Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/tP8nxHPhdOT29CKkxZs7viVI394.roa
File:                     tP8nxHPhdOT29CKkxZs7viVI394.roa (raw, json)
Hash identifier:          hiI0HPXMRue/Tv2HIF1bpkG4du2Dd2T8aKMdKyM40oA=
Subject key identifier:   B4:FF:27:C4:73:E1:74:E4:F6:F4:22:A4:C5:9B:3B:BE:25:48:DF:DE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       AE
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tP8nxHPhdOT29CKkxZs7viVI394.roa
Signing time:             Sat 01 Oct 2022 01:29:17 +0000
ROA not before:           Sat 01 Oct 2022 01:29:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        150.31.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=B4FF27C473E174E4F6F422A4C59B3BBE2548DFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:a8:4e:07:f9:7f:24:f5:60:92:6d:2a:8f:
                    de:38:8b:0f:51:e4:93:19:8b:1c:4b:eb:3d:cd:9a:
                    ea:29:d3:08:69:e7:54:2e:7f:be:42:af:ad:41:ae:
                    48:68:25:8c:34:41:d4:42:ae:85:37:9d:6e:21:04:
                    ef:18:96:ee:3d:92:c9:8f:4d:17:34:55:7e:3e:90:
                    78:12:e9:d0:bb:16:44:8f:87:58:a5:df:4a:62:3d:
                    a1:aa:df:3f:d0:5d:da:39:83:2f:1c:e0:77:d0:a5:
                    e4:ca:8c:8e:0e:6f:4c:02:3b:96:61:b5:53:5e:ef:
                    63:8e:d5:1c:82:d8:2d:42:a1:29:c1:a6:25:02:f9:
                    b2:85:8e:88:81:95:c3:e9:6a:0a:2f:56:53:55:f5:
                    c1:23:96:b6:b5:70:2d:66:06:11:0c:9c:27:6d:c9:
                    e0:f1:f9:c6:57:73:84:11:eb:75:2f:35:08:b4:be:
                    4f:89:a7:b5:3d:69:75:09:da:a1:be:8c:b0:db:c5:
                    16:f6:34:de:c0:66:8a:2d:ce:8e:8d:51:eb:23:fd:
                    80:6e:34:b5:35:1d:70:9e:61:c3:f5:e9:ec:62:cc:
                    53:0c:fb:fd:ee:d0:ab:47:47:5d:18:38:81:5b:12:
                    c4:b4:64:18:94:17:8e:db:5e:1c:d8:1b:91:c9:18:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:27:C4:73:E1:74:E4:F6:F4:22:A4:C5:9B:3B:BE:25:48:DF:DE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tP8nxHPhdOT29CKkxZs7viVI394.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:f7:b0:18:00:c1:1f:7d:e5:c6:19:55:68:fc:92:1b:9c:b0:
         84:ae:33:4e:65:bd:06:1e:fa:a6:38:60:df:db:0e:e4:db:4f:
         fb:74:47:07:2a:4e:d2:3d:da:72:b5:f5:d9:ee:a2:16:09:73:
         c7:9f:15:a7:b9:f0:63:e8:32:37:b6:45:d2:a4:97:db:c0:fd:
         6e:ba:83:89:91:cc:9e:df:d1:6c:72:ea:a2:fe:2b:b3:f7:2e:
         ca:31:36:1a:09:95:2a:38:bc:d3:c5:ac:08:c7:78:f2:5a:31:
         2b:9d:0f:fd:15:e8:22:65:60:58:32:4f:75:fa:99:46:d0:70:
         68:0e:b5:a3:28:cd:fc:eb:34:f7:c6:b6:16:3b:51:5b:5d:86:
         b7:90:6b:d5:77:fa:05:89:86:25:6d:a6:62:cf:66:82:88:4b:
         b5:1e:f0:1f:09:77:f5:2e:82:2e:ef:7d:fe:3a:a1:ba:9a:c2:
         01:17:74:fd:42:76:af:cc:83:5c:9a:41:3f:f7:0d:58:11:05:
         0a:1c:f8:5b:53:33:e4:71:f5:66:af:3a:72:8a:43:56:cb:63:
         6f:8a:a3:20:3f:4d:83:2a:fb:d2:bc:a0:80:6a:70:86:13:15:
         28:02:ea:c0:0a:08:f0:a0:f6:60:cf:6e:f1:d3:4d:94:9e:48:
         50:b0:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org