Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZhMrUfbcMMYT95MS2_yp80Ekc_8.roa
File:                     ZhMrUfbcMMYT95MS2_yp80Ekc_8.roa (raw, json)
Hash identifier:          9lvDje8vViGTeSPLO1YqoMmYWjcfgfuFIbBPtYAF4RU=
Subject key identifier:   66:13:2B:51:F6:DC:30:C6:13:F7:93:12:DB:FC:A9:F3:41:24:73:FF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZhMrUfbcMMYT95MS2_yp80Ekc_8.roa
Signing time:             Wed 06 Jul 2022 07:03:43 +0000
ROA not before:           Wed 06 Jul 2022 07:03:43 +0000
ROA not after:            Thu 06 Jul 2023 06:28:50 +0000
asID:                     146979
IP address blocks:        103.180.131.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jul  6 07:03:43 2022 GMT
            Not After : Jul  6 06:28:50 2023 GMT
        Subject: CN=66132B51F6DC30C613F79312DBFCA9F3412473FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:7c:1b:f0:5e:3e:e8:52:ad:67:28:2a:05:
                    3c:5d:ff:17:a0:67:62:c5:9a:79:44:99:c8:34:48:
                    3f:7c:cf:ab:17:97:bd:4e:7a:96:61:47:ca:34:d9:
                    35:3a:d6:51:cc:00:88:86:ac:fa:30:5b:26:bc:66:
                    dd:67:84:91:f0:aa:2c:bd:55:cc:c6:5f:f2:48:0b:
                    74:5d:92:41:0e:2e:f8:a0:3e:70:30:21:3f:ba:15:
                    14:a7:77:82:65:66:49:29:7b:cd:7f:2f:b8:51:50:
                    cd:4c:05:f5:0b:7b:5d:ba:40:a6:ad:3a:a0:3c:88:
                    01:47:61:9a:4d:c1:23:5b:1d:64:9a:04:26:cc:f2:
                    0a:ab:c3:ce:d8:15:4d:47:e5:10:05:0e:d8:82:9b:
                    35:cd:ad:59:b1:36:51:80:9a:42:ba:56:f2:79:e4:
                    d3:e6:33:af:8e:01:f7:61:f4:5b:6f:b4:4a:d8:c4:
                    29:9a:4e:7d:41:3d:fd:21:ca:49:8f:ad:c9:c5:f3:
                    44:96:98:4c:f3:c6:7a:33:3d:dd:80:be:6c:f7:34:
                    d1:30:95:93:7e:fd:93:6e:ba:5d:c2:a3:fc:45:ab:
                    80:68:cf:aa:7b:7e:7d:f0:4b:c7:5c:dc:a6:b2:a9:
                    f5:43:0b:20:5f:c6:9a:54:e6:b0:68:c3:f8:4f:93:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:13:2B:51:F6:DC:30:C6:13:F7:93:12:DB:FC:A9:F3:41:24:73:FF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZhMrUfbcMMYT95MS2_yp80Ekc_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:08:cb:22:4a:d1:fb:82:43:eb:c7:99:c7:55:fb:6f:c9:
         28:21:11:83:b6:29:b2:65:cb:3e:d1:2f:a2:22:b1:10:1c:82:
         e6:66:86:09:e9:9e:4d:27:73:f0:c5:59:2b:85:9c:1f:d1:d2:
         4d:23:5a:ea:01:cc:30:10:2b:fa:e5:27:3a:1f:fc:58:2f:c3:
         0c:3e:72:5f:12:99:b0:81:75:cf:da:1c:63:6c:2c:0b:0a:87:
         d4:b1:ff:28:fe:f8:d8:ac:ac:a7:c2:6e:8f:21:2b:a0:53:ba:
         61:f1:56:b3:c6:d5:95:f3:0e:d4:fb:0e:13:d4:45:fc:aa:f0:
         84:9c:ec:30:64:ac:5f:f3:fe:cd:64:11:e1:03:17:d7:42:f4:
         69:30:c4:09:fa:17:bc:39:63:03:d6:c4:a8:37:f3:7a:42:0c:
         3d:d2:5f:4e:7c:05:50:09:8a:5f:1b:34:f4:2b:b1:9c:18:65:
         b2:69:b2:a8:fc:7d:2b:7d:3e:4b:41:fb:5a:2e:77:b6:ce:8b:
         39:fd:97:1a:51:67:41:02:4c:b6:03:a7:b5:28:0e:6a:95:bb:
         17:d3:54:0c:43:e9:ed:e3:a2:78:c6:ad:21:7f:26:89:4a:43:
         a0:09:d3:5d:49:5d:82:97:a8:56:0c:f5:6a:a5:af:5c:0d:65:
         75:39:73:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org