Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tDvvpiFERTH8CADN928oSPBC9kM.roa
File:                     tDvvpiFERTH8CADN928oSPBC9kM.roa (raw, json)
Hash identifier:          fbw3l89UMMggIvk4gM3QrKX1GulPzFKZ3XRMJoN113E=
Subject key identifier:   B4:3B:EF:A6:21:44:45:31:FC:08:00:CD:F7:6F:28:48:F0:42:F6:43
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       CE
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tDvvpiFERTH8CADN928oSPBC9kM.roa
Signing time:             Fri 01 Apr 2022 01:28:17 +0000
ROA not before:           Fri 01 Apr 2022 01:28:17 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        153.192.0.0/11 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:17 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=B43BEFA621444531FC0800CDF76F2848F042F643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:61:b4:4d:20:93:e9:b0:94:b9:be:c7:14:
                    d1:b0:4e:23:72:f7:d8:85:cd:c9:cf:4d:61:f7:1f:
                    9e:80:98:ce:d6:a0:6f:6f:6e:b8:4a:68:8f:85:d4:
                    44:01:4c:b2:fb:34:be:94:d2:17:3a:bf:cf:2d:d5:
                    9c:1a:38:c8:e3:4d:82:d0:9b:83:9e:4e:30:96:25:
                    70:b5:1e:1a:e4:37:c8:b4:f8:43:c7:82:6e:e1:88:
                    e4:dc:a6:1d:38:18:60:8b:27:f7:39:ac:49:8f:63:
                    07:f3:30:7e:e2:a2:79:a5:18:38:93:8f:43:92:9e:
                    34:b6:72:2c:07:f4:b7:72:66:82:9d:c4:61:fd:5e:
                    61:ed:07:f0:4b:93:f9:33:96:3b:a5:32:17:49:96:
                    c4:4b:3a:5a:0d:7c:12:1d:89:26:4e:13:fa:dc:51:
                    79:02:a2:3a:68:62:f2:9f:f8:a7:cc:80:36:8f:59:
                    cf:ee:34:4d:02:70:7f:b3:fa:43:59:32:b3:bc:61:
                    11:68:a8:1f:7f:41:d2:47:f6:39:5c:29:62:65:fc:
                    cd:df:17:a8:b8:51:7e:0b:1c:11:8c:15:61:f9:7e:
                    80:ba:f4:df:19:ff:09:5a:e6:99:4b:c8:92:cc:17:
                    4e:05:c2:1d:2a:30:bd:82:c7:60:17:70:5e:b3:3f:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:EF:A6:21:44:45:31:FC:08:00:CD:F7:6F:28:48:F0:42:F6:43
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tDvvpiFERTH8CADN928oSPBC9kM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:d1:cf:55:57:07:fc:92:6d:4a:64:59:19:94:d8:c0:0e:
         9c:1f:bc:4a:5d:54:11:18:96:af:82:57:90:9c:4c:93:7d:b3:
         77:d7:79:51:6d:57:5b:e8:3a:f7:88:66:41:65:4a:3d:11:d1:
         f8:15:5a:a1:74:c1:04:e1:74:52:cc:02:46:47:c3:c3:86:73:
         2f:fa:76:b8:58:23:6e:7d:a4:74:05:9f:ed:5c:64:2d:cd:90:
         d3:37:f1:45:2a:51:07:f0:ea:71:74:1e:a3:6a:5e:14:85:b6:
         5d:5b:e9:4f:9b:19:bd:f5:16:a0:cb:0e:2d:20:38:ec:a9:68:
         1c:e2:1e:74:99:26:72:f4:87:25:93:a8:a8:2f:6a:de:40:fa:
         25:b8:83:44:27:83:e0:08:12:cc:33:c7:84:6e:ef:12:14:54:
         ff:a6:a6:61:00:6c:c8:4e:af:a5:3a:6f:4c:f8:67:b3:90:29:
         1c:3d:4e:c3:f2:e3:05:11:a1:f8:5e:17:ae:b2:02:65:03:4d:
         03:b7:41:32:44:73:82:14:70:ec:4f:e6:9c:4b:3e:14:7d:7a:
         4c:99:cb:fe:7f:63:c6:c9:de:e3:cd:3d:99:54:77:76:0c:17:
         28:11:7f:c7:72:a0:76:b0:ec:a8:86:da:ea:62:20:08:d1:b6:
         f9:06:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org