Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/si9Qwkq9wZUUWgQvG6-YBCgUDIc.roa
File:                     si9Qwkq9wZUUWgQvG6-YBCgUDIc.roa (raw, json)
Hash identifier:          7K3H2cvoAFc3WhqG1gSpaR15tar07WLj/Fe3+Q3K9LY=
Subject key identifier:   B2:2F:50:C2:4A:BD:C1:95:14:5A:04:2F:1B:AF:98:04:28:14:0C:87
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       EB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/si9Qwkq9wZUUWgQvG6-YBCgUDIc.roa
Signing time:             Sun 01 May 2022 01:31:03 +0000
ROA not before:           Sun 01 May 2022 01:31:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        114.160.0.0/11 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=B22F50C24ABDC195145A042F1BAF980428140C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:40:1b:22:fd:d4:4c:31:40:31:37:eb:43:
                    95:20:ef:b8:b1:fc:e3:60:64:0a:98:ab:cb:c1:a6:
                    28:9c:04:17:6f:a8:56:8a:a9:80:d0:64:19:c4:49:
                    3c:32:31:b2:35:58:ea:6e:5a:4c:e5:52:83:1b:62:
                    77:8d:7c:c2:93:f9:02:2b:79:ab:49:7f:7e:ec:00:
                    8c:54:2e:ec:a6:6d:2b:5c:4e:df:a2:00:d6:36:d0:
                    63:68:04:05:5f:8d:64:32:98:17:33:14:8f:50:19:
                    d2:19:0b:bc:41:66:f5:ef:99:68:67:c7:3d:e1:4f:
                    b8:fb:4a:3d:d5:53:6d:fe:2b:09:02:df:93:2c:0e:
                    da:9b:e3:57:9f:bb:70:95:fa:1b:c3:f1:7c:61:d3:
                    d1:d3:5f:00:ef:f8:3f:53:23:be:f0:53:40:dd:80:
                    27:84:53:ac:ce:7a:f6:cb:48:d3:25:2e:49:48:78:
                    02:f1:56:77:64:71:1e:7f:71:f3:16:f6:38:f5:f3:
                    be:be:68:a0:6e:00:37:86:d4:ab:4a:cc:a9:f8:5e:
                    b9:33:87:ce:63:c7:84:88:ed:a5:1c:66:8a:f8:c6:
                    20:13:21:f2:de:25:96:85:d6:6f:67:b7:36:b6:a9:
                    88:ca:1c:49:b2:2d:cc:53:de:df:13:b9:5c:ce:b3:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:50:C2:4A:BD:C1:95:14:5A:04:2F:1B:AF:98:04:28:14:0C:87
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/si9Qwkq9wZUUWgQvG6-YBCgUDIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:1b:b1:33:de:63:a3:7d:e7:77:d9:51:6a:b0:f5:e1:02:
         6e:cc:75:27:7f:89:c4:3c:16:09:7c:b7:8a:e8:cd:9f:3e:3e:
         51:fa:16:04:39:58:57:47:99:f8:2b:10:bf:6d:0a:3c:f8:00:
         50:39:30:64:ae:bb:a5:43:fe:91:ac:9a:01:ed:1f:ee:4a:9d:
         1d:19:3c:c4:de:79:61:05:02:0b:f0:42:fa:f1:a2:60:9d:f7:
         f2:ef:f3:93:65:f6:d5:47:9a:e4:f1:4e:07:40:84:66:f9:33:
         54:d5:1e:d6:36:ab:ea:08:15:d0:05:9a:6c:a8:7b:4c:de:b0:
         00:4b:35:ca:cd:79:bc:69:f8:51:fc:a2:3b:65:68:50:6b:c1:
         90:84:21:ae:6e:a0:52:26:7a:8b:b6:29:78:f7:4f:d6:50:f6:
         8f:85:5f:5b:5a:27:46:e6:0b:42:26:58:14:58:ab:f6:61:63:
         f4:25:04:7d:fb:eb:29:7c:00:8f:c9:b4:36:06:13:ff:4c:bd:
         3e:d3:ad:29:65:b7:e1:a4:f5:07:74:9f:ef:5e:17:3e:c8:63:
         47:b2:28:53:2f:d4:23:8a:4a:4b:00:c4:c3:6a:b6:af:ff:ca:
         a4:b7:35:2d:1c:78:21:61:31:be:f9:c4:8c:50:51:35:61:90:
         12:3a:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org