Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/p8irn8jjhaH5zA0N5Xn91ayY3n4.roa
File:                     p8irn8jjhaH5zA0N5Xn91ayY3n4.roa (raw, json)
Hash identifier:          RLdsqWoIgVrAAIn84n3IcNhjig20hjwAw88lcQ/38A4=
Subject key identifier:   A7:C8:AB:9F:C8:E3:85:A1:F9:CC:0D:0D:E5:79:FD:D5:AC:98:DE:7E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       013D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/p8irn8jjhaH5zA0N5Xn91ayY3n4.roa
Signing time:             Fri 05 Aug 2022 05:08:59 +0000
ROA not before:           Fri 05 Aug 2022 05:08:59 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        220.104.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:08:59 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=A7C8AB9FC8E385A1F9CC0D0DE579FDD5AC98DE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:ee:e2:7c:1f:6d:5c:c8:f9:ca:b7:e1:21:
                    52:43:d5:02:4d:79:86:6e:cb:fb:eb:96:73:65:fe:
                    af:dc:a8:66:a9:7a:fb:0f:0c:d6:1a:b2:88:07:a9:
                    64:21:a7:77:1c:93:77:35:5d:8e:4f:85:74:9e:b7:
                    fa:a1:55:37:50:16:6e:43:b2:76:95:a0:8e:e8:41:
                    7d:e4:c8:84:b0:07:7c:72:0e:0b:e5:f7:8b:6f:42:
                    3f:06:66:88:3c:b5:6d:59:ad:44:f5:8e:71:33:1a:
                    fe:5c:d7:6f:78:56:f6:5f:44:94:34:e6:c9:ff:24:
                    3e:ed:87:4e:eb:ae:0a:2d:86:6d:20:59:6d:74:ba:
                    9c:5b:79:3b:57:b4:2c:5a:70:a8:68:80:bd:79:cf:
                    70:14:a2:f2:fc:28:cf:b6:42:d1:9c:62:e6:53:fe:
                    3e:36:4f:26:a2:f1:bf:dc:7f:a7:8e:03:00:a5:1e:
                    4c:a9:37:7f:44:94:1a:59:34:87:81:4b:a4:b7:d5:
                    ae:c8:41:a8:34:c0:d3:d8:13:87:59:ef:be:e2:ff:
                    96:99:d9:52:b7:7d:67:20:79:93:71:21:a0:2f:61:
                    a7:b1:8f:d4:56:9b:26:62:2b:89:e7:76:38:a3:7b:
                    6a:84:6b:a0:fe:3b:d8:a6:4c:a2:33:cc:fb:b2:92:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C8:AB:9F:C8:E3:85:A1:F9:CC:0D:0D:E5:79:FD:D5:AC:98:DE:7E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/p8irn8jjhaH5zA0N5Xn91ayY3n4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.104.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:f3:59:59:c1:7a:0b:c3:da:2e:b9:50:cf:11:3a:32:66:
         a1:7e:76:e0:6a:14:e8:7d:ae:95:67:47:a8:b0:2d:ed:a6:62:
         3e:26:10:9c:91:f6:3a:6d:86:a3:e0:8d:4f:89:b4:f2:44:2f:
         48:ee:17:ff:23:80:36:41:65:28:e0:73:e8:74:f1:7e:59:4a:
         2b:fc:f7:54:ff:a6:10:ec:ef:8f:46:47:b7:3a:96:77:c8:62:
         69:78:98:af:15:33:3d:ec:d1:06:7e:41:74:55:f2:4f:a8:ce:
         ac:ab:6b:25:72:f6:f9:bb:0e:c4:1a:48:49:8f:dd:e2:99:7e:
         88:59:f5:ff:fc:db:d9:51:02:4d:57:a9:8b:c6:c8:4a:f3:74:
         82:22:45:40:e5:f6:fe:fd:fe:56:e3:bc:f9:1f:c7:be:bd:46:
         98:ae:b6:e1:b4:fe:81:c7:e9:4c:14:0b:5d:03:7f:5a:03:0f:
         56:9f:fc:74:c8:db:e5:a4:82:86:e5:31:17:7e:fd:f9:aa:35:
         15:c1:52:ee:b7:fc:fe:1c:61:cd:ce:b5:3a:e5:84:ca:c1:85:
         18:53:90:b9:82:67:99:10:cb:3a:29:3b:d9:f7:c8:d4:eb:20:
         84:00:f0:84:06:33:60:af:44:8c:ac:32:6e:be:90:a2:f7:6b:
         ce:c4:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org