Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/rcQjlxBOf-u9-McV8taXi1Tdv6o.roa
File:                     rcQjlxBOf-u9-McV8taXi1Tdv6o.roa (raw, json)
Hash identifier:          SEHKM0FoyfrjCmvS9/je4DDmPrTm95IhQSN9rOZFZ6s=
Subject key identifier:   AD:C4:23:97:10:4E:7F:EB:BD:F8:C7:15:F2:D6:97:8B:54:DD:BF:AA
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       2C
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/rcQjlxBOf-u9-McV8taXi1Tdv6o.roa
Signing time:             Sun 01 May 2022 01:30:57 +0000
ROA not before:           Sun 01 May 2022 01:30:57 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     63774
IP address blocks:        103.113.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: May  1 01:30:57 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=ADC42397104E7FEBBDF8C715F2D6978B54DDBFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:1f:51:62:36:58:ea:45:f2:c2:22:c8:91:
                    6d:b7:ec:9f:3a:9d:43:ca:51:a7:56:db:bc:cc:6b:
                    51:12:dd:68:00:cf:b6:53:bd:51:8c:3b:dc:eb:dc:
                    a7:4e:ce:07:c0:1f:c9:83:70:91:d6:7a:1e:21:0e:
                    d0:10:66:c7:28:32:fd:92:6f:9a:a4:2e:0f:21:f6:
                    9a:d6:78:ce:7f:82:44:b6:4c:08:d2:8d:6a:b0:d6:
                    04:0b:7d:c2:f9:17:38:5d:22:52:05:d3:c4:23:f8:
                    c4:af:43:38:cf:8c:76:29:4d:14:c7:2e:1e:45:09:
                    5c:a7:a3:0d:7c:e4:1b:8c:46:f1:1a:a0:82:43:4d:
                    73:72:04:1b:6c:84:1c:45:06:3f:a6:8e:28:bc:5b:
                    25:60:41:c2:d4:e6:6f:ce:5e:d1:f2:c2:dd:f3:10:
                    98:20:ff:95:b6:1a:aa:4e:10:03:30:c6:0c:5c:ce:
                    83:20:3d:22:30:bb:34:c6:ad:77:79:d6:99:a6:53:
                    70:6e:3a:69:6c:ed:ff:70:ed:a8:96:14:1c:88:bb:
                    92:64:a4:58:e2:6e:0b:c8:09:67:9a:3e:56:e8:33:
                    74:fe:f0:dc:d4:96:88:5c:57:ad:a5:1a:47:cf:ac:
                    59:89:45:be:7e:d8:be:a2:c6:cb:23:f5:1a:71:5e:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:23:97:10:4E:7F:EB:BD:F8:C7:15:F2:D6:97:8B:54:DD:BF:AA
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/rcQjlxBOf-u9-McV8taXi1Tdv6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:b7:26:c1:2e:80:19:eb:96:a7:7c:39:6a:9d:28:3e:e1:
         56:92:94:32:8c:e0:8d:49:99:d9:07:cd:48:2b:41:d7:59:31:
         68:f2:db:3c:d5:1b:5e:e1:e7:09:06:76:0a:57:3f:e5:d7:49:
         15:a7:48:4b:9f:26:47:31:0d:37:0d:77:c9:b0:eb:9d:47:9f:
         64:d9:93:55:5d:d8:51:05:94:6c:b7:a6:be:8f:10:42:43:a2:
         b7:41:09:d2:e0:f5:8f:96:75:78:6e:cf:51:42:af:68:4f:af:
         ab:b7:ea:89:31:c7:e6:14:2e:21:2a:8f:ae:f3:b8:ff:87:02:
         70:34:81:e6:95:25:e3:c2:12:05:2d:84:f2:4a:6b:48:27:14:
         2b:03:83:10:9f:b6:2b:f6:8c:40:62:11:76:f5:f7:5e:b6:5e:
         cd:71:4a:ad:1c:f8:3a:58:c9:94:d8:1d:41:14:74:f9:05:f3:
         81:fb:32:97:e2:61:4c:06:7c:ed:e6:84:88:5b:3a:b9:bf:e0:
         0f:5d:76:95:76:c5:86:5e:87:48:24:78:ab:cc:e3:23:37:9a:
         6e:fe:b1:b7:cf:90:a6:2e:7a:4a:fd:11:07:60:46:1a:e3:67:
         ff:d9:95:06:73:cf:80:47:2e:33:28:64:d8:77:9c:02:7b:55:
         e7:0f:a1:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org