Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/rOVDezb6IDSV1G2Fb2YabQN9jT8.roa
File:                     rOVDezb6IDSV1G2Fb2YabQN9jT8.roa (raw, json)
Hash identifier:          xvsmT/S7GvpQRmexLbO6eFF53kj5KCrh87v9IYi9tS4=
Subject key identifier:   AC:E5:43:7B:36:FA:20:34:95:D4:6D:85:6F:66:1A:6D:03:7D:8D:3F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       012E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/rOVDezb6IDSV1G2Fb2YabQN9jT8.roa
Signing time:             Fri 05 Aug 2022 04:50:43 +0000
ROA not before:           Fri 05 Aug 2022 04:50:43 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.254.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:50:43 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=ACE5437B36FA203495D46D856F661A6D037D8D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:1f:64:43:e2:f0:b9:8e:87:cc:6c:43:c0:
                    6a:44:48:af:42:ea:3a:6e:89:e0:98:42:17:be:13:
                    4e:b6:42:6d:52:7c:61:f8:3d:a4:a1:3a:0c:fc:a1:
                    09:07:68:f5:f9:7b:c1:03:63:a7:ec:85:bf:1e:5c:
                    b2:cb:55:18:05:43:f6:32:12:cd:2a:da:a4:01:de:
                    c9:3d:ca:17:47:64:09:fb:a5:f6:07:a6:b9:fe:6b:
                    b4:55:fa:87:c7:fa:ce:4c:17:d8:75:88:b7:4f:72:
                    0e:ad:94:10:3c:f6:1d:89:37:f3:30:f8:91:b3:9d:
                    82:3f:34:d6:89:b6:e3:dd:5f:08:a8:95:63:60:42:
                    a1:2b:b6:04:b8:d0:5b:36:f9:bd:a4:6a:d1:12:2c:
                    ff:38:95:8e:c8:bf:67:86:60:84:07:ff:39:4f:b0:
                    d9:24:da:55:d0:fb:a1:33:7d:90:bf:45:3a:c8:63:
                    95:c0:4b:8a:bf:3d:ba:11:93:3e:a9:0b:c5:73:65:
                    1e:4f:3c:ee:46:c9:41:02:5c:bc:b9:37:15:9b:0a:
                    14:ce:25:82:fb:36:77:fd:20:3a:e0:db:72:37:22:
                    1c:b7:9f:41:73:0c:39:05:50:81:66:66:bc:6c:9b:
                    0f:07:f1:16:35:18:e5:77:f1:5c:1f:83:7e:67:49:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E5:43:7B:36:FA:20:34:95:D4:6D:85:6F:66:1A:6D:03:7D:8D:3F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/rOVDezb6IDSV1G2Fb2YabQN9jT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b5:9c:5c:d1:3a:53:43:75:0e:1a:f5:86:a7:30:87:29:d2:de:
         cc:91:1a:6d:63:e6:68:aa:72:ef:93:69:cc:1b:14:5a:db:55:
         91:2e:d1:f0:07:e1:a6:85:9d:79:c9:21:93:07:b0:5f:d6:0d:
         59:70:a3:2d:34:cb:35:a2:b7:ad:b9:f8:1f:b3:d1:19:85:4b:
         ff:0b:96:7d:9d:6c:62:97:5c:80:fc:86:a6:e5:f0:41:df:94:
         eb:b0:54:7b:98:4f:d4:39:55:29:4b:16:92:81:e3:83:40:c5:
         ca:fb:83:5c:0a:09:42:e7:33:fe:ce:5e:65:c1:78:5e:c3:98:
         96:51:b6:75:78:e2:a8:4c:09:a2:37:40:b6:0c:69:1d:2f:2c:
         1e:6d:90:1a:2e:49:11:61:ca:a6:55:99:a1:b7:2b:3a:d5:8a:
         c5:f2:fb:44:a5:ca:c1:56:27:25:61:87:ff:1f:ff:01:81:2c:
         9c:44:13:8e:14:73:48:3d:fd:3c:0c:5d:b6:84:37:fe:1d:50:
         04:78:b9:75:12:d8:38:35:ec:41:02:3a:a1:2d:f1:68:5c:d6:
         80:1b:a5:1e:31:5f:3f:03:3e:d3:95:07:0c:f9:f4:cd:f7:30:
         6e:cd:f9:fe:1c:6a:cf:8b:48:a6:46:56:27:97:29:d5:73:c6:
         52:3f:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org