Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/gpSPvjmiBIpTGkNc_bMNKQMdxNk.roa
File:                     gpSPvjmiBIpTGkNc_bMNKQMdxNk.roa (raw, json)
Hash identifier:          PNCrsbge3Gp6956x+MwwaHHx6GJ+43zSISkJuJg8O3g=
Subject key identifier:   82:94:8F:BE:39:A2:04:8A:53:1A:43:5C:FD:B3:0D:29:03:1D:C4:D9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       E6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/gpSPvjmiBIpTGkNc_bMNKQMdxNk.roa
Signing time:             Sun 01 May 2022 01:31:01 +0000
ROA not before:           Sun 01 May 2022 01:31:01 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        218.224.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:01 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=82948FBE39A2048A531A435CFDB30D29031DC4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:51:0b:17:bb:77:8f:96:94:e5:bc:82:e2:
                    d3:61:33:ad:a7:21:6e:00:95:9d:e9:8f:d3:61:ef:
                    10:7a:ec:9d:5f:a4:92:31:22:b4:95:41:8f:f5:44:
                    8b:d3:de:e6:23:4e:ec:da:21:35:4b:39:d3:4e:44:
                    00:be:56:04:40:81:d5:11:dc:67:92:f0:d9:8b:48:
                    4d:d2:4b:a9:21:73:cf:74:8d:48:0f:5b:40:5a:94:
                    f1:db:05:02:c2:1e:3d:8b:db:08:6e:d3:e3:db:be:
                    fc:47:60:bd:f5:04:3c:70:cb:f1:2d:e9:d4:d7:18:
                    ac:9a:df:c2:46:e5:9e:69:e9:6f:20:51:41:27:0d:
                    83:1b:13:fa:dd:f1:24:f0:f2:1e:21:28:87:e6:4a:
                    ad:dc:db:5c:ae:f7:ba:69:ed:6c:64:b0:96:d9:ce:
                    66:63:32:44:44:96:fc:a4:42:97:65:32:18:83:86:
                    59:18:36:25:67:36:f5:6c:1e:7c:c6:43:30:03:f4:
                    c6:38:5e:7b:b7:f2:1f:c8:8f:7c:51:45:e7:07:4d:
                    d4:7c:5f:99:a1:a0:af:f7:29:96:c8:50:30:6f:94:
                    11:50:d6:21:a9:1f:68:91:cd:98:46:65:1e:c2:4d:
                    df:ca:9b:27:c4:60:80:bb:58:7f:88:e5:1f:aa:65:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:94:8F:BE:39:A2:04:8A:53:1A:43:5C:FD:B3:0D:29:03:1D:C4:D9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/gpSPvjmiBIpTGkNc_bMNKQMdxNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.224.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dd:6e:3e:78:bb:d9:ed:6b:df:6c:37:17:b5:59:18:87:cf:f7:
         1f:fe:35:6c:36:e8:c9:2b:ac:87:8b:e9:07:e0:04:25:57:82:
         2d:fa:24:1d:1c:54:9f:43:9b:25:ad:c2:ab:a2:57:53:7d:05:
         cc:7b:bd:4d:ba:79:3a:dc:b0:7c:76:47:8d:e3:e3:a2:33:85:
         50:0f:75:49:70:ee:52:0e:70:0e:e2:c7:ac:06:3e:0c:79:3a:
         9d:41:ab:1d:93:2c:93:ba:fe:73:c8:c5:9d:b5:81:a3:23:7f:
         9d:28:e8:a2:be:f7:aa:ac:b9:fc:09:a7:08:fa:a1:f0:74:c2:
         c6:93:de:f8:34:58:4e:bd:10:b8:1a:bb:38:41:b8:8f:23:41:
         02:93:aa:f7:9a:1f:b7:8e:48:8e:b8:20:21:3c:4b:67:ee:8f:
         4d:80:09:7f:95:49:15:d4:77:3c:04:bf:28:c8:21:9a:59:4d:
         90:c4:e0:0f:11:ce:fa:ca:fe:98:46:17:e7:aa:75:29:29:fd:
         a4:fb:f8:c7:9c:98:a0:5c:46:65:83:9e:f0:bd:8f:50:a1:55:
         f3:01:be:e9:e1:31:c8:eb:d8:7a:b1:0c:9a:ac:14:c9:d6:dd:
         72:df:81:43:b7:0b:44:25:90:0e:9b:2a:92:a0:31:f2:7e:09:
         d0:e7:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org