Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/fCXBksdPyBukXIlaBxYJI1d4ETY.roa
File:                     fCXBksdPyBukXIlaBxYJI1d4ETY.roa (raw, json)
Hash identifier:          CxeSGF5VNni8tEsj37rI4caWpfAYDf9Hb2fHfHH5c9E=
Subject key identifier:   7C:25:C1:92:C7:4F:C8:1B:A4:5C:89:5A:07:16:09:23:57:78:11:36
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       010D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/fCXBksdPyBukXIlaBxYJI1d4ETY.roa
Signing time:             Fri 10 Jun 2022 03:16:24 +0000
ROA not before:           Fri 10 Jun 2022 03:16:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        122.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:16:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7C25C192C74FC81BA45C895A0716092357781136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:77:bb:ce:f9:12:98:fe:f6:91:a3:8d:a0:
                    1a:10:d6:99:4d:e1:77:a6:2e:38:65:3e:af:71:0d:
                    c6:7d:ba:23:38:4a:e9:63:c3:3a:8f:4b:f1:d5:e5:
                    03:c5:49:4a:30:15:28:a3:4d:86:bc:d4:66:90:df:
                    3c:aa:80:b8:2c:d6:c7:ac:6a:db:a0:46:43:0d:68:
                    03:ce:93:27:06:18:c1:3d:23:81:97:13:cf:7b:61:
                    6a:27:77:70:87:85:b6:ad:5f:0b:21:90:59:3a:d3:
                    06:de:79:6f:d0:e1:ab:0f:0a:30:09:5a:59:ec:da:
                    17:cd:23:14:53:45:42:51:76:0d:35:b0:6c:4d:61:
                    b1:92:ce:4a:37:79:55:e0:b6:30:fb:6d:7a:59:78:
                    52:98:a5:07:33:38:f5:75:38:de:e1:fb:0d:49:44:
                    73:fb:e1:0c:88:fd:14:2f:76:e0:d4:4e:a1:32:99:
                    9d:1f:ba:5b:07:b8:7c:fd:1e:1c:2a:1a:bb:95:97:
                    0d:45:d6:d0:6a:20:96:32:61:9c:54:ae:cd:bf:2e:
                    15:03:79:0d:c6:97:7a:44:7b:04:64:52:6a:5d:4a:
                    1f:4e:86:fb:0d:76:32:7e:8e:a1:e4:f6:c2:3b:9f:
                    63:1f:0a:df:ee:c9:fa:5e:69:8b:d4:b4:b8:e4:36:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:C1:92:C7:4F:C8:1B:A4:5C:89:5A:07:16:09:23:57:78:11:36
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/fCXBksdPyBukXIlaBxYJI1d4ETY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ca:01:1c:67:d0:e5:21:9f:8e:af:d6:6a:33:bc:f4:88:97:31:
         02:5f:4a:62:8d:13:7e:98:a8:33:2d:58:12:4d:fa:f5:16:3a:
         d8:62:c5:b5:1c:16:f8:6a:c6:a8:d1:56:cd:33:3f:5b:b7:70:
         7d:91:a0:e7:24:74:fa:01:f0:82:cf:32:be:ed:77:db:47:f3:
         34:fe:fe:c4:74:a3:b8:b2:3b:aa:6d:ac:c0:2a:5c:15:9a:17:
         ff:54:07:7e:29:af:b9:c5:ce:ea:c5:f3:26:ca:35:02:12:54:
         19:5f:c7:ed:0a:f9:6a:0e:ee:f7:a6:79:22:2d:5d:16:78:94:
         a7:29:3f:c2:ed:7c:c0:b7:33:3e:c6:99:40:10:c9:b8:40:16:
         7e:64:0e:29:84:bf:fd:25:8a:c1:24:ac:46:c3:5a:db:47:4e:
         12:44:b4:a1:95:24:7d:14:a1:45:cc:6a:8e:17:0a:2b:c9:f6:
         a9:f0:26:82:f1:6c:de:74:fa:1f:44:d7:b4:00:f2:49:f4:7c:
         a1:4d:ed:72:1d:8f:67:69:c0:38:89:eb:48:7d:21:89:e3:30:
         ef:e2:e2:45:00:0a:af:8b:2f:42:0b:dc:33:f3:7b:a8:7b:f9:
         5f:21:74:34:92:90:67:22:c9:80:ea:5c:bf:ec:cf:5d:b1:40:
         ad:86:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org