e2:13:39:fa:80:29:8b:d4:
                    31:d7:da:a3:a0:75:94:e9:d0:a2:ad:0a:17:d4:0d:
                    4f:a1:9b:5e:9c:8f:28:94:a0:2f:69:8a:8b:56:65:
                    f1:a1:2b:62:b7:41:94:89:72:a2:ab:46:37:da:c3:
                    61:7f:98:14:53:c1:48:62:1f:71:2f:12:63:db:97:
                    c0:0b:38:0c:3f:23:82:6e:a9:77:80:d2:43:1b:3c:
                    5d:5d:eb:7d:38:8b:48:a7:26:32:78:15:a7:1e:a7:
                    20:73:d4:7d:40:92:14:ef:fb:a0:20:ad:34:ba:49:
                    57:47:af:1e:59:8b:a1:4f:00:6c:7b:1e:07:f5:bf:
                    37:c5:83:87:a3:79:cc:3b:c2:7b:b8:0b:a0:de:75:
                    61:af:c5:25:0e:0f:29:66:0a:cf:0a:59:ef:32:06:
                    44:a5:92:5f:1e:9d:92:23:10:c2:67:17:77:9e:e0:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9C:67:07:28:68:95:72:2E:81:BB:B8:5A:95:1E:09:29:33:73:84
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IZxnByholXIugbu4WpUeCSkzc4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.118.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         be:94:77:07:a5:b2:21:bd:7c:06:4f:03:28:0d:37:f4:68:09:
         f1:f5:40:25:d3:30:f6:8f:9d:66:e4:62:d6:62:35:e0:09:ee:
         77:f0:5f:d6:09:ec:35:59:b5:ab:e0:aa:2f:c6:07:ff:26:99:
         3c:da:01:69:47:3a:ed:41:34:cf:db:d7:6e:be:bf:93:be:16:
         8c:91:4b:d9:bf:33:f0:41:f9:89:70:6c:40:55:10:f2:a7:4f:
         bb:a1:2b:92:9c:2a:39:60:08:4c:03:b4:ca:6a:cb:83:25:4b:
         84:ba:46:e4:88:21:e6:c5:5a:02:cc:62:7a:6e:12:64:d7:de:
         af:19:f4:6a:f2:b2:c7:d4:4e:3a:1d:59:f6:6e:ce:53:f6:e1:
         08:6e:bf:50:db:79:1e:6a:4e:2b:75:0a:4f:ce:ce:e2:c8:da:
         0e:b9:56:ca:44:9f:ed:de:60:d8:26:3b:a6:7c:38:3b:24:b4:
         32:34:52:f9:9e:bb:c5:9f:b6:37:6d:aa:6e:89:60:43:84:77:
         4b:cb:83:7d:eb:e2:bd:2c:92:cd:3d:b1:9e:01:df:59:f2:d3:
         5e:ed:09:a0:48:63:24:75:c0:86:26:11:7f:fb:c5:71:e1:95:
         b1:11:95:af:31:63:e5:1e:01:5c:60:55:25:28:ea:f0:ec:81:
         c9:77:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org