Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/nBNax47wmL64p5H-80sKDDW2ynA.roa
File:                     nBNax47wmL64p5H-80sKDDW2ynA.roa (raw, json)
Hash identifier:          2khip6P/wGFvFGmUrcwKBGZ4k8gpA6wYuYVi7s81KMw=
Subject key identifier:   9C:13:5A:C7:8E:F0:98:BE:B8:A7:91:FE:F3:4B:0A:0C:35:B6:CA:70
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0168
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nBNax47wmL64p5H-80sKDDW2ynA.roa
Signing time:             Mon 01 May 2023 01:30:23 +0000
ROA not before:           Mon 01 May 2023 01:30:23 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        125.200.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:30:23 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9C135AC78EF098BEB8A791FEF34B0A0C35B6CA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:10:7f:e6:3d:60:4c:90:15:f8:4a:7f:de:
                    9c:42:bc:1a:cc:84:ea:18:33:81:11:51:d4:8d:96:
                    8f:70:0f:00:18:46:34:65:88:ec:9c:3e:c4:64:91:
                    82:a6:76:2c:ee:58:e4:81:a6:66:79:37:a3:c2:65:
                    87:7a:9b:de:ca:69:03:af:dd:b1:ce:75:df:ae:ef:
                    48:2c:f8:19:f3:ce:1e:b4:02:e1:7b:e3:39:88:d3:
                    18:91:d8:8c:54:1e:8a:b4:2d:92:8a:8d:dd:28:ba:
                    20:78:88:34:97:3b:4c:12:92:0d:6d:b4:0e:d6:a9:
                    e8:30:c4:2e:50:c8:00:dc:f4:e5:1a:0c:0c:ba:95:
                    21:24:ba:61:b2:cf:eb:4a:28:f4:37:fd:0f:5d:29:
                    55:17:de:c5:30:0e:bb:4e:3b:6e:88:cf:3f:ff:eb:
                    e0:a9:38:30:a6:19:45:28:76:dc:13:43:ee:ff:f8:
                    7f:57:25:df:97:8d:eb:e9:30:6e:30:41:a8:61:fa:
                    aa:aa:6e:a0:18:f7:7d:7e:a3:d4:74:55:37:f8:e5:
                    ce:86:04:5e:ac:f6:ac:9b:e6:5d:d6:4c:7b:8a:35:
                    ed:19:62:f3:a7:3b:1e:a9:e4:ae:db:cd:20:b0:af:
                    d5:fc:ef:43:a8:6e:ea:73:2f:69:8b:f9:69:22:81:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:5A:C7:8E:F0:98:BE:B8:A7:91:FE:F3:4B:0A:0C:35:B6:CA:70
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nBNax47wmL64p5H-80sKDDW2ynA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         ca:fe:7a:0d:75:fe:2f:dc:9d:07:e0:7d:02:91:71:14:99:41:
         a7:15:1b:25:70:ed:b3:a3:2b:35:91:83:70:d2:d1:ec:9f:26:
         f6:81:b5:40:43:2e:a4:7e:f8:54:19:dc:b5:1e:8e:8e:9e:48:
         db:79:97:3f:da:d9:12:60:07:6e:2a:50:ec:14:28:05:57:df:
         a4:8d:af:17:76:b0:1e:f7:d2:fc:c3:55:e8:2c:ab:22:ec:2a:
         ac:21:4d:5d:78:a7:b0:5d:96:40:0a:24:ec:88:1c:a5:69:2e:
         3e:69:cd:50:ef:9d:30:eb:ca:2f:ef:b5:4d:20:1f:fa:b3:a0:
         50:a2:f1:c0:1e:ff:6d:d1:ed:6d:48:eb:9d:eb:d0:d0:4a:cc:
         c8:fc:6b:d2:1b:e9:9c:fc:9e:43:af:38:46:f6:dd:6a:86:47:
         3d:c5:53:f1:b5:a0:7b:ee:1c:02:fd:1d:cc:bc:76:28:17:cc:
         a1:45:c1:8e:07:db:36:69:fb:49:01:7d:92:42:91:f0:29:17:
         b2:ca:61:b1:32:18:68:ae:fc:e4:2e:b8:b4:71:02:69:6e:4f:
         1b:bf:77:b9:79:c9:90:a6:52:0a:85:41:f0:91:ea:45:95:46:
         c5:64:26:63:64:e3:5f:d2:2e:45:82:51:89:4d:84:fb:dd:f5:
         88:dd:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org