Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qF-O_FJtTGff7T7biIVdyvHR9J0.roa
File:                     qF-O_FJtTGff7T7biIVdyvHR9J0.roa (raw, json)
Hash identifier:          9bX6xOvYZ12St823UhQ/oeprnJd39ewd5h31sOzspUs=
Subject key identifier:   A8:5F:8E:FC:52:6D:4C:67:DF:ED:3E:DB:88:85:5D:CA:F1:D1:F4:9D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0140
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qF-O_FJtTGff7T7biIVdyvHR9J0.roa
Signing time:             Fri 05 Aug 2022 05:10:51 +0000
ROA not before:           Fri 05 Aug 2022 05:10:51 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        221.113.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:10:51 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=A85F8EFC526D4C67DFED3EDB88855DCAF1D1F49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:69:32:94:2c:41:36:76:70:2d:bd:e0:1b:
                    c5:17:a2:21:54:99:d1:e7:62:de:05:9b:96:05:85:
                    bc:32:d9:a2:c8:b8:1e:fe:bc:c8:29:79:3a:88:f7:
                    40:ce:ff:78:36:b5:e6:6e:cd:77:1d:90:cc:0c:2a:
                    18:39:3f:b4:f9:0b:ed:34:1e:37:d2:0c:d6:33:fc:
                    58:2a:85:61:7e:ee:1e:35:79:14:44:67:13:45:d6:
                    f0:83:05:30:96:79:f2:b2:57:a4:b2:62:4e:c2:cc:
                    26:8c:80:31:57:61:e0:b7:4d:3b:6c:72:c3:1e:3d:
                    be:09:48:61:c2:c6:54:e2:c2:5d:8c:59:31:47:a4:
                    70:74:44:91:9c:f4:b3:f5:90:95:f3:f9:4d:71:d2:
                    e5:e2:23:d4:ff:46:07:a1:72:a7:54:97:e2:c4:48:
                    30:81:0a:e7:14:b2:a0:88:07:09:0c:fc:71:d0:45:
                    d1:12:e8:4f:af:5f:b4:13:96:f3:a0:90:c1:df:e9:
                    f7:3e:2d:2f:a9:90:2f:48:a6:f6:37:c1:cb:54:51:
                    54:ca:39:d0:e2:b4:b9:ca:6a:70:0b:d7:91:20:ff:
                    81:d6:83:ef:4b:ee:d7:21:6c:74:14:b6:c6:c9:12:
                    dc:65:59:95:cc:04:1b:13:35:38:36:75:df:ca:54:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:8E:FC:52:6D:4C:67:DF:ED:3E:DB:88:85:5D:CA:F1:D1:F4:9D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qF-O_FJtTGff7T7biIVdyvHR9J0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:92:71:37:4a:7b:bc:9c:e3:ed:5c:0f:89:f1:ba:71:4e:bb:
         c4:87:7d:0a:bc:00:1f:c9:72:f8:b6:10:43:e1:7c:73:b0:11:
         6f:1e:61:c8:42:4f:b9:f7:1e:a3:e9:e7:2a:11:47:88:7b:59:
         09:45:08:55:fe:da:e3:13:2a:b3:f1:aa:f8:c8:da:37:c7:f9:
         01:f1:5e:5d:f9:6f:67:ca:ab:29:fe:92:88:e7:8f:0b:d9:f3:
         d1:37:16:d0:7f:fb:8f:59:f5:42:d8:bc:7f:78:83:64:b5:9f:
         67:91:80:38:54:bc:e8:e5:3c:37:4d:e3:20:16:e1:13:fa:5a:
         b7:01:8d:b2:1b:a5:3e:3c:d7:63:b8:bb:1a:f3:81:47:17:8b:
         b1:36:96:73:b3:b1:68:39:56:e7:62:1f:36:f7:d3:d2:ff:6d:
         59:94:39:45:16:f9:2d:11:8e:f1:72:82:27:4c:0d:f0:73:99:
         c2:5e:00:d8:16:74:6b:9e:c4:92:d0:df:2d:c4:97:82:2b:f2:
         58:fc:b5:cb:6d:48:de:f9:d7:0f:0c:dd:85:1e:4c:f2:af:a7:
         fe:98:8d:16:e2:1d:e5:58:33:5c:62:95:c7:a6:19:ce:a7:69:
         52:91:fc:2f:70:c3:af:c8:27:80:ca:03:e8:66:a7:1e:cc:56:
         31:82:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org