Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20189/9Da_wEo23b66AsQ3PpSI6ILCEiQ.roa
File:                     9Da_wEo23b66AsQ3PpSI6ILCEiQ.roa (raw, json)
Hash identifier:          gHYVkgd7OzJCE6aqQruAoT5FBZeyRioJIdJJFLem8YM=
Subject key identifier:   F4:36:BF:C0:4A:36:DD:BE:BA:02:C4:37:3E:94:88:E8:82:C2:12:24
Certificate issuer:       /CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
Certificate serial:       03
Authority key identifier: E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/9Da_wEo23b66AsQ3PpSI6ILCEiQ.roa
Signing time:             Tue 12 Jul 2022 06:11:34 +0000
ROA not before:           Tue 12 Jul 2022 06:11:34 +0000
ROA not after:            Wed 12 Jul 2023 05:59:31 +0000
asID:                     146981
IP address blocks:        103.189.188.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
        Validity
            Not Before: Jul 12 06:11:34 2022 GMT
            Not After : Jul 12 05:59:31 2023 GMT
        Subject: CN=F436BFC04A36DDBEBA02C4373E9488E882C21224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:a1:47:8a:2e:fe:f4:86:a4:0a:0e:ca:14:
                    a8:f6:07:e4:2a:71:bd:1f:b4:08:89:8d:9d:8a:3f:
                    3d:f5:8a:5a:b0:8d:aa:cd:80:61:39:99:c8:92:c3:
                    c3:1a:2b:75:4b:4a:fd:2d:73:3d:6d:b2:f8:ca:98:
                    ad:3f:8b:a3:96:a0:97:7c:af:16:91:d0:bd:f8:2c:
                    6d:b1:ed:53:b9:18:10:a3:6a:ed:af:74:ea:ac:8f:
                    81:13:b9:84:4b:15:cc:54:74:df:8d:b3:41:73:23:
                    0d:b0:92:82:b7:83:2b:b3:d3:67:4c:99:bf:eb:1e:
                    b9:dc:59:c9:56:2b:40:31:a0:ec:f1:0d:69:4a:fb:
                    c1:d0:61:1e:f2:62:ad:ad:7b:a4:b1:fb:00:18:27:
                    38:09:12:82:e3:d5:67:55:32:ef:f2:d2:69:8c:2b:
                    0b:18:52:4f:94:d1:58:fb:24:56:f8:a3:93:c2:c8:
                    42:2e:17:fe:fa:31:0b:c8:cb:35:99:64:2e:20:1c:
                    b7:62:f7:6c:9b:71:aa:da:69:63:ee:61:e7:83:94:
                    e3:4c:69:48:99:8f:de:74:60:d8:3e:49:0f:5e:96:
                    68:1c:9d:3f:94:eb:01:72:cd:ab:a4:77:ec:10:79:
                    86:6b:47:e4:f8:fb:c8:ff:33:af:70:32:03:49:02:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:BF:C0:4A:36:DD:BE:BA:02:C4:37:3E:94:88:E8:82:C2:12:24
            X509v3 Authority Key Identifier:
                keyid:E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/9Da_wEo23b66AsQ3PpSI6ILCEiQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:3b:b0:cd:bf:0e:8b:8b:89:d8:08:9e:d6:a2:15:d9:39:
         7e:64:17:29:0d:69:7b:3f:ac:cb:f5:3f:99:bc:9d:b2:29:aa:
         f6:01:3f:47:08:65:c2:a1:99:aa:52:8f:1b:ff:96:c4:3c:93:
         59:4f:cf:df:5c:40:2e:0a:7c:f5:f1:58:ba:9a:ca:f2:02:2c:
         24:9e:a0:eb:72:16:78:4a:71:ca:4a:1d:11:58:f2:2c:7a:db:
         bc:46:82:aa:b6:7c:bb:19:bd:bc:fb:c7:6b:fd:9c:c5:99:04:
         5f:d0:c8:bc:7d:d7:2f:5a:fe:77:c9:c3:5c:ec:2c:ff:12:dd:
         6b:f4:a9:02:59:64:8a:ee:b4:76:7a:cb:2d:02:3c:b9:dd:59:
         ec:5a:65:d9:90:a8:a3:91:6f:5c:8d:e5:c6:47:84:72:62:46:
         d5:30:77:1f:a1:84:35:03:0e:c3:ac:9c:0b:3f:39:10:5a:80:
         f7:f7:1b:5e:e1:15:a7:40:9a:05:7b:ce:d8:f6:57:40:a7:5f:
         eb:de:f4:5e:44:42:43:15:dd:fd:45:80:ef:33:c3:57:5b:73:
         4b:ce:e6:ef:42:dd:86:c2:e1:53:c3:ec:22:61:2b:3a:b8:a4:
         37:b9:f2:6a:15:c4:98:57:46:68:8a:09:2c:98:7b:e4:f2:20:
         b1:c9:87:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org