Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/JmGYXe1mjNZprEyMq2zq_vUMR5o.roa
File:                     JmGYXe1mjNZprEyMq2zq_vUMR5o.roa (raw, json)
Hash identifier:          yM9weB8O4GIXv4yAaxMNqrbVNG3FJAWe8k8mHQHgZ4Y=
Subject key identifier:   26:61:98:5D:ED:66:8C:D6:69:AC:4C:8C:AB:6C:EA:FE:F5:0C:47:9A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0166
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JmGYXe1mjNZprEyMq2zq_vUMR5o.roa
Signing time:             Mon 01 May 2023 01:30:22 +0000
ROA not before:           Mon 01 May 2023 01:30:22 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        125.170.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:30:22 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=2661985DED668CD669AC4C8CAB6CEAFEF50C479A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:04:c4:a8:d4:23:fb:4c:71:64:4f:d7:4e:
                    7a:95:d5:e6:8c:45:a6:8f:0a:c6:58:1a:d4:14:e9:
                    86:83:f3:1f:d7:bb:68:77:6c:28:0f:1c:83:8e:2e:
                    67:3c:88:78:ec:59:91:5a:af:07:a4:ab:9e:08:d5:
                    e1:27:ee:cb:93:c0:83:15:ee:13:24:1e:7b:cf:2d:
                    e2:c6:6a:0b:1d:74:7c:10:ad:92:02:b7:08:46:91:
                    76:f7:c7:dc:a6:40:09:01:a8:88:e5:eb:63:41:a8:
                    1b:20:fe:f4:4b:e4:a0:69:78:6c:8e:53:02:b0:7d:
                    40:9a:f7:d3:87:ed:af:cb:08:b5:02:13:21:85:1a:
                    28:6c:5c:c0:fb:23:57:16:0e:1a:3a:46:98:a6:e6:
                    0e:63:63:70:34:7f:f8:40:d5:fa:d4:81:f8:63:db:
                    81:9d:0e:8e:58:99:0a:7a:d9:34:c9:d3:e0:07:02:
                    cb:f6:a9:d4:c0:68:c4:a0:b9:fe:aa:3e:2c:0a:e6:
                    b6:da:f0:64:e1:3d:5f:8f:80:e6:d4:61:83:0a:0a:
                    f6:ca:e9:5f:06:ad:b3:eb:54:7f:a0:60:60:1f:07:
                    6a:14:8b:a3:4d:63:63:03:09:63:b4:68:9b:e3:9b:
                    e3:36:f5:bd:41:e3:9f:26:21:f0:e2:62:46:85:1e:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:98:5D:ED:66:8C:D6:69:AC:4C:8C:AB:6C:EA:FE:F5:0C:47:9A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JmGYXe1mjNZprEyMq2zq_vUMR5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:7a:c4:3c:b8:5b:bc:02:24:19:82:d5:14:cf:fe:03:65:
         09:e0:0a:b5:4c:e9:af:c6:4e:b1:66:f4:6f:6f:b4:9a:ed:c0:
         6a:13:b2:04:71:91:e8:03:f8:50:66:1b:a7:ab:72:1e:e7:e9:
         28:29:6a:60:19:b5:97:bc:0d:02:f5:29:ef:ac:55:65:54:a4:
         e3:1a:db:ca:f8:f7:56:7f:45:db:2a:96:b7:2d:8d:42:0c:70:
         a8:2e:d4:41:36:00:05:af:67:3e:a2:0e:81:81:c8:31:52:32:
         cd:6f:14:d4:71:41:2f:1b:3c:93:b9:69:ef:97:5d:56:9c:be:
         ed:92:a2:e5:78:56:d0:89:79:eb:c5:b2:30:50:cf:d4:05:56:
         be:6d:00:68:1d:dd:c7:11:63:86:65:52:86:cc:a2:65:27:ac:
         da:09:28:f8:b4:76:30:3c:60:49:7c:ed:5b:35:89:66:1f:bd:
         83:05:7e:70:9c:24:e1:d2:d7:7f:8b:13:b0:87:28:9a:6f:a4:
         e8:aa:ab:a1:1c:df:22:01:90:e3:d8:9c:75:a4:fe:82:cc:55:
         b3:5c:55:ac:17:35:83:75:72:81:c2:0c:a8:fb:e2:7e:c3:d7:
         86:3c:ca:18:45:ca:aa:37:63:d1:cc:df:fb:dc:36:9d:d5:64:
         0a:2b:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org