Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/aitkfMD2hoJjVXAFsnzIMzk-AH4.roa
File:                     aitkfMD2hoJjVXAFsnzIMzk-AH4.roa (raw, json)
Hash identifier:          KFncAQtRjwuJhCNH+aBndl1k6DdVwrqGNOYn9sM2EPE=
Subject key identifier:   6A:2B:64:7C:C0:F6:86:82:63:55:70:05:B2:7C:C8:33:39:3E:00:7E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       84
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aitkfMD2hoJjVXAFsnzIMzk-AH4.roa
Signing time:             Sat 08 May 2021 04:05:45 +0000
ROA not before:           Sat 08 May 2021 04:05:45 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        202.191.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:45 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=6A2B647CC0F6868263557005B27CC833393E007E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:17:80:cf:70:db:59:ed:34:fc:d1:30:f7:
                    bd:9b:9b:92:ad:34:cf:4c:1f:e0:c9:bd:20:6a:00:
                    4a:46:ac:be:94:7d:ef:52:ca:d6:2a:1d:ed:69:49:
                    cb:d4:4b:81:12:ae:d1:82:e6:94:0b:16:f4:bb:e5:
                    08:4a:e1:b9:44:2b:89:ba:21:95:a9:d4:50:6f:d7:
                    f9:3d:42:73:32:92:49:47:62:b1:d6:57:bc:75:c2:
                    94:f5:1b:25:c1:57:bb:38:f4:99:28:47:4e:3d:92:
                    1e:e9:6c:dc:68:41:d4:d8:f8:7d:b9:fb:a5:ad:ef:
                    a5:da:96:40:b5:b8:b7:5f:3e:f2:47:c2:2c:6f:4b:
                    ac:02:17:32:30:44:1d:6c:b6:25:ec:f4:d2:74:1c:
                    ca:ab:24:80:a3:5b:95:5d:f7:9e:55:2a:57:64:b9:
                    3b:25:12:aa:3b:e1:9c:2d:8a:3a:22:f3:81:e1:a2:
                    40:d3:97:62:bc:af:89:61:fa:93:8c:8e:8d:1d:08:
                    2c:16:21:12:f0:f9:63:d6:bc:7d:50:3d:20:73:ad:
                    62:71:ff:11:f6:7c:16:77:56:73:fe:67:c4:77:37:
                    3e:de:63:b1:0e:ef:e2:ba:e7:ce:38:b4:a3:42:81:
                    4f:b2:49:97:77:7f:6b:e1:29:8b:6d:d1:e0:a9:ec:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:64:7C:C0:F6:86:82:63:55:70:05:B2:7C:C8:33:39:3E:00:7E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aitkfMD2hoJjVXAFsnzIMzk-AH4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.191.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:c1:37:37:cb:28:b3:29:2c:15:c9:44:4a:93:2c:15:fe:
         26:2e:ad:92:6e:ba:1b:5c:66:7a:2c:07:7b:97:e7:d7:d6:a9:
         3a:b3:f4:6d:6e:0e:42:f3:d9:b3:86:6b:0c:e9:64:5a:60:3e:
         6c:f3:36:94:bc:81:67:85:92:b9:85:b0:4b:21:5e:3b:93:2d:
         9a:20:1b:a4:d5:0e:d2:3c:5f:c3:8a:d2:e4:d4:b3:db:83:96:
         c7:a7:95:a8:78:15:be:5f:07:5d:dd:a2:cd:35:6e:e3:c7:25:
         df:48:bd:3a:db:f5:f7:37:bc:32:3b:e0:c0:80:8c:3e:1e:53:
         ff:8a:d1:06:9d:2c:20:5f:35:e5:7f:a7:4e:b4:6f:ae:fe:70:
         8d:9e:35:bc:63:53:e9:a3:75:3c:7e:45:e0:43:4c:35:ed:b3:
         fc:62:6b:ec:9a:a5:dd:d8:3a:19:6e:00:13:f8:51:65:73:e0:
         98:92:b9:e8:db:a1:77:ad:a1:c3:f0:98:b4:75:a8:04:60:ca:
         82:10:55:44:1d:e0:e2:4e:06:4c:2b:55:0e:f3:72:bd:2b:66:
         78:0e:b0:ac:d1:ae:60:50:47:58:05:1d:50:06:00:9f:4c:fd:
         2e:3b:7f:f7:db:29:fb:b1:e9:e7:bd:0b:ec:c7:b1:af:3c:c9:
         70:52:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org