Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/8_qZfyiz0nNTd67DmpzSmiDhn5c.roa
File:                     8_qZfyiz0nNTd67DmpzSmiDhn5c.roa (raw, json)
Hash identifier:          l8RY8f8Z6yPuZRShW+z0JIfhgsvsqi7hNEMl/WY/egI=
Subject key identifier:   F3:FA:99:7F:28:B3:D2:73:53:77:AE:C3:9A:9C:D2:9A:20:E1:9F:97
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       04
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/8_qZfyiz0nNTd67DmpzSmiDhn5c.roa
Signing time:             Sat 03 Dec 2022 19:48:25 +0000
ROA not before:           Sat 03 Dec 2022 19:48:25 +0000
ROA not after:            Sun 03 Dec 2023 19:44:21 +0000
asID:                     150296
IP address blocks:        103.37.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Dec  3 19:48:25 2022 GMT
            Not After : Dec  3 19:44:21 2023 GMT
        Subject: CN=F3FA997F28B3D2735377AEC39A9CD29A20E19F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:f7:49:5b:2a:22:66:00:01:7a:1a:c7:23:
                    88:56:98:89:63:85:78:23:62:1e:e3:ee:91:14:b1:
                    94:13:a1:de:59:d3:72:7d:a8:03:19:b2:ae:b4:0b:
                    d1:b6:a4:41:f2:8a:ba:a3:c4:32:c7:37:59:66:0b:
                    3d:79:94:3e:7b:d4:d6:28:03:4e:b1:dc:32:8b:88:
                    03:cb:a3:56:f1:14:b6:f5:f4:73:91:9e:8c:c3:56:
                    c7:1a:0f:d8:57:32:b1:04:c1:a3:5b:48:7d:d0:90:
                    26:17:eb:ea:29:bc:cc:1b:a9:ac:bb:71:24:49:18:
                    0b:41:63:33:bd:66:7b:3a:76:63:db:8b:eb:83:89:
                    75:98:e2:9c:ed:fb:df:a6:28:39:0a:41:4b:9e:a6:
                    82:df:6c:f7:77:b0:b5:2d:16:94:04:c0:37:4e:03:
                    df:4b:76:c1:d1:e0:d6:0f:8e:7e:18:c3:ab:b4:c9:
                    bc:6b:fa:d6:3f:98:a2:b2:6d:1a:a6:59:24:87:7a:
                    27:07:7a:44:16:5b:70:9d:07:7d:0b:da:fa:58:4d:
                    96:6b:72:7e:70:7c:15:b5:57:fd:18:4e:8e:4a:6f:
                    3b:ba:f3:45:37:f8:6a:7f:77:94:fb:c4:e8:a3:21:
                    a4:77:a0:0a:34:0c:fe:39:09:fd:97:d2:f7:cc:32:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FA:99:7F:28:B3:D2:73:53:77:AE:C3:9A:9C:D2:9A:20:E1:9F:97
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/8_qZfyiz0nNTd67DmpzSmiDhn5c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:16:94:9b:74:54:73:e6:39:38:c8:7e:d9:70:63:8a:e1:66:
         6b:b3:98:cf:5d:1c:27:46:e4:12:54:87:37:c0:70:87:22:55:
         46:44:ff:4a:89:87:0f:8d:2e:34:da:97:17:f9:44:59:e6:f7:
         84:1a:f9:2f:13:f9:14:39:49:95:d3:9b:aa:0d:25:fc:4d:2b:
         c2:4b:38:c0:7c:dd:01:52:53:c3:c2:21:ab:a0:5a:4c:03:4a:
         97:f6:b3:9f:55:8e:db:c8:60:4f:c2:63:b8:6f:d4:a2:80:22:
         24:48:e1:ea:74:b7:5c:5d:dc:d0:49:0a:56:76:0c:52:00:32:
         47:00:dd:a4:e9:85:b9:2e:cc:0d:a9:a9:48:43:cc:c4:fd:30:
         cb:ae:65:fa:51:45:74:bc:d1:b3:12:da:02:4b:9c:21:16:ee:
         ba:38:27:c7:e5:2b:e5:b4:68:13:98:bb:25:44:86:59:54:40:
         07:06:c5:b9:57:2d:d9:63:65:f6:79:c8:bf:c1:44:f6:22:6b:
         df:b1:3f:e1:11:24:50:34:c0:81:0b:4e:e8:e8:4d:35:73:4e:
         0a:43:fa:48:cf:69:9a:b4:05:c8:f7:f0:6e:5e:36:0b:e3:0c:
         0c:f2:b5:c9:d0:78:9e:e2:d0:90:fd:d5:84:f0:b1:57:31:a3:
         9f:e5:47:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org