Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tpxBKfYte7bZ4lgxKMhVnqG4JaQ.roa
File:                     tpxBKfYte7bZ4lgxKMhVnqG4JaQ.roa (raw, json)
Hash identifier:          yyo/BKkKHDl2ecrxaKdaE/UyQmxhJ19RFSq/nq34Yow=
Subject key identifier:   B6:9C:41:29:F6:2D:7B:B6:D9:E2:58:31:28:C8:55:9E:A1:B8:25:A4
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       010E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tpxBKfYte7bZ4lgxKMhVnqG4JaQ.roa
Signing time:             Fri 10 Jun 2022 03:18:23 +0000
ROA not before:           Fri 10 Jun 2022 03:18:23 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        122.16.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:18:23 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B69C4129F62D7BB6D9E2583128C8559EA1B825A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:13:82:6d:15:48:0d:d9:08:84:88:0a:6a:
                    f3:6e:f7:83:13:27:2d:de:05:a9:e1:5f:5a:7a:25:
                    f8:49:90:43:54:21:97:c0:ba:bc:3d:17:42:ee:2d:
                    3a:04:8f:05:c9:3d:df:0d:c3:6b:85:70:48:b7:10:
                    f2:64:ac:67:fe:bc:1d:d7:1b:cd:d9:3a:16:cf:9b:
                    00:8c:9b:6f:ac:d5:ac:cd:46:9c:d7:b5:90:d7:01:
                    ba:37:e1:19:ee:20:9e:a1:6a:6c:cc:af:b6:9b:f7:
                    6f:01:24:f5:83:bd:ec:42:5d:39:21:6d:79:37:62:
                    f5:50:08:f9:c7:20:21:2b:d1:3f:54:bd:2c:b1:ed:
                    6f:c7:da:7b:8c:3d:72:57:5b:11:55:c7:8d:db:f6:
                    27:cb:9f:d3:df:c8:d0:1d:02:4e:b1:92:64:2b:b4:
                    f4:e6:a8:05:46:01:9a:a1:ab:c8:4a:04:f7:20:c3:
                    5f:7c:ea:c8:67:86:d0:10:0d:e9:e8:06:0b:67:78:
                    97:ad:2c:4a:aa:d4:af:60:f7:8e:e4:c6:c9:13:4a:
                    d9:74:b3:7e:3b:dd:42:80:c5:51:bf:e6:5e:95:06:
                    37:fd:a1:23:95:c8:83:86:4e:4a:ef:46:2b:b3:58:
                    f2:57:9a:ca:80:87:c4:d7:2b:a9:15:8f:5c:67:89:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9C:41:29:F6:2D:7B:B6:D9:E2:58:31:28:C8:55:9E:A1:B8:25:A4
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tpxBKfYte7bZ4lgxKMhVnqG4JaQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.16.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:80:1c:43:66:9b:1e:0c:41:c4:f0:74:c5:63:c3:28:78:
         8b:77:e0:11:0d:38:81:49:6b:77:63:0f:e1:2e:d8:a5:02:cc:
         4e:48:e3:84:35:ea:8f:80:a6:ac:f3:6f:bc:66:46:25:6d:9e:
         6c:90:0f:ba:c0:36:a7:cd:bb:24:62:8b:24:6d:cd:d0:33:37:
         89:5e:16:4e:0e:9a:99:37:96:81:60:af:f3:20:47:60:3b:69:
         fd:58:ca:c9:fb:43:87:4c:8e:71:ba:7f:04:af:da:d0:61:c4:
         c6:2e:66:0d:5a:96:97:69:c1:a7:95:a9:e3:6f:8a:41:01:08:
         c7:65:69:13:90:6c:dd:89:7a:37:62:34:d0:d8:a9:b4:53:8f:
         a0:e7:69:ea:cc:5e:1e:9e:69:4e:b6:fd:20:0a:3d:bb:2f:a4:
         05:de:ac:b9:a5:11:02:1e:ef:35:ad:58:4f:18:ca:2f:a0:25:
         93:cb:43:aa:e2:b0:91:8a:4d:38:89:f0:4e:d5:41:16:aa:90:
         bd:d0:7b:9f:2d:ac:15:39:dd:bb:01:93:92:ca:8b:84:6f:ac:
         5c:37:f1:7e:d8:f3:68:92:b7:80:99:dd:1b:da:fc:5b:c3:0a:
         8a:80:dc:75:1e:e5:32:bc:a0:fb:44:72:95:ca:2f:1b:a2:2e:
         11:f7:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org