Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/8ESnUy1wNRAl3vUrCmm6f28jExE.roa
File:                     8ESnUy1wNRAl3vUrCmm6f28jExE.roa (raw, json)
Hash identifier:          b7Zq7oq1sXsVKwwr+4fr/d8xrwDNqm7CudxMrLGfVRQ=
Subject key identifier:   F0:44:A7:53:2D:70:35:10:25:DE:F5:2B:0A:69:BA:7F:6F:23:13:11
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       3A
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/8ESnUy1wNRAl3vUrCmm6f28jExE.roa
Signing time:             Thu 13 Apr 2023 09:53:56 +0000
ROA not before:           Thu 13 Apr 2023 09:53:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63774
IP address blocks:        103.113.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: Apr 13 09:53:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F044A7532D70351025DEF52B0A69BA7F6F231311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:53:a2:3a:2c:f5:46:eb:c7:28:5e:94:bb:
                    70:a0:b7:4f:81:f7:c0:51:6d:bf:da:57:b3:bf:46:
                    13:4e:0a:e4:fd:06:76:6f:c5:b2:a7:43:49:3a:d7:
                    fe:fa:79:b2:03:04:74:84:bb:1a:59:6e:6f:eb:7e:
                    f0:73:79:b2:ca:7d:fd:83:18:3d:a7:31:9d:0a:5a:
                    3b:d0:9c:fe:f6:a6:87:37:c1:7f:43:f8:2a:e5:3b:
                    8d:ea:1e:9d:d8:e2:61:4a:02:24:e7:3d:f5:f7:2b:
                    45:58:d0:da:e1:69:ad:1f:90:3e:c4:8f:06:03:63:
                    87:16:3b:3b:43:b8:c5:a8:01:71:6c:f8:70:82:f3:
                    fb:c6:fe:a8:4d:31:16:27:d5:5c:bf:50:12:e7:14:
                    27:dd:18:24:79:fb:bd:6e:99:f5:b9:45:0c:5b:97:
                    82:ce:44:e5:1c:53:41:88:f5:ab:6a:1e:37:11:84:
                    6f:6a:23:34:2b:6f:da:64:bc:2c:16:6e:b5:77:48:
                    ee:39:99:e3:64:76:75:d5:fc:62:38:f4:12:06:45:
                    60:dd:c2:97:20:85:79:78:b3:2e:4a:55:c1:7a:50:
                    71:1a:58:9b:15:1d:c8:53:f9:68:8a:4d:a1:aa:4a:
                    b2:64:6c:9a:9b:2c:21:24:81:dc:9a:8f:a1:96:53:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:A7:53:2D:70:35:10:25:DE:F5:2B:0A:69:BA:7F:6F:23:13:11
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/8ESnUy1wNRAl3vUrCmm6f28jExE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:09:ae:7c:f3:64:4e:dd:8a:8f:66:60:8d:4b:c5:ad:e0:91:
         6a:23:1d:21:9f:48:13:62:3c:45:cf:cf:94:2e:5a:e3:f5:20:
         6a:39:08:8c:0f:e1:03:a8:e5:18:4c:bd:73:52:94:8c:5b:eb:
         7f:19:58:05:83:10:cc:f4:6d:26:23:41:f5:cd:6d:8a:e2:4c:
         1c:79:bf:ca:ad:78:aa:f9:4f:0d:d1:b0:05:2d:38:cb:2b:ff:
         2d:03:ec:f2:e9:0d:35:09:7a:df:ae:b2:68:54:2f:55:f4:0a:
         b4:ef:74:55:de:4f:4f:85:93:92:58:7d:e3:a9:07:fe:8f:67:
         01:11:bc:40:7d:43:29:bb:1b:97:26:1a:ec:68:27:35:d2:bc:
         02:24:5a:85:38:1d:ab:fa:fa:95:2b:23:2b:d1:32:a3:a4:04:
         e5:5a:11:a7:c2:d4:73:9d:67:4b:9f:fc:42:d2:9f:74:44:53:
         27:88:d6:34:0b:6d:2a:90:7d:c6:16:ab:cc:56:d2:91:63:80:
         3c:aa:ae:8c:f7:03:13:30:b0:14:6a:00:0d:3e:19:9f:98:92:
         fd:50:eb:f6:ba:e9:f0:3e:6a:14:d6:7d:e7:1d:92:07:e2:50:
         0a:06:9a:fa:70:1b:3f:2d:59:5c:ee:fc:e6:62:66:e5:1f:da:
         3e:36:95:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org