Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/bedqIH0YwLauuKVNt0adkvAyuCo.roa
File:                     bedqIH0YwLauuKVNt0adkvAyuCo.roa (raw, json)
Hash identifier:          aiw0putepQhNbTU7AfG+GoXuddk4vtpfRED1xVBts28=
Subject key identifier:   6D:E7:6A:20:7D:18:C0:B6:AE:B8:A5:4D:B7:46:9D:92:F0:32:B8:2A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       D1
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/bedqIH0YwLauuKVNt0adkvAyuCo.roa
Signing time:             Fri 01 Apr 2022 01:28:18 +0000
ROA not before:           Fri 01 Apr 2022 01:28:18 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        210.145.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:18 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=6DE76A207D18C0B6AEB8A54DB7469D92F032B82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:01:be:85:3f:df:12:13:f4:19:a6:f0:26:
                    69:34:e6:b3:c1:f3:25:f7:32:6c:7b:4e:4d:74:4b:
                    8e:b6:d6:42:61:ae:21:97:02:d2:2e:c2:23:4e:fd:
                    c1:e3:08:94:3c:30:06:65:28:1d:e3:ee:75:b4:d1:
                    e7:30:cd:16:85:42:c2:88:20:e1:47:ee:73:fa:6e:
                    43:75:80:17:8e:76:e4:6b:23:31:e3:de:f0:84:f6:
                    70:c4:06:2c:92:62:6e:65:e7:ca:05:19:a8:a0:40:
                    e5:9b:74:e5:b0:e7:5c:4e:22:2c:8b:e8:19:cb:40:
                    93:68:fa:e7:5b:4d:73:77:62:f8:54:61:44:6d:32:
                    28:76:d7:89:5e:7e:86:78:e1:0b:bf:ba:a3:a2:7d:
                    5a:be:e5:6d:62:7a:0b:f5:f1:17:92:ce:51:59:fa:
                    d4:e6:37:56:cc:d7:8b:f3:a6:33:ba:34:93:5b:89:
                    83:2d:8c:37:96:77:34:7a:f2:02:7e:5c:5e:19:13:
                    9d:22:26:a4:f9:77:6d:cf:5b:0f:ee:6c:b4:c2:d3:
                    ac:d6:91:09:74:8c:05:8e:75:9c:f1:0d:bf:bc:35:
                    ee:45:aa:60:a5:5f:a6:d6:e4:92:24:7b:a7:a5:e1:
                    39:48:63:18:23:35:5f:a4:f4:c2:2f:df:10:df:8f:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E7:6A:20:7D:18:C0:B6:AE:B8:A5:4D:B7:46:9D:92:F0:32:B8:2A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/bedqIH0YwLauuKVNt0adkvAyuCo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:66:1c:34:5c:ba:75:55:00:4c:ba:ed:c6:b2:fa:fa:90:
         38:a7:9d:c9:bf:92:46:2f:69:c8:cc:dc:4d:fb:5f:86:0b:8c:
         f9:74:5c:38:a9:bd:e0:c1:ba:0e:fe:00:bb:15:e8:58:33:86:
         2d:a8:84:3d:d0:4a:38:26:e4:41:06:36:8b:fb:61:ee:2c:4e:
         4c:e9:ea:f8:31:c5:f1:f9:95:36:f0:8f:04:a7:48:dd:19:46:
         1a:87:44:a3:5e:70:54:30:ce:7b:9b:62:b3:37:85:95:7d:34:
         12:dd:d2:88:97:8a:f0:07:55:52:fe:f4:84:ca:e9:29:f7:b9:
         57:88:f0:6a:6e:ed:e2:47:ff:cb:fe:ca:ab:f8:21:a8:db:b0:
         9c:07:8c:48:ee:ea:df:8c:08:bc:1a:b4:1c:07:77:32:80:24:
         13:6a:4f:3f:c3:6e:83:03:76:d4:94:df:7f:52:93:49:69:00:
         6f:9e:10:c8:d0:d8:33:56:73:4a:2e:0d:13:93:62:70:6f:7e:
         fa:8d:e4:04:ec:7a:9f:bf:49:5d:cf:51:b3:ee:61:1d:47:41:
         14:79:3e:98:36:83:a8:0a:29:38:1e:b4:8c:8b:1a:7a:58:78:
         f7:9e:0c:ca:3a:dd:63:2b:be:de:2c:0b:03:7c:33:2e:5a:aa:
         0b:d6:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org