Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nXJ7er1otwJp4uq5pwqYjKv0Gh0.roa
File:                     nXJ7er1otwJp4uq5pwqYjKv0Gh0.roa (raw, json)
Hash identifier:          HM4qi2l/KH8G0yqakCVV6RRxy3Oz6b5jNwUc9V9v0Zs=
Subject key identifier:   9D:72:7B:7A:BD:68:B7:02:69:E2:EA:B9:A7:0A:98:8C:AB:F4:1A:1D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       03
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nXJ7er1otwJp4uq5pwqYjKv0Gh0.roa
Signing time:             Wed 06 Jul 2022 07:43:56 +0000
ROA not before:           Wed 06 Jul 2022 07:43:56 +0000
ROA not after:            Thu 06 Jul 2023 06:28:50 +0000
asID:                     0
IP address blocks:        103.180.130.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jul  6 07:43:56 2022 GMT
            Not After : Jul  6 06:28:50 2023 GMT
        Subject: CN=9D727B7ABD68B70269E2EAB9A70A988CABF41A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:0c:a6:b9:d5:cf:e8:be:27:b2:a3:a3:a6:
                    e1:8c:c5:19:dc:42:6e:39:15:90:5a:f7:fb:6c:4f:
                    32:43:f8:5c:66:d4:92:7a:9c:53:5e:59:20:5d:29:
                    8c:8e:26:6c:fe:52:e9:75:5b:2f:45:0f:76:f2:44:
                    90:5c:33:97:cc:f9:43:95:80:14:67:4f:82:fb:48:
                    91:4a:32:c6:62:d1:66:a6:7e:40:0f:4d:c7:4b:94:
                    6a:af:d7:72:ba:77:f0:1c:e3:08:3e:06:6f:ae:67:
                    57:a0:69:56:a9:24:2c:d8:87:9f:cf:b5:aa:b5:a0:
                    88:33:73:fc:5c:59:5d:bd:86:2f:db:63:80:01:23:
                    fa:27:2a:5d:4c:a2:d2:2f:47:3f:15:16:93:78:ae:
                    de:2a:44:95:98:5e:04:ee:ea:e4:3b:3b:a5:7d:df:
                    04:64:be:4a:fe:7d:1f:ba:47:64:d2:27:ab:48:d7:
                    68:66:98:6d:9e:c6:8f:83:fb:42:97:ce:62:e4:60:
                    a7:f1:40:18:00:13:75:47:db:8d:45:bf:30:e5:36:
                    2d:e1:c0:99:76:d8:f8:68:3d:df:0b:98:78:73:34:
                    98:fa:e1:1f:10:0f:06:c6:f0:46:a0:f8:f4:5d:37:
                    8a:6c:11:2b:b4:7f:52:dc:87:75:e7:c6:31:29:4d:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:7B:7A:BD:68:B7:02:69:E2:EA:B9:A7:0A:98:8C:AB:F4:1A:1D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nXJ7er1otwJp4uq5pwqYjKv0Gh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:b3:28:c5:a5:8c:c1:c9:65:60:9b:78:af:0c:97:e5:20:
         33:8f:66:02:a1:c4:aa:21:33:83:77:ca:8f:c2:8b:16:f0:ce:
         21:76:70:01:9d:c6:33:f1:dc:d5:6f:cd:4a:f2:d1:51:84:84:
         84:a8:56:ed:5d:48:1f:3a:d1:15:5b:80:4d:8e:76:ef:f1:b1:
         e0:5b:5b:06:2e:6e:b5:5a:43:45:0c:a5:a0:18:f9:1c:91:18:
         55:e4:49:dc:3a:cc:23:2b:49:16:c1:5f:b1:b6:b5:9c:b2:04:
         37:81:75:fc:ae:a3:20:36:72:08:5a:e0:c2:b1:60:fc:68:9d:
         ad:64:48:e7:f3:fe:07:82:8e:1e:b9:17:02:5b:41:df:78:4a:
         b8:b0:00:fe:b7:b2:32:cf:2b:ea:62:fd:d6:6b:bd:b8:90:66:
         9e:ee:e8:25:7f:09:18:5f:fa:a1:9d:27:f2:10:ad:b1:49:3f:
         c1:07:4c:f2:ca:b7:ac:b4:c8:91:89:78:34:91:7e:83:21:d1:
         4a:f7:18:e9:ce:88:aa:b7:8f:61:ef:fc:8b:b2:f9:04:06:a5:
         79:70:fa:c6:29:6e:41:dc:91:8b:3e:99:d6:ac:5e:25:09:52:
         8e:df:73:44:af:14:aa:2e:80:a3:7e:61:4b:cb:c4:f3:59:7b:
         ca:c5:1f:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org