Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/mbKbQbT1Gmmkkh5rbfGBYIlYMho.roa
File:                     mbKbQbT1Gmmkkh5rbfGBYIlYMho.roa (raw, json)
Hash identifier:          EiE9RHvbzXnyt3McopjHsOW2sUOU812vsx7Gww3nEvU=
Subject key identifier:   99:B2:9B:41:B4:F5:1A:69:A4:92:1E:6B:6D:F1:81:60:89:58:32:1A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       E4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/mbKbQbT1Gmmkkh5rbfGBYIlYMho.roa
Signing time:             Sun 01 May 2022 01:31:00 +0000
ROA not before:           Sun 01 May 2022 01:31:00 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        61.126.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:00 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=99B29B41B4F51A69A4921E6B6DF181608958321A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:77:19:b0:bf:83:6f:2e:f8:a7:21:a0:25:
                    79:88:ea:db:1a:19:e7:63:3f:d1:a3:7b:f6:b3:eb:
                    cf:c8:53:c4:48:bd:b4:6c:b4:f1:7d:ce:07:ff:fa:
                    9d:d5:44:72:b5:72:9c:a9:89:87:e2:9f:c2:ec:34:
                    40:5a:a7:f0:8c:5d:d5:48:df:66:0c:03:14:97:f4:
                    c9:e3:cc:22:39:a7:3f:32:2d:58:f6:27:ec:a3:ab:
                    96:ee:7c:b7:a6:2e:7d:d1:60:2b:0f:64:a6:64:89:
                    b3:bc:c8:8f:40:9b:32:cb:b5:db:f2:c6:e8:b0:13:
                    45:1c:ae:f6:f4:63:9d:04:d4:ea:13:7c:42:1e:65:
                    58:0d:55:d6:36:54:c7:9b:43:ee:9e:76:9d:7d:9f:
                    a1:cb:50:35:2b:de:5d:80:37:7b:69:ac:2b:60:72:
                    37:c4:26:b2:68:78:69:3f:1c:89:4c:bc:27:15:1e:
                    f3:f6:2c:14:1d:2d:f1:46:3c:1f:8a:26:dd:93:89:
                    25:e4:3f:24:a4:6a:25:35:7d:5c:11:81:db:5e:26:
                    f9:f9:43:de:6a:ed:fc:2f:51:fd:94:9e:2d:b0:a6:
                    3c:d2:b3:ab:fa:ed:2c:c5:81:19:1d:f7:93:a4:83:
                    4c:1e:ec:16:94:61:25:2f:90:bc:29:22:52:9a:3f:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:9B:41:B4:F5:1A:69:A4:92:1E:6B:6D:F1:81:60:89:58:32:1A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/mbKbQbT1Gmmkkh5rbfGBYIlYMho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:fd:42:76:d1:65:ce:fb:f5:cc:54:86:c2:a6:4e:86:8c:
         c7:a0:ba:0e:b0:c1:dc:64:e1:ca:3a:fa:64:1c:75:eb:14:24:
         6f:a4:e0:a7:f4:38:59:64:27:11:15:d7:50:61:e3:f6:83:98:
         cd:1e:e7:a2:06:7d:98:a9:96:5d:37:2e:55:80:1a:b8:a2:d6:
         68:aa:a4:3c:42:27:13:8f:e8:5f:78:a6:b7:a9:c6:bd:b3:aa:
         86:6f:62:79:1b:54:1c:37:7a:4e:08:ae:38:98:5c:22:1d:fb:
         0e:b6:35:8a:58:c0:a6:02:9e:dc:8f:a1:35:86:3f:cc:41:0e:
         b6:eb:f8:27:96:64:f2:1b:d1:a4:f5:43:87:9d:ac:c5:af:87:
         a9:36:b6:83:6a:90:9e:34:0b:e2:ad:d1:6b:5a:16:b1:61:e1:
         f5:b9:42:46:68:9e:e6:c8:a7:c3:a0:d0:47:3d:ab:cc:10:a3:
         ad:04:b9:70:f2:8f:82:71:8d:a0:a7:89:d2:d0:5a:92:a2:47:
         9c:d2:53:15:ca:88:ad:a5:46:5a:52:bd:a0:d5:6b:4c:88:a1:
         df:23:73:a8:e1:21:31:9f:41:1c:60:85:e2:d1:c0:4d:0b:14:
         c0:7f:52:a7:ef:89:a2:79:e7:ac:85:24:9f:a9:0d:1a:e6:b6:
         cf:a6:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org