Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/bB1krSW4mhL233THeWuGgEQY8Oo.roa
File:                     bB1krSW4mhL233THeWuGgEQY8Oo.roa (raw, json)
Hash identifier:          Sw/Ksw4louxAQrv1MVoOmERIbOKbB1vxMunXHXH9Yd0=
Subject key identifier:   6C:1D:64:AD:25:B8:9A:12:F6:DF:74:C7:79:6B:86:80:44:18:F0:EA
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       F5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/bB1krSW4mhL233THeWuGgEQY8Oo.roa
Signing time:             Sun 01 May 2022 01:31:07 +0000
ROA not before:           Sun 01 May 2022 01:31:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        223.216.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=6C1D64AD25B89A12F6DF74C7796B86804418F0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:5c:e8:55:c7:08:05:65:f6:0f:d7:fc:1b:
                    ea:82:98:97:85:22:e3:72:42:b5:4b:e5:bc:9e:aa:
                    71:8e:e5:d8:02:7d:80:ef:bf:f5:7e:7e:65:ba:bf:
                    26:04:33:9a:34:83:6c:aa:78:84:8f:0b:9c:1a:b0:
                    b1:cc:0c:91:75:fe:71:34:03:95:ff:d8:23:e2:d5:
                    e1:5a:ac:6c:e2:f1:ef:f6:4a:f7:3a:4f:cb:6c:41:
                    28:df:04:e6:08:58:a7:ac:2b:ab:c0:84:63:8b:b0:
                    67:c4:7f:ce:fd:a3:53:0b:78:b9:d3:90:a1:b0:f5:
                    d8:ad:ef:4e:bf:1d:3c:00:07:cb:5d:fb:85:fa:55:
                    5e:91:f2:bc:49:ee:cc:34:9a:0b:a4:73:f7:e3:5b:
                    62:fb:af:2b:00:0b:ca:7a:3a:ad:52:85:12:61:04:
                    50:a4:d0:e1:aa:0d:e5:aa:dc:3a:9f:57:32:fb:89:
                    09:10:71:76:fe:c6:8b:d6:ce:70:99:b3:fe:66:12:
                    eb:1f:2f:25:ec:93:58:6c:c6:a8:db:58:d8:79:d1:
                    7f:6b:0f:4b:22:08:bf:ef:dc:62:30:c6:c4:b5:b2:
                    65:78:f3:43:fb:2b:2a:14:26:ba:02:da:56:14:c6:
                    76:76:64:81:8a:91:b5:2e:fc:34:c8:ea:e0:29:bf:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:64:AD:25:B8:9A:12:F6:DF:74:C7:79:6B:86:80:44:18:F0:EA
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/bB1krSW4mhL233THeWuGgEQY8Oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:77:bf:d0:7e:04:6b:6d:9a:84:a3:2e:eb:90:00:38:54:
         cb:85:dd:c3:7a:62:e7:5e:33:fe:28:61:ef:a8:1b:a0:9f:6c:
         dc:ab:4d:48:e7:4f:d9:7c:26:ed:0c:ed:96:62:6e:42:ab:fe:
         ee:7d:24:f3:d9:7c:50:c7:8b:06:b3:42:41:a8:48:0c:d8:1e:
         4d:45:9b:9b:be:c5:15:39:43:6e:8e:14:be:4e:63:73:1d:37:
         cc:83:12:8d:c1:c4:78:d5:54:41:c8:8b:c9:bd:a5:d0:7b:e9:
         89:bf:17:8f:c3:15:cd:90:84:9d:eb:0b:74:22:2d:aa:e9:77:
         e8:fe:a2:84:71:ba:57:1d:42:66:59:b3:24:07:73:09:1d:ea:
         75:76:38:ad:3d:79:f3:d7:d8:d3:3e:17:49:b9:df:7d:0e:ac:
         cd:5c:1c:cc:49:3d:70:e2:df:8e:4a:1f:af:03:bb:0b:db:13:
         dc:b9:99:6f:69:3f:f3:7a:7f:b3:bc:f1:2d:ee:04:49:ca:f2:
         69:40:4c:aa:39:c0:f8:84:af:0b:9d:cf:75:cb:92:c3:45:fb:
         08:01:02:f1:0b:fb:cf:f8:a7:ee:cb:c6:0b:ad:a5:6a:1a:82:
         6d:76:cf:fe:6b:4f:86:18:ea:95:40:18:87:e4:e9:40:f0:53:
         75:ea:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org