Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/uzx6l08l3tU0k9WrMx6bxcZfkC8.roa
File:                     uzx6l08l3tU0k9WrMx6bxcZfkC8.roa (raw, json)
Hash identifier:          xxi8MnCPCbTN2ZAx8ytqOrVE1VRtckixr1uDuzcfRxU=
Subject key identifier:   BB:3C:7A:97:4F:25:DE:D5:34:93:D5:AB:33:1E:9B:C5:C6:5F:90:2F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0125
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uzx6l08l3tU0k9WrMx6bxcZfkC8.roa
Signing time:             Fri 05 Aug 2022 04:36:40 +0000
ROA not before:           Fri 05 Aug 2022 04:36:40 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.154.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:36:40 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=BB3C7A974F25DED53493D5AB331E9BC5C65F902F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:87:a6:fe:05:78:44:db:fa:41:b6:f0:2b:
                    c6:0c:2c:a6:d6:c8:c4:00:2b:bb:49:3e:d9:88:96:
                    71:49:a8:51:ca:8e:b7:f5:47:77:df:61:94:61:ad:
                    47:e4:2d:8a:f3:e7:fe:9a:f2:cf:09:a0:2e:54:d3:
                    dc:25:ec:d6:fa:82:e9:fb:db:46:0f:28:33:c9:52:
                    52:80:46:a7:bf:ed:cc:ea:08:67:7b:2a:52:0d:23:
                    12:fb:9d:36:06:60:d8:e9:03:a8:85:56:ba:65:02:
                    89:a8:c2:27:cb:bf:29:d2:0e:75:f2:88:6d:6e:2a:
                    ad:25:cb:23:30:59:6c:4d:b3:e0:aa:0b:69:1b:37:
                    88:1c:19:c3:0b:7b:4b:59:eb:9e:05:8b:a6:79:5c:
                    88:68:a3:d2:4c:3d:a4:ed:af:86:74:02:5b:77:a4:
                    76:93:ea:dd:aa:b3:d2:24:24:a0:77:38:6a:7b:7a:
                    82:5b:9a:41:5f:8d:11:a5:54:2a:4c:02:28:17:c6:
                    25:ff:47:4d:ed:8b:de:4e:4c:bc:cc:b3:b0:44:30:
                    5d:13:36:a4:b0:6d:26:cd:dc:65:b9:ee:c1:25:a6:
                    78:b3:88:b7:ca:1a:39:91:52:b3:2b:2d:f2:d3:58:
                    94:85:8e:3a:ba:d2:34:53:5f:9c:7c:b5:b7:a0:df:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3C:7A:97:4F:25:DE:D5:34:93:D5:AB:33:1E:9B:C5:C6:5F:90:2F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uzx6l08l3tU0k9WrMx6bxcZfkC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:09:08:c4:c9:67:65:47:a4:cb:b6:15:63:17:79:30:2e:
         c8:aa:2c:71:11:3d:ce:c7:7e:d1:af:9c:2f:a9:b9:f0:c6:54:
         1d:9a:1c:5e:34:ba:82:9f:b1:ee:ec:75:1c:68:db:36:4d:86:
         3f:06:de:75:eb:9d:7a:bb:9f:cd:50:27:e2:18:52:4d:a3:10:
         24:c2:a5:1f:6e:5a:1a:ed:6c:9e:ed:db:72:4f:bb:af:5d:ef:
         48:a0:0a:ff:b6:cf:15:82:bd:45:c2:2a:cb:91:96:bf:84:58:
         a8:e0:a1:b7:d1:7b:b0:db:21:d7:f9:81:c7:95:c2:1b:01:42:
         c6:5d:c4:df:cb:0d:ad:80:8f:3c:25:5e:85:44:7c:f3:91:13:
         2d:53:8c:34:c5:6d:2d:ad:8b:59:eb:2c:56:b1:64:a9:f0:51:
         26:3a:91:56:78:3d:17:c7:3a:ee:2b:e2:83:36:6d:f7:44:52:
         59:2b:a1:2a:79:1e:8b:80:15:c6:33:c9:c9:d0:8c:16:0a:9b:
         92:45:13:41:a6:78:39:d3:0a:90:89:8a:79:60:af:28:f4:36:
         5e:61:fc:88:d9:67:af:c8:8b:60:45:fb:a6:28:1d:f9:7a:44:
         26:2f:e0:83:5a:1c:b2:90:a3:84:ab:25:37:4f:5a:d4:df:66:
         68:8a:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org