Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/TOi1sCEPZzpXKZTqM36R_ail8AE.roa
File:                     TOi1sCEPZzpXKZTqM36R_ail8AE.roa (raw, json)
Hash identifier:          GEl55ouODmrLECs487qmwoAsxL84V5Y3M1a3t48FjEc=
Subject key identifier:   4C:E8:B5:B0:21:0F:67:3A:57:29:94:EA:33:7E:91:FD:A8:A5:F0:01
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       010C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TOi1sCEPZzpXKZTqM36R_ail8AE.roa
Signing time:             Fri 10 Jun 2022 03:14:24 +0000
ROA not before:           Fri 10 Jun 2022 03:14:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        121.112.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:14:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=4CE8B5B0210F673A572994EA337E91FDA8A5F001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:3a:f2:e8:df:85:26:ea:a6:92:24:3f:ae:
                    44:62:5f:5c:3a:bd:8b:26:c3:12:89:9d:20:82:14:
                    ce:2a:07:a5:b4:ac:a4:5f:f5:3e:f1:0b:4b:97:a2:
                    39:7c:71:ad:1d:41:e3:52:6e:de:18:5d:e2:cc:b0:
                    d4:f1:1e:5d:d2:5f:1e:97:a2:60:53:1b:ed:7d:20:
                    19:05:e9:03:73:94:1e:17:ac:11:08:da:18:c3:ed:
                    8b:38:23:85:98:54:a6:aa:c6:3d:c6:72:19:8c:2b:
                    fd:a2:b8:be:5d:d3:e5:9f:7c:01:21:0a:ab:f3:7c:
                    47:64:a6:df:e7:75:2a:ba:d7:41:0b:a1:ea:19:f3:
                    d1:04:fb:af:45:dd:31:9a:c6:30:e0:8d:a4:9d:83:
                    46:5a:08:9d:cd:08:8a:76:ff:59:d1:93:e4:96:3c:
                    8b:09:7e:4f:b5:e5:cd:17:15:49:e4:e9:e3:17:39:
                    5c:a0:7b:89:9c:52:60:50:31:52:6a:bf:9c:6c:c9:
                    6b:77:cc:2c:cb:46:50:4c:9d:11:48:ac:08:99:39:
                    71:34:99:a9:7f:76:e7:b0:dd:16:73:95:fa:87:ce:
                    33:d6:bc:1a:5c:0c:73:37:73:a3:45:82:e6:25:b5:
                    dd:42:68:ba:1d:25:39:64:f2:03:03:35:2d:e1:b6:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:B5:B0:21:0F:67:3A:57:29:94:EA:33:7E:91:FD:A8:A5:F0:01
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TOi1sCEPZzpXKZTqM36R_ail8AE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.112.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:0b:6a:82:ca:98:9e:23:7f:f3:b9:46:63:b2:fd:48:8f:
         d9:2d:91:cc:ec:cf:4b:ce:ff:57:a0:37:0a:c5:68:06:b5:2d:
         ef:d5:e4:05:e8:d8:69:b3:31:24:3b:c4:07:93:9b:50:3d:14:
         66:48:84:e5:de:84:a6:be:fa:33:a0:51:5c:3d:7c:70:7f:a5:
         5e:8b:e1:79:e9:ea:06:b2:7a:b6:2d:5d:b3:59:be:ef:c6:07:
         00:02:51:df:2f:40:82:b8:1a:a0:a4:36:37:3b:62:2e:e3:ec:
         51:b6:79:b7:10:6c:f1:94:7a:c9:f9:f8:60:34:ef:fe:ca:03:
         62:40:b1:22:49:33:1a:80:c6:68:04:be:3e:4c:ba:1b:45:b3:
         e7:97:1e:9c:3d:b1:ff:59:64:eb:ca:4f:a8:e1:4c:c6:b8:c4:
         58:77:ae:2f:04:60:e8:85:c0:55:42:13:f5:28:35:fb:85:12:
         f1:85:93:51:a3:25:fe:0f:9a:bb:94:63:3e:08:c3:03:59:aa:
         cd:29:ac:34:9c:aa:0a:d4:e3:30:d5:17:6a:46:53:57:25:b1:
         d6:46:83:7f:20:a4:18:b6:8b:03:8a:72:c3:07:a4:53:3d:b3:
         b5:c6:82:c2:ef:77:ae:df:b0:cc:8e:ac:b7:e2:c6:aa:07:cd:
         dd:a1:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org