Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ASgE5HSWo8P65YLodiE8MOxyJTA.roa
File:                     ASgE5HSWo8P65YLodiE8MOxyJTA.roa (raw, json)
Hash identifier:          VmRljanG/YUaPJ47Bl2THXgfR1Gc4B0SYVTGtUvIwwo=
Subject key identifier:   01:28:04:E4:74:96:A3:C3:FA:E5:82:E8:76:21:3C:30:EC:72:25:30
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       02
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ASgE5HSWo8P65YLodiE8MOxyJTA.roa
Signing time:             Thu 26 Jan 2023 04:15:54 +0000
ROA not before:           Thu 26 Jan 2023 04:15:54 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        103.95.104.0/22 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:15:54 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=012804E47496A3C3FAE582E876213C30EC722530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:8a:bc:23:3f:f4:b5:7c:cb:e5:46:1f:0b:
                    e6:01:16:77:38:2e:a9:b9:a7:63:bf:c2:bd:70:50:
                    31:43:52:9f:0f:db:d2:fb:74:4b:44:9e:17:31:90:
                    22:aa:5b:48:b0:b8:ae:c9:8f:f3:0c:8a:e4:7d:5e:
                    05:01:d3:02:95:23:03:66:d2:c9:42:33:0e:76:0b:
                    e7:e0:a2:24:34:93:cb:be:62:a5:c9:9d:b0:c7:e1:
                    52:29:d5:26:e6:aa:b6:b6:07:b1:70:7d:bf:7a:4f:
                    8c:9b:9f:8c:32:8a:83:53:0a:21:d4:97:cb:b6:c5:
                    5d:3b:c2:37:7a:fe:2e:65:fd:02:fb:c0:62:35:18:
                    5d:c2:51:23:79:97:8c:39:1e:7d:75:0a:b9:5d:75:
                    ab:84:07:0e:95:81:84:eb:0c:2f:99:45:00:cd:21:
                    ab:5f:11:11:38:0c:c3:6d:cd:15:13:d7:8c:d0:bd:
                    87:9b:ba:47:3a:36:21:1a:0e:93:9d:29:80:a5:3b:
                    e3:79:a8:67:1e:c6:83:9f:8f:ab:fe:df:a6:a1:02:
                    4f:48:aa:33:2e:df:fb:a2:83:2d:c5:a1:7d:30:83:
                    5a:48:75:ca:60:5d:16:ac:16:bf:86:23:af:3c:aa:
                    99:67:1e:57:0e:5e:d3:91:9d:6e:eb:32:57:53:0b:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:04:E4:74:96:A3:C3:FA:E5:82:E8:76:21:3C:30:EC:72:25:30
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ASgE5HSWo8P65YLodiE8MOxyJTA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:9d:9e:2c:85:c7:de:6c:7f:21:27:e8:f3:9b:c3:85:2b:
         98:d4:61:93:18:3f:96:0b:6d:f9:73:52:e7:64:92:f8:23:6d:
         59:01:75:0e:56:18:10:94:61:b1:4d:dc:b8:e1:ed:5a:97:70:
         d7:79:b6:51:23:f4:c9:02:b8:35:3f:75:6e:86:93:20:08:7e:
         97:a2:59:d7:cc:7f:9f:bb:df:f4:4c:ad:1d:f9:77:04:a6:1f:
         b5:ca:58:cb:49:e0:00:38:40:a6:90:2a:8c:8f:19:58:37:64:
         2f:2f:c2:ed:87:36:31:d2:6d:91:80:d5:ff:5f:4b:54:e9:06:
         5b:df:46:b3:24:52:9f:5c:9e:1e:25:13:75:9c:f4:49:9d:b3:
         a8:e1:c4:e7:80:14:b8:83:c1:82:b4:7e:15:1e:ea:5a:57:34:
         3f:34:bb:90:b9:21:ae:33:f8:1f:27:5b:31:36:93:06:c1:b0:
         ce:f9:8b:80:9d:17:19:2c:9c:52:2c:17:4f:24:e8:57:4e:e2:
         c0:42:f1:3e:d4:b3:f5:69:a8:af:d0:f8:c3:a9:06:6a:e2:78:
         dd:94:3c:0d:21:ff:9c:17:27:20:b8:a6:1d:4c:b6:72:d3:f7:
         af:06:62:b2:f9:57:b7:77:4d:f6:85:90:ec:73:94:b8:e2:9b:
         57:a7:4d:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org