Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ipc9_qYU3N6LzcdPN1V0YPBYh4U.roa
File:                     Ipc9_qYU3N6LzcdPN1V0YPBYh4U.roa (raw, json)
Hash identifier:          TgFB7xgPr1qyG9o5d13iGHUVyWOtqF7mOSEh3tk875w=
Subject key identifier:   22:97:3D:FE:A6:14:DC:DE:8B:CD:C7:4F:37:55:74:60:F0:58:87:85
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0155
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ipc9_qYU3N6LzcdPN1V0YPBYh4U.roa
Signing time:             Mon 01 May 2023 01:28:15 +0000
ROA not before:           Mon 01 May 2023 01:28:15 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        61.118.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:15 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=22973DFEA614DCDE8BCDC74F37557460F0588785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:e5:7c:cd:51:d5:4e:77:dc:b6:e9:31:37:
                    8a:29:e7:ae:d1:86:03:ea:29:e2:e2:cd:39:fc:0f:
                    0a:39:f2:da:67:4e:70:44:df:27:ab:c8:e1:99:bc:
                    77:5b:60:8b:c2:27:be:cc:95:dd:0c:cd:ea:b1:1e:
                    36:27:9a:29:d1:7c:7e:40:83:a5:04:1f:38:b7:35:
                    73:b7:b9:ac:d7:22:b0:54:30:af:25:24:d2:54:2c:
                    d2:15:9d:ac:61:5f:a0:f3:04:39:1e:b2:4a:dd:ab:
                    19:6b:33:8a:50:46:f1:dc:72:62:4b:51:68:64:6f:
                    13:72:be:fb:72:ba:1e:21:1b:fc:b1:9b:fa:86:1a:
                    48:67:32:35:eb:b1:32:9b:54:14:97:7f:69:13:75:
                    43:1d:6f:95:45:2a:4b:1a:ba:69:9d:76:5a:41:43:
                    5f:c5:24:2e:57:b7:4f:f2:3a:fa:07:14:1a:d8:3c:
                    fe:e7:9f:e1:b5:29:86:b0:9a:1e:7f:ed:e9:ee:ba:
                    e1:7e:e1:b9:a5:ad:cf:39:42:5a:ea:ad:1c:36:91:
                    b9:1c:b6:db:8a:20:ed:ea:28:00:2f:58:d3:f1:83:
                    ef:84:c6:4b:58:3c:9e:a3:3a:63:df:1a:a2:d5:3d:
                    14:04:4b:63:bc:a8:c0:53:ee:2e:d2:65:01:58:fd:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:3D:FE:A6:14:DC:DE:8B:CD:C7:4F:37:55:74:60:F0:58:87:85
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ipc9_qYU3N6LzcdPN1V0YPBYh4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.118.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         05:51:43:b0:67:b1:56:32:c1:e6:fa:5f:66:17:b3:24:42:02:
         77:c4:52:7f:12:be:4e:f4:b6:94:7e:f2:cc:e0:41:22:84:9c:
         01:bc:07:69:cb:65:ce:bc:0a:be:ef:f1:fe:c7:ad:09:9a:93:
         a8:09:1a:8f:c0:32:e5:88:98:d1:18:e1:57:8d:df:5c:ab:1d:
         79:bc:87:fe:b1:5c:b6:7c:93:c2:f5:0f:a8:6c:fd:37:94:aa:
         ae:a5:04:1d:60:43:ee:c2:3e:2e:b2:b6:56:01:f5:e7:1c:c4:
         de:20:78:6b:57:82:94:49:5e:a5:01:b1:5e:90:73:56:0f:4c:
         71:fc:d6:d2:70:ed:dc:b9:56:92:b6:50:1c:95:0c:a2:21:eb:
         f1:9a:06:26:c5:89:3d:b0:8e:08:9f:c3:8f:20:3c:b2:02:46:
         f9:c3:18:eb:42:2d:fc:8a:95:0c:3a:52:5e:94:f1:b4:9f:39:
         68:a6:d3:b7:8f:0f:fd:87:b1:c2:78:d7:92:ab:b6:9f:bc:92:
         81:9d:a2:95:5c:eb:24:5d:5a:b5:81:2e:2b:a5:72:4f:6e:71:
         cf:97:d4:2b:12:24:c9:d3:38:bd:43:c6:4e:e2:66:2e:2b:15:
         3f:da:4a:df:55:09:1c:20:ef:fb:16:e5:1c:55:ec:bf:2a:2c:
         da:42:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org