Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/fIcdiX461zg5U3b4RbmFQN-Impk.roa
File:                     fIcdiX461zg5U3b4RbmFQN-Impk.roa (raw, json)
Hash identifier:          gCCr8luM3CyHT+ICDMa+ogQviiXh8eqCqARO54txdVM=
Subject key identifier:   7C:87:1D:89:7E:3A:D7:38:39:53:76:F8:45:B9:85:40:DF:88:9A:99
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       015E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/fIcdiX461zg5U3b4RbmFQN-Impk.roa
Signing time:             Mon 01 May 2023 01:28:19 +0000
ROA not before:           Mon 01 May 2023 01:28:20 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        118.16.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:20 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=7C871D897E3AD738395376F845B98540DF889A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:5d:47:62:56:39:61:6d:e6:06:9e:38:a3:
                    5f:35:36:65:43:d0:97:44:0f:c1:9d:cc:50:b9:7a:
                    fe:91:36:25:9b:25:72:47:17:81:97:b7:d3:ce:18:
                    c6:73:17:55:dc:2f:bb:b6:a9:65:e9:29:6c:cd:bc:
                    e4:06:19:ab:88:4f:a7:07:b8:6a:83:8b:37:da:4c:
                    be:df:5f:b7:25:96:79:1b:4c:75:d8:e8:74:6d:cf:
                    eb:2e:74:bc:ec:93:14:08:fb:8b:83:43:04:df:90:
                    d8:08:ea:4e:7b:20:69:c6:dd:d3:b5:3c:b0:c6:71:
                    90:a3:9f:6e:cf:94:e8:d6:db:69:61:d0:44:c5:c4:
                    12:f4:f1:17:93:eb:82:af:b1:b4:ab:8f:7d:f8:b3:
                    d9:c2:28:95:45:1a:38:79:e6:25:93:ba:e1:e7:48:
                    e6:bf:24:e8:73:cd:e3:ba:04:63:29:79:d8:61:b4:
                    47:4d:1e:3b:a5:d1:77:01:41:8e:4e:03:68:ec:78:
                    7a:6f:e7:c6:99:93:f1:e9:0a:0c:37:58:c4:03:b1:
                    9a:45:eb:69:7e:f1:48:f8:e7:5f:45:b4:9f:af:fe:
                    b0:9c:f6:77:b6:73:a1:96:a2:c7:32:02:8c:fa:dd:
                    8c:ba:ec:ac:c7:93:17:83:00:48:18:8c:d0:44:04:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:87:1D:89:7E:3A:D7:38:39:53:76:F8:45:B9:85:40:DF:88:9A:99
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/fIcdiX461zg5U3b4RbmFQN-Impk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.16.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a8:a7:8b:0d:db:34:c5:d6:df:c7:20:fd:6f:c6:04:f3:1e:cc:
         de:09:e0:2b:13:ca:a2:d2:d4:0b:ea:31:ae:64:e4:e1:06:3f:
         35:df:63:1a:fa:80:c8:cb:2f:0f:c1:2f:07:a2:6d:06:8b:e8:
         4e:44:0a:32:99:2d:4d:48:1f:c5:b0:99:fd:9c:41:c1:7f:40:
         85:30:1a:77:c5:c9:a0:b2:74:d5:16:ed:86:d4:15:7e:02:f9:
         5e:93:a2:00:a0:8e:60:85:5f:ca:14:00:7e:ee:e2:84:ab:77:
         77:03:50:ab:8c:6e:09:fc:43:04:1e:3e:cb:89:f0:98:1d:b7:
         cb:11:a7:b7:01:b9:f6:42:13:5b:dd:80:7f:3a:51:87:e4:ad:
         2f:b4:de:97:99:17:33:2d:83:91:1f:de:0a:dc:c0:17:28:a0:
         f3:ee:72:d7:d7:b0:d2:0e:93:7d:23:a7:95:d1:c4:d8:a1:fe:
         bd:34:6d:5a:b3:7d:d0:2d:e1:9a:93:6a:af:55:90:10:75:3f:
         6e:bc:60:c8:de:e6:5a:af:55:f7:c6:75:4d:87:9c:4d:2e:a1:
         fb:60:f1:8e:c2:1c:3e:ab:f7:df:16:ed:c9:6b:b2:d7:8e:30:
         73:26:6f:6a:4f:ac:b2:16:9b:69:07:66:eb:9c:69:f9:e2:8f:
         4c:66:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org