Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20157/fh0Y8o5bqosFFbJUP3QsTzRVGu4.roa
File:                     fh0Y8o5bqosFFbJUP3QsTzRVGu4.roa (raw, json)
Hash identifier:          e6aspS2TZxHa9EzKnq1HZmYhAyw9QlWHzQIvtOeQlwM=
Subject key identifier:   7E:1D:18:F2:8E:5B:AA:8B:05:15:B2:54:3F:74:2C:4F:34:55:1A:EE
Certificate issuer:       /CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
Certificate serial:       13
Authority key identifier: 18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/fh0Y8o5bqosFFbJUP3QsTzRVGu4.roa
Signing time:             Fri 15 Jul 2022 09:27:17 +0000
ROA not before:           Fri 15 Jul 2022 09:27:17 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     63791
IP address blocks:        103.169.144.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
        Validity
            Not Before: Jul 15 09:27:17 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=7E1D18F28E5BAA8B0515B2543F742C4F34551AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:f2:86:3c:1c:63:93:06:5d:25:4c:dd:bf:
                    01:e7:f7:7b:14:26:f4:e6:d1:f2:29:93:83:17:63:
                    7d:9b:fb:28:c8:e2:52:10:2f:2f:fc:bc:8f:d7:22:
                    28:99:fe:92:b7:fa:26:bd:44:5f:a3:47:2a:00:6d:
                    9a:eb:15:d7:a8:d2:d4:7f:4c:5d:4a:e9:8e:d7:e4:
                    60:42:17:26:d0:90:b4:02:f4:8e:1f:83:f1:76:da:
                    95:c2:f1:05:27:01:9a:1f:9a:60:d5:df:56:c2:ba:
                    e9:29:89:1b:50:51:64:cd:83:19:a8:bd:05:cf:5a:
                    06:15:d2:ee:fd:99:dc:14:46:2a:fd:ad:f3:f0:68:
                    d5:f1:0f:70:7a:37:91:00:dd:d4:46:4c:c5:b4:ee:
                    40:b7:87:91:15:85:99:5f:74:5f:11:6e:f7:c9:e3:
                    c0:6e:11:9a:3a:43:0b:69:85:31:98:df:b5:29:56:
                    55:c2:7d:90:c8:85:3e:67:bb:9e:1b:e7:5c:08:54:
                    39:d9:35:d5:c0:77:26:f6:10:67:48:7c:31:09:ae:
                    15:f5:63:f1:c8:52:ce:1d:e8:92:06:05:fe:c9:9c:
                    cf:ff:96:c2:22:3b:d1:cb:88:45:75:cb:bc:56:3e:
                    ab:77:91:2a:88:a3:c7:e3:b3:6d:fe:c2:e3:d8:8c:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1D:18:F2:8E:5B:AA:8B:05:15:B2:54:3F:74:2C:4F:34:55:1A:EE
            X509v3 Authority Key Identifier:
                keyid:18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/GPI4czp2zpLtOGDyzLaI2K0r34w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/fh0Y8o5bqosFFbJUP3QsTzRVGu4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:25:5e:98:0d:4f:3a:20:b1:bb:a2:61:70:fc:b1:a0:47:
         81:70:a8:16:24:3d:9f:ef:2b:aa:6c:d4:bc:13:3b:8e:69:85:
         7a:f8:a1:5e:8a:ef:e4:1d:a6:4b:b8:77:8d:d6:7e:70:d9:b8:
         ea:eb:c0:57:f3:f9:d8:be:ae:4c:5d:dd:74:da:5f:a7:1f:6a:
         81:ec:18:f7:96:1f:5f:cf:f6:1c:7e:1e:cb:5f:e0:ea:d4:c9:
         c5:86:bc:ce:9d:d5:72:13:07:05:d4:a3:4a:f3:b5:76:5f:c7:
         b8:17:40:dc:f0:43:c0:df:c9:ad:24:bd:3b:1e:f3:b2:61:6c:
         47:8c:2c:96:1a:46:fe:63:cf:c6:e6:72:e3:68:db:6a:cb:4f:
         39:cc:78:3a:d5:00:34:91:94:97:1f:48:6f:23:5d:28:e7:58:
         ff:34:50:b5:44:50:2b:50:6d:4a:16:34:11:3f:b4:c7:3c:92:
         9d:b2:43:d1:64:1b:1c:63:41:1d:94:81:2a:0a:c5:50:59:03:
         3c:64:37:36:85:2a:b2:43:52:7b:87:d4:e6:07:3a:8e:a7:55:
         25:87:ce:cd:bc:7b:7a:ec:c9:90:e2:f4:72:36:96:74:5b:4f:
         fa:84:d4:ed:8b:cf:e2:35:a0:cb:c7:59:bf:34:95:69:27:ca:
         6e:7b:98:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org