Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/okUGfK7tzyKi8iRHeenj7C2MTSw.roa
File:                     okUGfK7tzyKi8iRHeenj7C2MTSw.roa (raw, json)
Hash identifier:          z9VJkEdzQSixuwW7u28BcQlvinxjoWltC2fJ/AD4JZg=
Subject key identifier:   A2:45:06:7C:AE:ED:CF:22:A2:F2:24:47:79:E9:E3:EC:2D:8C:4D:2C
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       17
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/okUGfK7tzyKi8iRHeenj7C2MTSw.roa
Signing time:             Sat 01 Apr 2023 01:28:03 +0000
ROA not before:           Sat 01 Apr 2023 01:28:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     131929
IP address blocks:        103.108.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Apr  1 01:28:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A245067CAEEDCF22A2F2244779E9E3EC2D8C4D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:80:39:d2:7e:99:04:88:e2:26:a3:be:36:
                    c0:92:76:a0:16:bc:75:eb:40:d5:54:50:fe:10:4e:
                    68:76:f1:a7:29:15:1d:89:38:bf:6b:3e:60:b7:46:
                    03:3d:c9:6b:76:e3:60:53:43:d8:8b:68:7e:8c:48:
                    da:11:90:f2:11:f6:00:3d:6f:e2:ff:09:d6:59:49:
                    9c:53:9e:6c:4d:44:8f:f3:59:e1:da:e9:23:db:26:
                    3e:0f:70:88:a9:88:f1:42:3e:69:a1:cf:ff:56:97:
                    80:e6:38:bf:1e:3d:5f:dd:23:9a:48:3f:cf:37:71:
                    8e:37:2d:37:01:1c:f7:78:dc:2e:f7:2f:5b:87:88:
                    e9:5f:b9:4c:42:12:2d:4e:bd:43:1c:dc:b9:d3:0d:
                    1f:1c:4c:da:75:4f:55:fe:0a:e6:b1:0a:4c:f3:a4:
                    14:d1:19:e6:58:66:95:40:3a:21:05:c0:92:e4:65:
                    e3:37:bd:7d:76:a5:ee:78:20:20:f0:00:df:a2:a2:
                    a2:14:be:c1:bb:2e:ab:07:86:c2:24:a8:f5:cb:a2:
                    a2:10:46:b2:a9:29:eb:0f:6c:e4:a4:2c:20:2f:35:
                    f9:dc:54:f7:92:25:9c:ba:31:87:d3:7b:db:48:db:
                    58:bb:bd:01:14:24:df:16:6d:a3:4e:45:4f:cd:f6:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:06:7C:AE:ED:CF:22:A2:F2:24:47:79:E9:E3:EC:2D:8C:4D:2C
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/okUGfK7tzyKi8iRHeenj7C2MTSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:3e:01:99:62:be:45:15:54:b5:41:f9:2b:77:01:95:44:c1:
         91:0a:a2:91:8e:e4:81:80:17:cb:e0:3c:83:5b:13:3f:49:66:
         88:9a:2c:9b:7e:6e:f3:47:b0:2d:0e:6e:83:4d:2d:c0:eb:08:
         22:a3:b5:83:f8:27:90:8c:c2:8e:a2:aa:65:95:56:35:fe:1a:
         ad:6d:92:23:78:63:a0:24:45:9f:43:05:14:5a:c7:d4:24:9c:
         d3:99:f8:42:c3:0d:77:12:d9:f1:e4:9c:b6:23:e1:e0:59:d0:
         3b:74:50:3a:0d:23:7e:af:e6:40:c2:c5:3a:c9:38:e8:12:25:
         b5:74:b0:1e:a4:7e:81:92:f5:a3:de:2f:4f:27:5c:d3:89:a8:
         76:4d:31:67:b1:4d:bc:a3:c4:1f:77:19:37:13:c9:32:5f:56:
         a2:8c:9e:41:33:8f:e1:30:95:c9:e6:52:05:5e:d8:7e:8e:53:
         2d:53:2a:38:ef:8f:6b:2f:27:52:36:5e:aa:c3:61:8f:d3:bb:
         2c:ce:ec:26:96:88:34:d0:49:df:0c:96:b5:e8:a1:7a:15:a1:
         e1:64:c9:a4:73:1d:9e:08:8d:9b:05:71:42:95:1e:23:19:7b:
         a7:4b:c4:98:07:69:dd:ff:c0:79:8a:1d:16:69:5a:bc:a2:ef:
         3a:3d:a1:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org