Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Mfd_X9K47xa0VuGdITKr2HE7Wsk.roa
File:                     Mfd_X9K47xa0VuGdITKr2HE7Wsk.roa (raw, json)
Hash identifier:          7iGbsYoBiKT1wF2G1GOgyv/5jUjL2aq2KYtxLrfhWCg=
Subject key identifier:   31:F7:7F:5F:D2:B8:EF:16:B4:56:E1:9D:21:32:AB:D8:71:3B:5A:C9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       93
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Mfd_X9K47xa0VuGdITKr2HE7Wsk.roa
Signing time:             Sat 05 Jun 2021 03:47:29 +0000
ROA not before:           Sat 05 Jun 2021 03:47:29 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        222.144.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:29 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=31F77F5FD2B8EF16B456E19D2132ABD8713B5AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:cd:ce:eb:2b:60:7a:0c:16:97:13:a4:a9:
                    34:4e:24:08:19:f5:a2:fe:52:92:34:1f:ef:5e:5a:
                    4d:d2:50:6b:30:6e:f6:23:ea:24:9c:40:37:f3:27:
                    c5:51:3a:25:0d:4b:a4:54:3e:b2:d0:19:d9:61:46:
                    fa:be:52:6d:c5:38:36:de:e8:5b:22:d3:1b:df:f6:
                    2d:08:47:4d:4c:76:d2:e9:bc:b4:88:cc:1e:f7:f4:
                    df:66:c0:71:1c:58:b9:5b:f8:cc:56:8c:bd:d3:91:
                    a2:38:49:e2:69:6e:6c:12:90:21:44:b1:14:bd:97:
                    cd:f9:12:06:15:cd:f5:34:a6:b7:9a:7f:2d:6f:c8:
                    51:eb:32:61:93:52:b6:66:96:23:57:87:d5:4d:89:
                    fe:c2:65:d3:db:97:2b:7f:c9:e2:ff:53:40:78:61:
                    41:93:17:70:11:2f:27:2a:0f:8d:4c:00:8f:ea:59:
                    82:40:ee:7e:5d:9f:b6:70:cd:d3:db:69:2d:70:06:
                    c0:9e:bd:32:61:fa:e0:34:cc:52:32:5a:1f:ab:40:
                    37:11:b1:c4:e1:6c:71:5f:da:17:b9:9f:a8:46:11:
                    df:3d:1d:86:e9:52:09:f7:8d:b0:17:b3:50:36:eb:
                    0f:03:c5:f6:23:2e:18:e6:b0:b9:4d:db:70:6f:c9:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F7:7F:5F:D2:B8:EF:16:B4:56:E1:9D:21:32:AB:D8:71:3B:5A:C9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Mfd_X9K47xa0VuGdITKr2HE7Wsk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.144.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         d1:9a:72:53:db:b4:65:41:b3:8b:dc:4d:b1:20:d0:d4:e0:3d:
         f9:1e:05:b8:96:0f:53:f7:7f:98:39:b9:df:84:cc:9f:e1:63:
         8b:6b:2a:f6:cc:81:01:ae:98:6a:d8:95:a4:16:91:31:ea:81:
         fc:dd:d3:a3:57:72:4b:b5:8c:3f:4e:9a:a8:49:14:ea:3c:78:
         62:97:ec:bd:c7:88:04:27:83:c3:75:bd:2d:d9:b2:ab:39:37:
         a0:07:30:4e:eb:8a:17:88:2b:d0:f6:20:41:da:48:98:ea:51:
         e3:ab:3e:c6:97:4d:c0:db:ee:63:b7:95:f0:3b:a8:83:d2:cb:
         af:a7:58:73:a6:8b:1e:9f:d4:70:7d:90:b8:76:8c:3d:5d:f2:
         e2:be:e6:5c:07:c2:81:cb:11:23:ad:66:0c:51:50:38:d8:e3:
         3b:5c:67:d0:87:35:87:5b:30:d1:b0:47:78:c4:ea:74:d6:70:
         22:34:72:b6:18:aa:1b:d4:d9:53:97:22:c7:c4:e8:d2:06:3a:
         2c:b9:81:2f:62:55:c5:77:c7:ef:26:ef:8b:9f:53:b3:b6:9b:
         0e:90:eb:03:42:56:82:4b:39:bb:26:18:2b:da:3b:49:d1:d7:
         83:63:95:fa:e9:ee:62:a1:55:cd:90:50:9f:fe:f5:fe:e8:ab:
         a3:1a:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org