Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/DmJRhEazrnLP-yBjL5mUwtPHXRY.roa
File:                     DmJRhEazrnLP-yBjL5mUwtPHXRY.roa (raw, json)
Hash identifier:          3I8Yzgjr7eowQj9Dm2hP52G1nFyokxtWDwd2w/plT4Y=
Subject key identifier:   0E:62:51:84:46:B3:AE:72:CF:FB:20:63:2F:99:94:C2:D3:C7:5D:16
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       7F
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DmJRhEazrnLP-yBjL5mUwtPHXRY.roa
Signing time:             Sun 01 May 2022 01:30:32 +0000
ROA not before:           Sun 01 May 2022 01:30:32 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        103.2.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:32 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0E62518446B3AE72CFFB20632F9994C2D3C75D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:b9:c8:10:47:9a:b6:bf:d0:dd:aa:3b:ea:
                    d0:37:50:62:ea:5a:20:cc:00:70:2c:95:d6:bb:12:
                    5f:3c:cb:c7:37:f9:f0:fe:23:9d:ec:58:cc:c0:b6:
                    47:5d:bc:b1:de:ce:42:e0:2d:b9:1d:39:d1:71:d4:
                    4d:22:49:71:8d:b1:75:ef:27:41:9c:ea:bb:17:d3:
                    cc:3d:ac:15:83:bd:c7:1a:b5:60:6a:91:08:7b:5b:
                    98:46:23:b0:b5:89:cd:00:16:6a:b6:f1:cd:35:6c:
                    63:0b:72:68:02:35:60:e5:4f:e3:4d:43:5e:57:50:
                    f1:00:bd:59:9b:e8:ee:63:27:74:5c:7f:fa:a2:b2:
                    54:96:32:75:b5:2a:d2:09:c2:46:39:4e:26:7a:3e:
                    c2:ad:e5:03:89:9b:2b:85:ab:e2:02:6d:14:50:22:
                    35:e0:d4:fc:17:33:94:36:4f:5d:be:cc:13:08:64:
                    d4:b4:6f:29:70:db:22:ea:62:fa:d7:b3:86:b2:08:
                    ab:00:90:70:f1:17:41:e2:5c:ef:4c:bd:5d:d4:aa:
                    9a:b5:51:ca:3c:4f:04:f4:54:74:9f:30:05:a2:fe:
                    f5:36:67:4b:1f:3b:fc:40:aa:48:b3:45:88:dc:ba:
                    0c:f4:da:83:21:13:48:8a:c6:7f:6c:f4:af:72:a3:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:62:51:84:46:B3:AE:72:CF:FB:20:63:2F:99:94:C2:D3:C7:5D:16
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DmJRhEazrnLP-yBjL5mUwtPHXRY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:86:6f:05:3f:2f:0f:05:1d:f6:0d:5a:0e:af:c0:f8:92:9f:
         49:5e:79:7d:7c:f6:de:5f:d6:68:71:7c:e0:4b:b9:5b:22:48:
         91:74:bb:0e:43:76:b0:21:f9:de:41:7e:e1:06:7a:6b:b8:91:
         7e:b3:d6:fb:3c:dc:27:72:2e:ca:8b:e1:2e:a9:31:db:04:98:
         72:f5:c2:8f:fd:41:f8:21:fd:59:e4:d2:1b:bb:98:64:bd:a4:
         2e:de:3b:fb:4b:4b:5b:64:fe:20:ed:8c:58:4a:ea:6e:c2:b2:
         52:fc:30:a1:96:8b:e2:59:94:a6:d3:e5:99:d1:2b:5d:f8:b6:
         9b:c3:2e:fe:79:92:ec:42:65:62:d4:2c:14:67:cb:ed:04:c1:
         9a:4e:44:68:4d:0d:4f:62:47:30:eb:77:50:2e:87:4c:84:fc:
         1e:b5:03:8d:0c:ad:6d:d9:eb:ae:ce:fb:40:96:a0:48:c7:df:
         04:32:8f:0a:65:e7:46:f9:29:3e:96:46:0e:79:a0:c0:06:ad:
         ee:e9:db:7f:d5:4f:e5:c4:a0:de:69:cf:a2:93:f5:0a:96:27:
         f9:4c:66:60:03:e6:55:41:d1:86:ec:f6:52:a9:79:d9:c6:d9:
         5f:70:3a:5b:88:be:5b:e3:1f:4d:b9:29:95:34:29:8e:76:e5:
         8b:ec:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org