Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/liCBYAuH_8rhx-QgPCHnOMh64_Y.roa
File:                     liCBYAuH_8rhx-QgPCHnOMh64_Y.roa (raw, json)
Hash identifier:          vDW9ThqPxy1eDDusJKOG+wZFNjurq0UX6JSjxotvJy0=
Subject key identifier:   96:20:81:60:0B:87:FF:CA:E1:C7:E4:20:3C:21:E7:38:C8:7A:E3:F6
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       FB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/liCBYAuH_8rhx-QgPCHnOMh64_Y.roa
Signing time:             Fri 10 Jun 2022 02:36:12 +0000
ROA not before:           Fri 10 Jun 2022 02:36:12 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        211.130.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 02:36:12 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=962081600B87FFCAE1C7E4203C21E738C87AE3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:e3:07:6f:ed:d1:0d:4e:69:31:02:ab:b3:
                    f8:50:d2:3a:ce:5d:11:0d:a1:44:5d:2e:7c:49:86:
                    27:3c:f8:98:10:07:08:e8:49:d1:c1:bc:19:61:f7:
                    1d:cd:35:54:5a:62:29:e4:cc:ff:7d:37:a4:a5:ab:
                    6b:4c:bb:52:18:f6:bc:c4:10:f6:3b:01:62:ab:46:
                    b8:89:84:71:bc:0b:3e:ce:a7:5c:e0:59:12:2a:0a:
                    46:76:30:c8:ad:67:3c:1c:da:d8:de:bd:74:66:80:
                    bc:97:53:e4:5f:cb:2a:45:5c:b9:54:7f:09:20:07:
                    2f:cb:07:91:80:86:c9:f0:6e:93:a1:a2:84:4c:de:
                    3a:51:89:54:e5:a3:70:bb:b9:b2:75:fe:ee:3e:7a:
                    77:30:ab:dc:34:7c:0c:30:b2:82:20:86:f2:07:93:
                    2a:18:20:8e:cb:93:00:7e:a6:09:12:a0:d5:4f:19:
                    18:cc:1b:78:71:b4:38:94:c8:46:6e:55:2f:e8:c2:
                    da:a1:cb:2b:d1:1e:ec:39:d7:ac:e1:0e:2f:84:50:
                    33:69:19:f9:2c:cc:71:c3:7b:2d:a7:d2:e6:be:c9:
                    05:db:fb:d2:db:88:90:7b:22:92:9e:91:0b:fb:b0:
                    a1:7e:29:3e:da:f9:6d:f8:44:a3:97:cb:40:b8:0a:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:81:60:0B:87:FF:CA:E1:C7:E4:20:3C:21:E7:38:C8:7A:E3:F6
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/liCBYAuH_8rhx-QgPCHnOMh64_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:5b:a1:d7:0d:b0:ea:14:8c:80:e4:76:3c:26:0b:3d:73:
         b6:fc:d5:d3:13:a9:9c:e4:4c:d7:a7:f6:e0:b2:d0:b4:96:81:
         3d:b0:02:1b:f4:59:db:08:36:02:a6:df:fc:de:d5:bd:a1:30:
         17:bf:57:42:e2:bf:56:65:7e:93:2a:72:6e:46:7c:55:66:86:
         a7:39:8a:7c:30:7c:47:1c:22:28:2e:b2:3f:54:b4:ba:6f:cb:
         cc:ed:1f:43:7d:d9:7b:9e:df:47:e0:3c:b1:9d:0a:12:c9:a0:
         ee:20:d4:47:72:e1:ee:30:94:c9:14:ae:9c:14:17:be:3a:08:
         b9:38:4f:a8:38:71:b4:27:47:4a:af:23:de:73:60:3d:c1:09:
         2a:a0:33:18:31:55:60:de:8f:5f:bc:a1:a9:8c:a3:8d:a9:a8:
         f5:a3:b6:05:43:f9:13:35:b9:1d:0b:4b:6f:12:60:5e:3b:36:
         4c:9a:00:b8:1d:2c:2d:b1:6c:b1:38:b5:39:14:eb:8e:b8:48:
         4d:80:d0:73:09:66:b6:4b:4b:74:80:f8:f9:89:fe:81:75:c8:
         08:dd:30:8d:a7:df:51:1d:67:61:75:05:fb:6c:de:30:72:f5:
         d5:e6:7c:15:e1:25:f1:62:95:5f:61:11:9f:f4:4f:fe:e0:c3:
         99:b0:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org