Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/nLNFCslnJLXdEwd4HLF8pzyFXMI.roa
File:                     nLNFCslnJLXdEwd4HLF8pzyFXMI.roa (raw, json)
Hash identifier:          W32CyougPYFByXr7LGgoFrg1zKvI50UYmgop9PcP2X4=
Subject key identifier:   9C:B3:45:0A:C9:67:24:B5:DD:13:07:78:1C:B1:7C:A7:3C:85:5C:C2
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       2D
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/nLNFCslnJLXdEwd4HLF8pzyFXMI.roa
Signing time:             Thu 13 Apr 2023 09:50:50 +0000
ROA not before:           Thu 13 Apr 2023 09:50:50 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63776
IP address blocks:        103.123.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Apr 13 09:50:50 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9CB3450AC96724B5DD1307781CB17CA73C855CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:a7:2e:d0:36:92:fa:91:9a:d3:d7:9c:36:
                    92:30:a9:e3:36:fe:80:c7:c6:2b:3a:e2:0d:27:de:
                    61:8f:95:a0:a7:88:4e:e0:34:58:04:1b:e2:ad:2a:
                    31:c5:c1:5f:19:0e:d6:18:33:a7:e1:55:b7:12:90:
                    de:b2:ed:2d:54:a4:32:07:d6:fa:de:2d:b4:0b:c0:
                    d3:27:a0:ed:b5:28:bb:eb:53:de:1c:7e:99:05:0d:
                    80:6c:bc:9c:9f:f1:1c:6b:5c:0a:7e:ab:e2:78:bd:
                    b5:cc:bc:d7:1d:7d:7b:c5:fc:18:8d:da:c8:0e:d7:
                    a1:57:8f:81:f9:2d:0e:f2:67:34:95:62:a9:2f:bf:
                    b0:3b:a9:fc:25:3d:62:00:60:36:c9:2c:f9:82:67:
                    ff:79:46:b5:54:6a:55:56:0e:38:09:80:8f:1b:e8:
                    5b:03:4c:fe:b8:b5:69:c2:bd:65:d8:67:e8:7c:29:
                    3c:75:78:41:2a:ba:be:cc:bc:37:03:77:af:fc:cd:
                    60:e8:77:5b:9a:ce:50:ef:c8:ed:c7:2c:cf:3b:a0:
                    f1:6b:dd:2c:ad:a6:f2:84:96:01:6c:c7:2f:19:40:
                    af:2e:cb:c8:88:48:d0:dd:8a:c0:c8:b7:41:48:19:
                    41:8f:b9:49:df:3f:26:5f:9c:ca:76:41:17:79:b4:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:45:0A:C9:67:24:B5:DD:13:07:78:1C:B1:7C:A7:3C:85:5C:C2
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/nLNFCslnJLXdEwd4HLF8pzyFXMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:43:e2:5f:2f:44:24:3a:29:a5:b9:15:64:7f:8d:6f:68:
         6c:6f:a2:18:bd:ed:26:e8:50:56:b9:63:99:29:b2:ec:1d:cf:
         3f:bc:37:b5:1f:7f:af:77:ef:bd:39:c1:75:be:2c:8d:61:cb:
         4b:2e:34:91:6d:6a:89:21:2f:99:dd:93:0c:76:ce:8e:88:64:
         4a:3a:65:bb:8e:eb:00:95:1c:81:60:13:d5:14:06:a9:eb:af:
         a0:ea:57:c4:eb:11:4b:14:a2:c9:ca:21:b4:7b:a4:1c:d5:f9:
         6c:29:df:b3:0f:ef:58:da:21:5d:90:bc:9e:a4:97:83:3d:30:
         6a:f0:03:81:34:ec:31:90:06:a8:3a:8a:99:c0:84:34:fa:cc:
         b8:ac:12:c1:14:07:13:85:2f:09:64:39:5c:dc:75:b8:a7:8c:
         cf:bd:55:76:a2:23:86:40:f5:b2:a9:99:b6:19:b8:98:bc:38:
         c5:e5:fd:41:52:b9:75:92:f6:83:4d:89:0e:56:6e:be:3f:76:
         73:93:27:80:f4:dd:d3:3c:01:4b:a3:45:7d:01:df:55:42:2e:
         08:2a:76:9d:af:b0:19:b4:08:e5:db:43:a0:cf:e7:2d:d2:93:
         00:b3:a1:d6:de:08:d4:02:20:a0:f5:d8:1c:39:1c:80:4a:72:
         82:14:a0:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org