Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/mZrTdeE0AtAjhDCa-r_OV12w6jg.roa
File:                     mZrTdeE0AtAjhDCa-r_OV12w6jg.roa (raw, json)
Hash identifier:          cTa8Fq8J/0V9GCZr6ZRU9Y+DTHdSqvzBwIE1Nween04=
Subject key identifier:   99:9A:D3:75:E1:34:02:D0:23:84:30:9A:FA:BF:CE:57:5D:B0:EA:38
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       DC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/mZrTdeE0AtAjhDCa-r_OV12w6jg.roa
Signing time:             Fri 01 Apr 2022 01:28:21 +0000
ROA not before:           Fri 01 Apr 2022 01:28:21 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        61.112.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:21 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=999AD375E13402D02384309AFABFCE575DB0EA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:b1:cc:7e:75:ec:d3:09:a2:b4:23:29:2f:
                    dd:f1:28:a0:a1:43:77:25:28:f7:7d:79:45:31:55:
                    c8:67:1d:a0:51:fa:c6:bf:49:2e:a0:e0:01:0c:93:
                    f7:5d:1f:b7:9c:5d:8f:60:aa:07:4f:ef:fd:0d:41:
                    e4:44:9b:9f:19:9f:29:3a:57:3e:ef:cc:6e:1c:2e:
                    da:f4:59:1c:37:85:73:40:b4:04:32:f7:b8:79:83:
                    ff:bb:53:61:88:e4:f8:de:12:09:e1:ab:eb:1c:a0:
                    77:40:cc:44:23:14:bc:d2:6e:0d:b9:df:be:6f:e1:
                    44:52:d0:4b:85:43:cd:1e:30:b4:0b:65:7b:9c:ac:
                    80:3d:41:ea:51:ab:1f:02:c9:a6:ea:73:db:ce:31:
                    12:53:d5:52:c1:d6:c0:18:69:4a:7c:a9:c5:42:22:
                    12:7b:0f:0a:07:f0:0c:8e:44:eb:4b:e1:fe:55:a3:
                    d3:ac:f1:7e:03:67:44:ec:77:4e:26:74:16:e9:a2:
                    ff:9b:57:4b:f5:00:07:a1:99:a6:d5:70:ab:30:fd:
                    67:fa:eb:ba:ef:f4:c6:c4:14:90:7f:1a:96:67:70:
                    8e:44:d7:1b:54:f4:cc:f8:e4:29:f4:bb:5f:72:71:
                    f6:17:1d:5c:04:f0:71:c4:91:a9:76:94:e0:33:10:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9A:D3:75:E1:34:02:D0:23:84:30:9A:FA:BF:CE:57:5D:B0:EA:38
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/mZrTdeE0AtAjhDCa-r_OV12w6jg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.112.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:1e:8c:10:90:8e:97:72:14:cb:29:f3:e0:b8:a8:29:4f:
         a6:4f:3a:8b:9b:f1:06:09:5c:73:f5:d0:41:6b:90:fc:dc:f4:
         ab:09:6b:e1:21:ca:57:88:80:dc:de:4c:b1:d0:e9:b9:cc:26:
         73:f4:1b:ba:86:00:f2:8f:af:f0:ee:96:b7:54:9f:59:0e:fb:
         02:8c:e2:d9:9d:05:70:83:23:3e:d0:19:62:e8:66:29:ab:79:
         30:a1:c3:6c:cb:17:92:cf:06:c9:81:96:21:bd:4a:f9:09:80:
         87:66:6d:9f:d0:28:65:12:5c:57:14:dc:80:35:7e:46:5d:60:
         a5:c6:9d:5a:92:61:37:18:11:9e:7e:53:0e:d1:20:fe:49:e3:
         cc:86:aa:ab:2e:9c:18:2f:4e:ae:bf:35:bf:ae:d1:10:91:4d:
         b4:32:a4:27:8d:1c:37:fe:71:9c:c3:be:95:93:e8:18:08:de:
         33:11:5c:1a:28:f0:be:23:38:5a:51:69:0f:74:5f:1a:e2:66:
         a5:53:90:a7:95:8b:d3:6e:d1:7e:7c:db:89:5f:ea:6a:1e:df:
         a7:b0:73:de:2c:af:71:31:01:ef:85:d7:8b:49:07:5b:c1:65:
         f3:58:32:8f:2f:bc:b3:4d:2f:53:ed:71:85:df:1e:2c:55:8e:
         e6:f0:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org