Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/q2D5IijLToRcS8lkjJyEbXMtBwE.roa
File:                     q2D5IijLToRcS8lkjJyEbXMtBwE.roa (raw, json)
Hash identifier:          4YAz6+uwGKQpjIa2TrwJOWb+r5WGxdpgn51NmhbLf30=
Subject key identifier:   AB:60:F9:22:28:CB:4E:84:5C:4B:C9:64:8C:9C:84:6D:73:2D:07:01
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       015F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/q2D5IijLToRcS8lkjJyEbXMtBwE.roa
Signing time:             Mon 01 May 2023 01:28:20 +0000
ROA not before:           Mon 01 May 2023 01:28:20 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        121.112.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:20 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=AB60F92228CB4E845C4BC9648C9C846D732D0701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:21:49:a3:c9:eb:fc:64:cd:ba:9b:5c:53:
                    fd:03:ec:8c:6f:df:34:2c:6e:4b:4d:4c:72:0e:d4:
                    d4:c2:1e:1d:cc:00:d3:1a:75:32:bd:5a:32:12:2b:
                    fe:67:67:3d:9b:6b:b3:38:d0:41:17:8c:29:e3:d4:
                    e4:38:b4:d3:44:2b:98:dd:44:be:1f:13:90:d7:f3:
                    99:4b:13:52:04:e5:7e:7c:77:d7:45:b4:94:cc:75:
                    cf:40:26:b8:4e:62:08:61:8d:23:a3:c1:66:0d:02:
                    47:2e:36:3f:dd:a2:4f:94:b3:79:eb:50:70:25:bb:
                    87:9d:00:62:b0:db:70:0b:ec:1a:33:51:d7:bc:b4:
                    1d:9a:b2:c7:a3:ce:fc:95:09:bb:9d:80:9f:43:c1:
                    88:70:1c:57:11:8b:ca:5a:02:26:cd:ea:c0:36:69:
                    c9:ab:be:dc:f0:2c:1a:22:db:ef:f9:25:4d:e2:65:
                    28:c4:94:9f:0b:38:fa:42:0d:7c:01:3a:80:d0:e5:
                    57:10:f1:b4:20:6d:65:ea:68:9e:5f:0c:97:e4:0f:
                    97:23:81:34:0e:97:0d:71:cc:6e:1e:9f:ab:f4:fe:
                    f5:5e:bc:d5:80:61:3f:81:b8:6d:2f:39:9b:54:93:
                    88:dc:cd:ec:31:51:4c:e4:d9:f7:28:71:f8:5d:1a:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:60:F9:22:28:CB:4E:84:5C:4B:C9:64:8C:9C:84:6D:73:2D:07:01
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/q2D5IijLToRcS8lkjJyEbXMtBwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.112.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         60:83:a5:1c:73:97:35:7c:a8:32:c3:51:45:0f:40:06:20:72:
         0f:1d:85:77:39:36:ab:b8:c1:be:da:d2:6b:fc:e3:4f:af:30:
         e2:59:b8:70:49:45:13:30:f6:2e:1f:42:d5:1a:64:53:dc:bb:
         b6:01:95:8e:53:fb:e3:57:8d:9d:e8:a7:a2:33:46:26:5c:37:
         8b:87:46:ac:95:20:d8:e9:26:dc:bf:19:e8:08:d0:11:d1:71:
         2b:ed:ac:0e:6f:20:34:ea:ac:b8:13:7e:a1:fb:69:8e:a1:0a:
         22:48:df:51:f5:e2:70:91:4f:88:ef:1f:60:48:d7:c0:43:ef:
         8a:5e:fa:21:bf:e8:ef:5e:c6:6a:72:1b:2c:ae:65:d9:91:53:
         4d:92:a6:61:a1:6c:33:d1:2a:8a:e6:b1:f4:79:9e:89:18:aa:
         ac:f6:8e:5a:91:bb:63:d9:de:aa:3d:df:b8:a8:f3:c8:c3:a9:
         74:f8:c7:4a:38:73:b0:74:7e:2e:57:7d:77:7a:a7:c6:05:00:
         94:ba:30:63:e2:90:b9:db:fb:ce:be:5a:8a:98:47:36:25:f9:
         ca:2c:bf:ab:d1:15:28:31:ad:2d:2a:b7:a8:9c:3c:f1:e1:02:
         c1:9e:d2:29:51:22:7f:58:4a:ed:2d:28:50:aa:92:a0:5f:de:
         ae:ff:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org