Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/nAh0qC984yGiT8JseJLV45Kp5Nc.roa
File:                     nAh0qC984yGiT8JseJLV45Kp5Nc.roa (raw, json)
Hash identifier:          3TLfpfac/8/NicjDcN/pqtnzEKRSVEuZZgWf5pXCMNY=
Subject key identifier:   9C:08:74:A8:2F:7C:E3:21:A2:4F:C2:6C:78:92:D5:E3:92:A9:E4:D7
Certificate issuer:       /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial:       33
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/nAh0qC984yGiT8JseJLV45Kp5Nc.roa
Signing time:             Sun 01 May 2022 01:29:54 +0000
ROA not before:           Sun 01 May 2022 01:29:54 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55391
IP address blocks:        103.2.248.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
        Validity
            Not Before: May  1 01:29:54 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9C0874A82F7CE321A24FC26C7892D5E392A9E4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:ce:57:c1:90:f6:31:3c:8d:35:c9:bb:36:
                    61:73:23:3e:d1:f8:0f:a2:2c:27:95:05:43:b1:f9:
                    c9:65:23:32:33:85:f2:4d:42:00:dc:79:e1:00:9d:
                    92:f0:1d:97:60:97:c9:18:54:c2:74:37:64:56:a3:
                    35:24:80:d7:fd:2f:45:01:6a:3a:11:32:00:ae:da:
                    e4:8a:25:1f:78:d3:09:b9:3a:e9:91:47:f6:3f:df:
                    1b:21:a9:07:8e:f4:c9:d3:ee:37:69:84:ee:7f:1a:
                    57:e6:b8:aa:4e:33:c1:af:1f:b8:5d:f5:dc:4e:ec:
                    a5:a3:89:d6:92:8e:1f:ac:e3:1a:8e:f0:c1:4f:92:
                    5a:d1:23:78:2c:2f:d2:77:21:ad:bf:11:a0:66:fb:
                    d3:45:a6:87:b3:ee:fb:b8:df:78:26:71:f7:0c:75:
                    39:e7:45:66:49:70:ae:17:bd:b8:9d:6f:57:66:9f:
                    10:20:94:9a:f4:0b:a0:fd:ec:25:dd:0e:19:06:4b:
                    16:20:aa:c7:d0:8e:ad:97:61:7d:3c:79:9a:95:69:
                    fc:87:37:72:70:69:28:3d:40:a5:e5:75:4a:50:79:
                    ca:07:54:cf:68:49:62:48:ae:8a:8c:85:8e:87:2a:
                    29:38:a6:88:9c:e1:54:33:c6:92:34:77:83:ef:a5:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:74:A8:2F:7C:E3:21:A2:4F:C2:6C:78:92:D5:E3:92:A9:E4:D7
            X509v3 Authority Key Identifier:
                keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/nAh0qC984yGiT8JseJLV45Kp5Nc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a6:83:b4:76:d8:05:da:5b:bb:bb:ca:c7:b3:44:92:ed:63:
         a0:26:9d:4f:c6:9e:5e:13:4e:1c:96:cb:20:2e:e5:34:f4:88:
         2a:c1:84:da:66:68:07:25:93:06:91:7a:a1:f9:e2:cc:ac:9a:
         18:1a:d1:6b:7e:7d:de:22:43:03:69:ef:b9:27:71:b6:a0:e2:
         f3:f9:0e:ef:66:a1:f0:81:fa:e9:e1:53:47:f2:e1:56:c3:e7:
         0d:26:8f:31:5a:93:ee:ab:8c:75:e2:c9:60:0a:a6:20:68:fa:
         a1:97:73:c4:34:c2:cc:9f:71:a8:c1:38:3a:40:21:5b:e5:de:
         5e:0c:b6:14:a4:c0:0f:df:c7:8d:fe:70:82:6e:b0:89:82:52:
         cf:d1:4d:7d:56:47:fe:d3:5c:61:91:42:54:20:82:60:7f:2a:
         98:7f:26:a0:4f:1a:78:f2:3d:4d:eb:47:35:d6:30:88:f2:ae:
         29:47:6e:8e:44:26:fe:9c:a3:33:27:c5:70:28:4e:3e:d9:59:
         ce:0e:3b:28:c1:bf:26:0e:6d:ca:c9:a2:52:85:c4:99:a5:ff:
         e0:52:97:4d:ec:7c:14:91:c5:7a:67:c1:55:01:3b:bf:12:75:
         d2:9a:6b:90:2d:d9:41:67:da:e8:9c:47:df:b4:dc:c9:27:6c:
         d6:fc:be:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org