Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20159/f81KKx9Eqd562-NqwCVBTE3P9LM.roa
File:                     f81KKx9Eqd562-NqwCVBTE3P9LM.roa (raw, json)
Hash identifier:          z07AD8t/5B5KPmEnZbE6D4Dg7WzrAz2aDrMRaLXrzRk=
Subject key identifier:   7F:CD:4A:2B:1F:44:A9:DE:7A:DB:E3:6A:C0:25:41:4C:4D:CF:F4:B3
Certificate issuer:       /CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Certificate serial:       02
Authority key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/f81KKx9Eqd562-NqwCVBTE3P9LM.roa
Signing time:             Thu 20 Oct 2022 02:01:19 +0000
ROA not before:           Thu 20 Oct 2022 02:01:19 +0000
ROA not after:            Fri 20 Oct 2023 01:56:30 +0000
asID:                     131988
IP address blocks:        103.170.124.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
        Validity
            Not Before: Oct 20 02:01:19 2022 GMT
            Not After : Oct 20 01:56:30 2023 GMT
        Subject: CN=7FCD4A2B1F44A9DE7ADBE36AC025414C4DCFF4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:8b:be:b5:1f:26:c5:07:df:c7:70:c7:fc:
                    64:ba:a4:f9:4d:b2:b3:83:c5:e7:76:a3:ed:80:e6:
                    6d:8d:f5:59:67:84:0b:81:dc:69:a4:f4:02:cb:68:
                    83:76:87:84:c8:84:f3:c0:04:e7:68:54:8e:58:65:
                    c2:60:cb:e0:01:19:96:be:21:98:a3:01:83:7d:71:
                    a8:5e:91:35:ea:57:da:e2:a2:07:d6:23:9b:c4:70:
                    13:81:78:55:a4:76:76:de:6f:a2:01:64:f5:a6:ce:
                    a7:04:ba:80:cd:75:1b:45:94:e2:a1:ad:21:e3:3d:
                    a6:7e:41:62:10:de:f5:94:03:9b:c7:51:5a:68:a8:
                    66:9f:5b:66:df:1f:f7:6b:b7:32:3c:9c:28:b7:58:
                    fe:04:b6:26:b3:0e:44:dc:17:b6:0a:ea:a1:5c:c2:
                    9d:1c:76:c6:32:50:45:a8:f5:e7:4c:30:c9:de:a4:
                    21:ef:80:d3:43:91:69:c6:5a:9e:68:ca:36:63:ab:
                    e1:49:98:87:5b:a1:8c:5b:b1:7a:8b:48:87:6b:de:
                    21:d6:70:92:63:41:46:d4:00:84:ed:8d:3a:50:56:
                    ce:06:d9:71:4d:e6:c3:af:b1:19:23:28:28:01:ce:
                    80:3d:3b:f2:30:ad:a5:69:58:ff:b0:b3:c9:36:32:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:4A:2B:1F:44:A9:DE:7A:DB:E3:6A:C0:25:41:4C:4D:CF:F4:B3
            X509v3 Authority Key Identifier:
                keyid:BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/f81KKx9Eqd562-NqwCVBTE3P9LM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:c9:00:5d:12:29:af:73:e2:29:58:20:65:b9:89:cd:f0:
         18:92:b3:6e:a9:b7:08:00:f8:6b:1a:21:fc:db:72:09:f7:00:
         d5:7a:1a:d3:bf:9d:2e:c6:b7:4b:60:a5:82:6d:e8:0f:12:41:
         d6:db:4d:28:ca:f4:bf:7a:5c:53:a2:1e:6b:93:25:d9:2a:8c:
         c1:24:70:03:c5:b3:6d:c0:d6:69:dc:c1:cc:bd:7b:97:13:db:
         01:07:9f:31:e8:f3:1e:64:7f:1e:c0:05:70:ef:e7:96:86:cf:
         8f:3d:c0:31:67:cd:80:ad:42:39:34:48:ac:bb:d7:61:5f:5b:
         e1:84:5d:fb:de:1a:87:97:c9:fc:69:46:5a:32:d3:e6:86:06:
         5d:97:e3:a7:3c:a6:25:58:d9:8e:dc:ed:a5:95:c1:28:ac:5e:
         c3:3e:68:84:2a:fc:37:af:4a:48:e8:2c:4c:16:35:23:04:ee:
         d4:42:8f:34:24:a3:14:11:01:f7:f7:d2:e3:eb:63:3a:a8:c4:
         dc:4f:a6:c1:c9:ad:51:9c:53:ad:cf:66:cc:c2:d3:53:5e:e6:
         ab:47:88:a0:03:46:86:7f:11:66:92:23:25:e5:c8:5e:14:6b:
         29:da:63:ec:02:88:23:40:2a:ff:ca:83:f7:1f:e4:3c:5f:c3:
         8d:8d:21:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org