Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/xNgPsdn48fSc0nIAQ7phyBtbe7M.roa
File:                     xNgPsdn48fSc0nIAQ7phyBtbe7M.roa (raw, json)
Hash identifier:          JoLZSEXQX9nHd9KyX98AhjZYTKFxhmHEYtBr/31di8Q=
Subject key identifier:   C4:D8:0F:B1:D9:F8:F1:F4:9C:D2:72:00:43:BA:61:C8:1B:5B:7B:B3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       90
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xNgPsdn48fSc0nIAQ7phyBtbe7M.roa
Signing time:             Sat 05 Jun 2021 03:47:28 +0000
ROA not before:           Sat 05 Jun 2021 03:47:28 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        61.126.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:28 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C4D80FB1D9F8F1F49CD2720043BA61C81B5B7BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:35:82:97:a3:95:e2:32:d2:5d:12:90:7b:
                    e3:8a:bb:3b:e6:b8:86:0f:82:a5:35:df:80:57:5b:
                    e0:92:b3:81:d5:0c:c0:34:c0:9e:e0:67:65:3e:52:
                    f2:83:bf:61:9b:de:a3:ae:d3:0c:52:d7:2e:94:9b:
                    5f:27:94:31:62:a7:72:36:95:37:05:35:a0:88:75:
                    a5:13:de:d0:83:f3:33:27:b7:8c:f4:1a:55:39:24:
                    50:1b:dd:44:1a:a5:1c:f0:81:3f:70:48:d2:c5:c6:
                    ef:0a:f0:12:f2:d4:c8:f9:de:28:27:70:ed:0a:3b:
                    37:8c:09:14:8b:b7:c8:ab:f7:50:80:e0:9d:46:ff:
                    0e:67:b1:7a:49:5a:07:63:51:57:4c:15:81:73:44:
                    83:c8:97:5a:bd:a6:56:88:f8:c7:8d:30:6e:3a:18:
                    75:fc:5d:2f:38:19:b7:dc:33:d1:83:a5:06:2e:e9:
                    83:ee:01:e6:6b:40:c5:e8:c0:4a:ee:c2:b3:69:ea:
                    5b:6d:bf:4a:ac:0d:0f:67:c1:c5:6e:9c:3e:36:97:
                    58:5b:1b:8c:de:97:b8:8d:72:ef:da:98:99:46:fa:
                    90:f7:4a:7d:89:06:67:5d:7b:bf:bb:6b:ea:80:48:
                    26:a5:c2:64:ba:fb:ae:20:c3:6d:32:dc:0f:0f:38:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:0F:B1:D9:F8:F1:F4:9C:D2:72:00:43:BA:61:C8:1B:5B:7B:B3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xNgPsdn48fSc0nIAQ7phyBtbe7M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:45:eb:06:1d:e2:c1:74:e9:43:c4:7d:cd:92:00:64:ad:
         dd:18:4e:fc:85:74:42:37:f6:d6:35:ab:4e:42:2c:d4:46:71:
         04:f9:be:94:85:ac:4c:8d:ae:54:cc:3b:f8:2b:24:11:c2:4b:
         e6:d0:d9:e5:4f:d2:76:f2:b8:ae:c0:fd:19:54:ed:f4:ff:93:
         bb:76:21:dc:03:f9:a6:65:9f:09:5d:4c:b5:0c:81:18:c5:9b:
         e1:e1:0c:9d:c1:ac:4a:03:00:98:ab:2f:22:41:79:f1:bc:e0:
         90:60:28:17:7f:2d:35:d8:ee:39:5d:24:58:b7:81:36:68:ff:
         bf:23:74:c1:8b:9e:5c:83:28:e4:46:12:01:34:00:32:01:8b:
         fa:5a:a7:ef:3a:93:fb:99:fd:79:28:bd:8b:92:b9:db:ee:06:
         69:73:73:40:f9:6d:02:19:55:27:ca:cd:57:9a:64:45:5c:48:
         27:03:15:ba:57:71:8b:cb:8a:43:2b:8e:96:e2:b4:d5:0a:72:
         c2:a0:69:86:a1:7e:63:35:07:54:3f:6e:77:63:e8:fc:94:e4:
         64:62:4d:e7:3a:8d:9d:e7:11:a3:af:46:94:b7:19:e9:bf:06:
         9c:f6:eb:cb:5e:4c:84:e9:5e:46:c1:f2:f7:ac:30:6f:99:d6:
         ca:3b:a8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org