Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Xg-ypjXjoU07ONegwYhtIMQ1aX0.roa
File:                     Xg-ypjXjoU07ONegwYhtIMQ1aX0.roa (raw, json)
Hash identifier:          SyaZdovvoeK1JNj04MLZUR/jMP4PkfMs26nvbwEoV8o=
Subject key identifier:   5E:0F:B2:A6:35:E3:A1:4D:3B:38:D7:A0:C1:88:6D:20:C4:35:69:7D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       C9
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Xg-ypjXjoU07ONegwYhtIMQ1aX0.roa
Signing time:             Fri 01 Apr 2022 01:28:16 +0000
ROA not before:           Fri 01 Apr 2022 01:28:16 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        203.139.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:16 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=5E0FB2A635E3A14D3B38D7A0C1886D20C435697D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:c4:ee:85:18:b4:5d:8d:24:39:33:01:d6:
                    a6:01:51:1d:30:8a:75:5f:f0:86:0e:67:4d:e3:57:
                    c0:b8:07:ba:4b:6f:c4:ea:c0:06:bb:c2:6b:18:d8:
                    1c:9c:20:10:75:fe:01:7b:51:f5:7b:f8:47:cb:03:
                    34:a3:89:5e:89:40:ed:25:75:9a:b6:28:83:d4:4d:
                    8e:1e:46:98:3c:4a:1e:7b:d0:19:11:60:59:e7:c0:
                    9d:c0:09:86:b4:21:3b:53:3c:54:87:67:91:7f:e4:
                    34:c5:dc:b3:3f:08:03:e7:9f:0c:f0:cd:36:14:41:
                    8f:85:56:c2:4b:4e:4f:ca:69:e1:1e:81:b5:2b:10:
                    81:97:7c:6d:6c:ef:54:5c:2b:f6:80:92:8d:b1:df:
                    5b:6d:0d:63:7c:f8:c4:05:ca:90:b7:87:73:d2:f1:
                    b8:1c:f4:09:20:91:2e:df:91:8a:b4:ba:70:04:c7:
                    8a:a1:bf:c8:25:d8:3f:21:02:1d:81:18:e0:ac:0f:
                    bb:eb:07:e2:fa:d4:0e:db:ad:6c:e9:5b:94:9e:ca:
                    9d:b4:67:c7:70:29:a7:03:7f:67:0b:f4:66:1b:39:
                    68:9d:d4:5b:11:7d:04:90:b6:e2:e6:a9:4c:2f:26:
                    de:93:db:ae:3c:ad:df:59:ee:56:99:72:d3:42:fe:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:B2:A6:35:E3:A1:4D:3B:38:D7:A0:C1:88:6D:20:C4:35:69:7D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Xg-ypjXjoU07ONegwYhtIMQ1aX0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.139.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:a0:3c:75:48:30:ab:3f:4b:44:f9:72:40:09:46:00:65:04:
         a0:f7:79:9b:1a:5f:91:34:6d:ce:31:12:e4:2d:dc:78:c2:28:
         b0:cf:b8:e2:ec:c3:dd:86:27:0d:aa:e6:d0:92:e7:ae:26:70:
         cf:56:15:6c:8b:ed:f4:83:62:0e:7a:c3:cb:e3:e7:76:f2:6e:
         eb:a7:13:cf:a0:00:20:d4:b5:3f:f1:3d:84:d8:9f:5d:69:ff:
         78:2b:bb:54:a0:d7:ec:36:f2:a0:bb:9e:6b:16:3b:c1:d8:30:
         fd:35:3a:3c:7a:6b:76:2d:f3:b0:82:c2:2e:ce:6e:eb:3d:66:
         09:05:ea:c4:78:a9:3b:33:5b:53:e0:21:03:f1:ae:bb:b1:b2:
         96:d9:18:41:34:00:dd:b9:de:e5:80:0d:72:a7:4b:26:26:5d:
         3f:e5:a4:1e:2f:d4:c5:86:a2:02:a9:09:a0:52:d8:2e:b6:a8:
         7b:7b:ca:3e:ab:20:0e:fb:b3:ae:d4:b2:12:ec:b2:36:79:10:
         c0:86:27:7b:35:02:b1:09:e9:ea:bb:24:aa:8a:95:0a:c8:a1:
         4f:1e:25:a9:04:a5:ff:9d:8b:33:73:01:26:c7:44:24:cd:2a:
         cd:01:c1:98:74:32:87:b5:5a:5b:93:84:8b:2c:14:0d:d1:11:
         13:7a:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org