Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/TZaNIESXxOv8-Gg3f6AsK2BQwqw.roa
File:                     TZaNIESXxOv8-Gg3f6AsK2BQwqw.roa (raw, json)
Hash identifier:          yMQIayNIK2raThiz51fUhHBSU8EiedZ1GCGtrPyTICE=
Subject key identifier:   4D:96:8D:20:44:97:C4:EB:FC:F8:68:37:7F:A0:2C:2B:60:50:C2:AC
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       D6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TZaNIESXxOv8-Gg3f6AsK2BQwqw.roa
Signing time:             Fri 01 Apr 2022 01:28:19 +0000
ROA not before:           Fri 01 Apr 2022 01:28:19 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        218.43.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:19 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=4D968D204497C4EBFCF868377FA02C2B6050C2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:6f:a7:24:b3:87:4d:e8:1a:74:86:f4:84:
                    84:fa:43:0c:d8:55:51:04:6a:33:16:5a:1d:e8:73:
                    dd:73:5f:5f:dc:9f:ba:68:81:42:c5:ed:de:2f:b2:
                    86:3e:4e:18:e2:b7:80:d3:91:6e:02:7d:f9:9a:d5:
                    08:e8:60:61:be:bd:b1:86:a7:f4:b5:31:2a:fb:ed:
                    ba:7f:db:4f:e3:d9:4d:e3:01:83:30:62:65:c6:54:
                    8b:50:c9:a2:40:75:23:06:ca:6b:7f:ed:09:be:50:
                    f7:0c:ab:5d:a1:30:b2:07:5c:6f:59:54:77:50:2a:
                    9b:a6:d9:c5:f5:a2:ab:08:a7:87:f7:29:82:f7:64:
                    ed:be:de:72:fd:79:4f:3f:51:14:2e:1c:55:94:b4:
                    17:93:93:db:cc:d6:80:5a:aa:5b:62:24:d6:d7:1f:
                    3b:2e:6f:f6:ad:9b:a7:77:40:5e:64:56:a3:95:a3:
                    b2:53:3c:99:ae:5b:7e:37:8e:e8:25:33:e6:6f:a6:
                    77:a7:0c:a0:d7:a0:fa:de:56:71:a1:ea:7a:77:3d:
                    89:dc:d2:6f:5c:4a:f6:4c:09:0b:10:65:5a:44:33:
                    33:fc:39:89:39:f7:58:3d:bc:6f:3b:9b:cf:36:09:
                    87:95:3e:cb:81:91:ce:74:e5:66:24:35:95:f3:76:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:8D:20:44:97:C4:EB:FC:F8:68:37:7F:A0:2C:2B:60:50:C2:AC
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TZaNIESXxOv8-Gg3f6AsK2BQwqw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:5a:eb:73:13:28:35:dc:e9:52:52:86:b9:24:3f:b6:da:9a:
         a8:14:cd:67:8c:80:cb:a0:0c:af:8f:f2:3e:53:26:30:52:f4:
         80:c5:a2:92:e0:ab:a7:f1:49:15:da:d9:09:36:55:c0:ee:2d:
         8f:f2:58:d5:61:0f:dc:74:8c:d1:b7:93:13:ab:26:c0:71:97:
         4c:23:00:13:21:c0:35:e2:47:e2:a0:b2:fd:ef:d8:25:fd:f0:
         c0:0f:e8:95:01:61:1c:a0:5f:d0:e7:db:9b:27:14:10:35:db:
         0f:96:bf:86:81:77:28:e2:66:29:7b:21:a8:24:cf:bf:91:4d:
         f9:49:80:93:a5:41:b1:df:eb:92:e8:1e:06:ff:24:20:02:8d:
         9d:b6:7c:fb:32:67:44:72:11:72:be:16:67:bc:08:9c:f7:ba:
         f7:55:c2:1f:a5:73:91:1d:71:67:ff:3c:cd:89:d7:68:c8:33:
         d2:ef:55:32:ae:f7:8d:2f:c4:a5:9d:54:1b:d1:aa:71:23:61:
         7e:8e:7e:be:fe:7e:cd:d6:5a:35:3e:70:c1:84:7a:c8:d6:e1:
         30:6f:86:db:eb:2a:ac:0d:30:70:03:f5:8c:82:67:f3:a0:1d:
         d8:e6:b2:87:fc:0b:5a:85:94:c6:84:b3:26:bd:fd:32:3e:43:
         5b:5e:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org