Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/pJqdu7oBYGfwaPIpY0A8pCH2cbg.roa
File:                     pJqdu7oBYGfwaPIpY0A8pCH2cbg.roa (raw, json)
Hash identifier:          kCbB0lNBRr8TfTHBL+01qECXRfSbkbGOB4YHniunPkA=
Subject key identifier:   A4:9A:9D:BB:BA:01:60:67:F0:68:F2:29:63:40:3C:A4:21:F6:71:B8
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       F0
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pJqdu7oBYGfwaPIpY0A8pCH2cbg.roa
Signing time:             Sun 01 May 2022 01:31:05 +0000
ROA not before:           Sun 01 May 2022 01:31:05 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        58.88.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:05 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=A49A9DBBBA016067F068F22963403CA421F671B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:2b:57:88:e7:a4:c0:40:e1:4d:99:bb:8c:
                    fa:91:06:10:8d:c5:10:b5:c9:06:61:37:94:44:12:
                    1a:95:bf:95:ad:30:47:b6:f4:3a:e8:ef:3d:a4:20:
                    96:94:d1:5c:93:72:14:a8:38:97:7e:75:25:06:ba:
                    a3:8b:cc:84:f8:12:4c:91:5f:e1:99:39:54:4e:b9:
                    f7:17:ac:b1:17:2c:a3:49:6f:c6:19:4f:78:3c:01:
                    93:9e:e2:70:e9:c9:0f:6f:0f:88:68:ef:c8:b8:46:
                    01:6b:09:7c:ed:91:d6:74:0d:2b:00:89:21:5c:e8:
                    83:14:f1:4f:94:0a:79:6c:26:0e:22:5d:9b:00:d2:
                    3d:a9:51:72:42:14:bf:e5:c6:65:44:29:3d:a0:cb:
                    bc:f5:55:66:72:94:8d:e1:6d:86:9d:31:fa:43:89:
                    1f:55:5b:aa:bf:1d:65:92:58:ed:ba:1e:92:81:e5:
                    ed:5c:b9:80:5e:48:79:4e:10:1a:ba:ac:93:07:78:
                    a0:0e:e6:d8:0e:81:37:3a:c0:b2:78:e5:35:eb:a7:
                    fe:fc:29:69:bd:fc:ef:bf:bf:21:90:ea:b2:ff:64:
                    a1:a6:ae:53:6a:cb:a6:73:61:d7:54:25:2f:32:53:
                    87:2e:53:8c:54:8a:8c:b2:63:97:5a:ad:45:25:fa:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9A:9D:BB:BA:01:60:67:F0:68:F2:29:63:40:3C:A4:21:F6:71:B8
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pJqdu7oBYGfwaPIpY0A8pCH2cbg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         30:82:b5:ff:c6:fa:9a:d0:70:ff:8b:85:d9:d3:d7:d3:66:e1:
         21:e3:e1:e1:d0:95:56:40:61:77:2d:de:af:aa:cc:2f:10:2d:
         4d:87:be:c0:46:09:c6:f9:f2:8b:b2:38:83:f0:a8:06:35:aa:
         5e:86:5c:37:f4:f3:74:a9:0c:32:75:6e:71:9e:d3:d3:ca:1b:
         c9:64:cb:28:08:18:bf:24:1e:8a:90:11:51:4d:17:f4:5c:64:
         37:f1:f2:3f:10:b6:1e:93:fa:d4:f5:6f:e3:01:df:a4:49:4f:
         d4:0c:bc:b7:9c:08:11:c6:d8:0f:43:01:a4:37:11:3e:52:89:
         92:db:ea:a5:a0:da:bb:ec:fe:41:7b:f8:3e:bc:28:f5:a8:56:
         9b:46:31:40:1c:d9:c2:31:c3:6a:e5:53:6c:9e:75:4a:ff:75:
         f2:03:67:b1:88:f1:41:4f:b0:98:65:f3:12:3a:33:bc:77:bb:
         a8:ab:3e:43:63:6d:37:51:3e:3c:86:46:e7:be:96:4f:87:7a:
         22:4e:4a:d2:7a:6d:80:a4:8a:a7:78:8b:cc:79:10:ed:60:52:
         23:8e:ad:f5:87:8f:c7:bf:65:b3:66:e4:0a:e6:2e:13:8c:5e:
         ab:90:99:c2:a7:0a:b1:9b:0d:f2:50:ae:e0:ff:81:d5:99:f7:
         e8:54:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org