Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/plaNlisiIXOZprZ3VUhh3jT2LmI.roa
File:                     plaNlisiIXOZprZ3VUhh3jT2LmI.roa (raw, json)
Hash identifier:          q50BoNYmK8hzSoklFxDoKkGwPHHqIfNwZR3Jh0VUMkw=
Subject key identifier:   A6:56:8D:96:2B:22:21:73:99:A6:B6:77:55:48:61:DE:34:F6:2E:62
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       C1
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/plaNlisiIXOZprZ3VUhh3jT2LmI.roa
Signing time:             Fri 01 Apr 2022 01:28:14 +0000
ROA not before:           Fri 01 Apr 2022 01:28:14 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        210.254.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:14 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=A6568D962B22217399A6B677554861DE34F62E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:a8:dd:7b:a6:d0:4a:f8:34:f8:0a:31:5a:
                    29:c1:5e:85:08:41:bd:da:d7:2a:85:e8:28:9a:e9:
                    d1:52:38:10:00:93:f3:97:f2:37:4e:51:57:19:8c:
                    b7:fb:6f:43:e1:a5:f5:43:99:2c:bd:be:59:64:c3:
                    f7:83:56:d9:a9:fa:40:c6:8e:fb:d3:54:68:a7:ba:
                    30:ec:38:38:82:bb:e2:91:c7:59:14:48:0a:f2:b7:
                    8f:e8:85:5d:ed:76:b8:26:82:46:03:38:67:dc:d0:
                    0b:60:eb:3e:d3:aa:2b:fc:da:1c:28:de:53:23:68:
                    00:1b:8a:eb:ed:19:58:80:f0:c9:34:f5:ae:95:9f:
                    3a:55:05:90:6d:1e:05:6a:fd:26:e4:50:0f:59:f6:
                    15:33:ab:15:30:c6:d4:41:da:21:51:fc:34:0e:0e:
                    99:5c:51:10:30:16:fc:ed:d5:10:da:49:43:ec:e8:
                    2a:a7:7b:85:17:33:07:0b:65:fc:d0:8a:b3:96:aa:
                    9a:1d:71:4a:e3:42:9e:2e:57:91:2f:df:69:7b:09:
                    3d:79:04:c6:86:e2:cf:0c:d0:e7:0c:8a:ad:7c:be:
                    1c:70:ff:e0:89:37:86:f5:34:4a:42:59:52:be:81:
                    69:01:ba:95:92:30:d2:77:26:63:e7:99:33:ff:47:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:8D:96:2B:22:21:73:99:A6:B6:77:55:48:61:DE:34:F6:2E:62
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/plaNlisiIXOZprZ3VUhh3jT2LmI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         37:be:e2:27:0e:41:3a:4b:e2:4d:23:90:b5:39:66:0e:e9:58:
         b6:7d:90:ab:88:e5:9d:d7:6a:0b:c8:dd:a9:04:74:a0:f3:ef:
         d1:cb:cb:5d:96:db:69:96:c0:90:0e:cc:a2:3f:f5:83:b5:5c:
         6b:16:b3:a8:28:b2:ab:51:06:b6:bb:9f:c3:38:fa:99:10:9a:
         64:fe:fd:8b:1b:81:13:67:b9:78:61:ad:f6:a5:2a:cb:72:da:
         81:67:cc:3c:c2:0d:b3:bf:70:b6:a5:ba:50:39:c9:88:a9:2d:
         c5:9c:fc:34:5b:09:4d:1b:59:66:a6:c7:0f:75:5c:df:ac:c2:
         51:a9:1a:cf:65:e3:a1:59:b6:e4:07:fc:83:48:44:81:08:da:
         6a:53:60:79:05:1f:5a:62:68:18:c0:82:2f:1c:19:73:ae:09:
         74:bb:3d:09:05:89:03:d4:6e:46:3d:f4:de:de:dd:a2:32:c8:
         5b:29:71:d0:ab:11:92:01:26:43:86:4c:4f:38:9e:d6:6f:24:
         40:c9:23:82:bf:8f:72:5e:3f:34:13:76:a9:71:f4:19:8d:4b:
         33:7e:52:df:3e:7e:db:10:c7:ce:59:80:f9:ed:d8:da:e4:09:
         2e:69:38:78:ee:0a:75:52:02:79:3f:52:88:fc:05:99:f3:a3:
         ad:79:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org