Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/xJWxcdXQPTFew4pGjgQ6vK2hJhk.roa
File:                     xJWxcdXQPTFew4pGjgQ6vK2hJhk.roa (raw, json)
Hash identifier:          jnR7MKj1lUl3mG8SgvPPPx77atOfdUjNiMinDgXzWDk=
Subject key identifier:   C4:95:B1:71:D5:D0:3D:31:5E:C3:8A:46:8E:04:3A:BC:AD:A1:26:19
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       FE
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xJWxcdXQPTFew4pGjgQ6vK2hJhk.roa
Signing time:             Fri 10 Jun 2022 02:50:19 +0000
ROA not before:           Fri 10 Jun 2022 02:50:19 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        27.114.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 02:50:19 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C495B171D5D03D315EC38A468E043ABCADA12619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:d2:06:54:39:03:0e:da:4e:8e:19:68:20:
                    a0:89:09:00:11:5f:83:5e:9d:8a:68:25:a2:c2:63:
                    7f:ea:21:16:d6:f2:3d:1a:a3:8a:5e:22:4f:0b:a3:
                    4c:5c:58:af:05:6b:65:e2:fb:6e:a3:35:80:56:67:
                    33:b7:4c:f4:5c:a6:e5:e7:98:55:27:a4:94:87:58:
                    66:98:82:0f:19:52:c2:a1:b5:3a:15:3d:53:69:88:
                    da:82:15:a7:fc:19:b8:bf:72:cd:2e:0c:7e:13:c7:
                    b3:4a:35:04:7d:b6:27:de:82:aa:d2:df:2a:23:87:
                    6e:4c:ba:69:9b:a2:75:dd:f9:f9:78:6f:74:89:f0:
                    15:25:b2:76:e1:e1:04:8c:4a:aa:35:03:c7:ce:9b:
                    ff:73:5e:55:71:c7:b5:43:78:d0:46:5e:b9:08:d4:
                    7e:d1:9b:79:e2:30:57:0d:27:f7:41:4b:7e:82:e9:
                    12:2d:dd:14:26:35:3d:5a:9c:0e:ba:d2:b3:ef:57:
                    52:78:4f:9a:2e:0c:88:52:06:b2:33:b8:6f:3f:9d:
                    5a:cc:e3:47:38:8d:ae:a6:32:82:cf:72:87:67:a3:
                    b3:18:35:bf:6b:a4:d2:aa:7e:5e:eb:52:e8:54:2a:
                    d2:85:b4:2a:d0:76:6e:1a:f1:8c:c4:b6:09:67:a4:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:B1:71:D5:D0:3D:31:5E:C3:8A:46:8E:04:3A:BC:AD:A1:26:19
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xJWxcdXQPTFew4pGjgQ6vK2hJhk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.114.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         40:13:d1:b4:5b:b7:b2:76:c0:26:ae:a8:cf:b3:93:59:6b:83:
         41:93:ad:c4:4e:81:ed:d8:9f:80:27:b2:ba:22:54:bd:91:bb:
         ca:81:aa:00:9c:cd:65:83:93:fe:17:5d:54:59:ef:9a:e0:c0:
         8d:0f:77:e4:46:51:96:b8:90:b3:5c:32:55:15:80:f0:86:2a:
         ff:af:26:dc:69:f4:0f:59:9c:9e:89:14:ea:24:c5:52:3e:10:
         04:e8:6d:b4:38:6d:6a:3c:24:7e:44:ab:cb:bc:4f:8b:2b:74:
         69:f7:15:4c:1a:45:2b:a4:72:8e:2d:90:64:28:c5:49:3a:19:
         3b:6c:c9:13:71:fb:41:84:ad:d3:cf:c9:c1:2a:93:48:a0:23:
         f8:c9:bd:d7:f1:8a:9f:1e:fb:7f:4e:58:82:de:e1:98:13:98:
         28:06:23:14:14:fd:44:46:7b:b0:5a:8e:80:db:fc:34:19:bd:
         d5:2c:ea:34:95:06:5d:50:87:d4:65:63:5b:0d:a7:ba:bd:dd:
         81:07:34:31:50:5a:d3:2e:12:64:21:35:04:ac:e9:19:b0:4d:
         cd:6b:4e:f8:a0:27:40:1d:e6:ce:70:75:c3:a7:2b:98:a8:d1:
         3d:ef:d2:0d:a6:b4:45:ee:0b:fd:ba:b1:ea:f5:51:99:c4:ae:
         bc:92:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org