Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/LYDBb5EdkRcYeGK20QVIHJE-nxY.roa
File:                     LYDBb5EdkRcYeGK20QVIHJE-nxY.roa (raw, json)
Hash identifier:          oU4QG8qvgD0O492LjIUNXz+KzAODgjf07xTxOkeOoLg=
Subject key identifier:   2D:80:C1:6F:91:1D:91:17:18:78:62:B6:D1:05:48:1C:91:3E:9F:16
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0122
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LYDBb5EdkRcYeGK20QVIHJE-nxY.roa
Signing time:             Fri 05 Aug 2022 04:34:38 +0000
ROA not before:           Fri 05 Aug 2022 04:34:38 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        203.140.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:34:38 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=2D80C16F911D9117187862B6D105481C913E9F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:02:2b:d1:72:f8:8f:88:de:57:e2:91:0b:
                    74:b0:9c:b8:05:c4:ed:43:3c:99:2d:44:7d:b4:cb:
                    23:9e:43:f3:55:1f:f6:22:41:01:0c:e7:1a:83:7c:
                    e8:58:15:be:39:16:b3:5a:9d:e2:1f:4a:1c:bc:1a:
                    2b:e6:b0:28:22:91:63:ad:47:8e:d1:73:80:98:e2:
                    e1:f2:2b:63:1f:04:0b:95:7f:b3:7f:20:ee:1f:da:
                    bf:d6:98:80:4f:ad:e7:8f:44:03:85:cd:d6:c0:38:
                    03:72:bd:3e:07:13:22:10:86:b7:b1:28:9f:e1:a5:
                    62:93:2d:98:ed:3c:03:c9:cd:94:7a:dd:e8:77:c5:
                    5f:97:86:15:19:6a:1f:9f:dc:fd:91:1d:f2:c1:f5:
                    d2:37:2e:a7:fb:f1:ec:ab:18:0c:7e:9b:6f:7b:e2:
                    16:f6:89:08:57:a6:99:cf:24:f1:6f:8d:b3:61:5b:
                    49:50:46:9c:fb:c3:2b:ab:1f:a1:e1:53:b6:9d:af:
                    76:ab:e8:b2:05:ab:37:e5:c7:36:70:32:fa:cd:26:
                    9a:4e:9b:c3:29:43:eb:64:b9:c0:fe:c3:48:4e:9a:
                    af:fa:d3:7c:51:b2:ce:bc:01:a5:17:52:74:e7:d6:
                    2c:66:72:7b:62:8f:78:35:aa:b2:d7:71:6f:fa:61:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:80:C1:6F:91:1D:91:17:18:78:62:B6:D1:05:48:1C:91:3E:9F:16
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LYDBb5EdkRcYeGK20QVIHJE-nxY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:ff:67:b3:ba:85:f4:45:9b:a0:fa:fe:53:0b:ad:0c:45:
         27:f8:14:8d:4f:e8:2f:85:b2:90:6e:c1:c9:03:68:a8:db:37:
         a3:90:f1:8d:cc:6d:f4:02:c9:13:68:3f:ab:77:e5:e3:2f:46:
         d8:a5:d6:1c:7a:a3:77:dc:e7:2d:2c:81:4b:f5:4b:52:69:fe:
         74:b7:d1:2e:62:26:74:11:25:80:23:16:fd:df:08:15:d1:91:
         81:99:08:57:3c:29:06:c0:69:5d:62:fe:48:dc:93:c7:2a:f1:
         62:64:8b:74:82:be:e3:10:49:77:a6:06:8a:85:96:78:af:c6:
         3a:fe:bc:db:9d:8f:63:64:3f:c0:6a:57:23:bb:f6:e9:88:9d:
         bb:73:66:88:a2:5c:93:ad:1f:38:19:c2:d9:bc:47:ff:3a:e9:
         76:23:a3:07:70:97:fa:96:94:89:d1:2a:2b:a5:d1:59:e4:b0:
         c3:79:76:05:e0:9f:20:04:55:ce:fe:46:34:8d:71:25:87:5f:
         c0:75:74:97:5b:a3:af:92:d0:b6:7a:a9:86:a8:2f:00:ea:31:
         7e:76:a1:85:eb:ec:b6:49:8b:ef:73:8e:c9:37:3d:05:b7:1c:
         87:23:01:05:26:90:e8:fe:95:73:bc:2d:37:c0:80:d9:76:43:
         8b:fd:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org