Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ir4wtfqopYfEK_s0tLVwZ5hgC4g.roa
File:                     ir4wtfqopYfEK_s0tLVwZ5hgC4g.roa (raw, json)
Hash identifier:          m7cAcNGQsOLlKNFQbok7TqmFHY7UIGeJdkOJpz6dYqw=
Subject key identifier:   8A:BE:30:B5:FA:A8:A5:87:C4:2B:FB:34:B4:B5:70:67:98:60:0B:88
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       011B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ir4wtfqopYfEK_s0tLVwZ5hgC4g.roa
Signing time:             Fri 05 Aug 2022 04:08:33 +0000
ROA not before:           Fri 05 Aug 2022 04:08:33 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        153.240.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:08:33 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=8ABE30B5FAA8A587C42BFB34B4B5706798600B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:a4:a1:b2:10:22:4b:bb:39:bd:4f:0b:b0:
                    d7:02:4c:b5:9f:e5:6b:84:65:b7:ec:f7:3d:6b:04:
                    d0:2e:08:78:8e:53:26:fd:e7:d7:54:5c:49:02:eb:
                    6c:d5:8a:95:ef:ac:20:f6:da:de:24:a7:48:a5:82:
                    1d:dc:af:1d:c3:a2:e3:75:c4:63:e9:9b:08:0b:6e:
                    ef:1b:23:09:33:7b:ac:f4:4d:8b:54:da:60:4d:be:
                    95:7d:79:19:78:6f:f8:19:90:f2:f2:17:c4:eb:67:
                    58:b7:f0:67:ec:46:f2:8a:66:3e:5a:9b:ef:c4:6f:
                    82:41:28:fb:c1:c0:16:2c:5a:19:11:84:e0:32:fd:
                    49:ad:9c:76:56:56:02:45:12:6e:f0:5d:38:49:55:
                    14:e9:8f:c9:1a:bd:32:ad:c2:af:91:8c:d2:56:92:
                    2b:4e:5b:1a:b1:24:46:ba:98:b9:16:c9:44:4c:f0:
                    ef:e1:43:cb:94:a2:1c:fb:f2:7c:f5:f9:33:a5:ae:
                    9b:cd:31:67:4b:59:25:ee:08:37:ba:c9:d4:47:06:
                    79:28:25:41:f9:37:95:e5:cc:fe:31:99:4c:a6:67:
                    05:e6:30:48:e2:d9:88:d3:7a:ac:8b:a7:b1:a2:8d:
                    f1:03:99:87:35:11:db:c2:67:25:4c:64:75:9d:11:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:30:B5:FA:A8:A5:87:C4:2B:FB:34:B4:B5:70:67:98:60:0B:88
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ir4wtfqopYfEK_s0tLVwZ5hgC4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.240.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         38:85:30:1d:ca:43:59:b2:3e:14:43:2c:87:4e:1a:c8:d3:69:
         e9:4c:49:17:1d:d7:f8:83:20:09:85:f9:6a:f0:b8:55:52:7b:
         15:cd:14:c7:eb:fc:5a:e6:cf:22:fb:32:b6:6a:ac:f1:c3:93:
         f1:0d:7b:1f:03:ff:c3:bf:cd:f0:62:3e:dc:b5:0a:8d:1f:19:
         6b:e4:0c:e7:f8:a4:ea:fa:e0:63:fd:1a:1c:a0:02:66:78:a3:
         e7:6c:fa:4b:be:96:03:4c:3f:e3:87:4c:63:14:72:fd:8f:7b:
         ee:0c:1f:b8:b2:d8:c6:f5:fc:b0:a0:c7:1d:36:49:f1:c5:45:
         a4:66:9e:98:54:56:81:ad:a5:cb:ab:81:97:39:83:6d:2a:09:
         4f:f1:9a:5a:67:70:c7:f4:01:58:93:85:12:e2:bd:60:16:d2:
         6f:39:d9:72:60:46:5f:8c:16:5f:be:7f:24:e0:c3:e1:d2:60:
         83:64:27:eb:f1:05:0c:72:3d:cc:a8:e9:f4:6b:2a:a5:1f:3e:
         5c:d5:16:c1:c9:a9:92:e9:08:c4:3d:9f:66:f6:bd:27:58:39:
         b0:28:fa:fb:56:21:ca:97:46:41:5f:dc:f4:ea:cd:66:b2:73:
         64:48:b9:a2:e2:74:f5:8a:0f:53:fc:05:e9:2e:0b:2d:d1:66:
         b6:0f:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org