Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/E8YQtyBBGCc2OFz_E55vqRBE-MI.roa
File:                     E8YQtyBBGCc2OFz_E55vqRBE-MI.roa (raw, json)
Hash identifier:          88Qi/1G1KaZCc9iQiw/BS+/+9qcQ2UEHWRlrwyBo7jA=
Subject key identifier:   13:C6:10:B7:20:41:18:27:36:38:5C:FF:13:9E:6F:A9:10:44:F8:C2
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       06
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/E8YQtyBBGCc2OFz_E55vqRBE-MI.roa
Signing time:             Fri 23 Dec 2022 11:10:25 +0000
ROA not before:           Fri 23 Dec 2022 11:10:25 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     63796
IP address blocks:        103.37.88.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Dec 23 11:10:25 2022 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=13C610B72041182736385CFF139E6FA91044F8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:af:b5:80:26:49:06:11:45:49:2c:2c:25:8e:
                    cf:b5:f0:91:53:08:5c:14:b7:03:1a:73:d6:3e:8f:
                    a7:cd:90:5c:e3:50:03:cc:87:17:db:94:e9:60:75:
                    8f:38:34:77:c4:6b:49:4d:c8:5b:07:5c:c8:70:56:
                    42:db:82:a0:9b:f6:9c:0b:67:a0:b4:3f:57:b1:25:
                    90:5f:ba:4c:bb:0b:4c:65:d2:c1:7a:2f:ec:18:cf:
                    fa:80:97:5e:6d:85:1e:f7:6f:93:d1:31:3d:65:f9:
                    c9:80:e1:57:72:1f:e9:4e:ce:13:a9:6c:db:5b:7b:
                    51:f8:95:7a:cd:ba:c2:37:69:ac:d1:5c:39:49:dc:
                    6b:77:bf:3e:d3:53:ca:8d:c6:ee:59:fa:06:8c:ab:
                    ca:e1:74:73:90:4a:2e:78:14:e7:6c:22:29:eb:27:
                    8d:fd:e4:b2:83:83:28:a0:b1:98:6e:79:39:41:61:
                    5a:5f:a4:b8:f5:da:8a:75:ac:4d:55:6f:d5:9c:9a:
                    11:98:49:9a:99:ad:36:f7:cf:3c:bf:8e:96:65:cc:
                    3b:48:32:a4:58:49:55:b7:db:a2:9e:0d:35:2a:fc:
                    14:60:5d:f0:c5:d6:a0:78:33:42:e6:1b:9e:87:48:
                    87:27:45:53:e8:03:8e:f2:ea:6e:d6:79:4c:e4:c1:
                    c2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:10:B7:20:41:18:27:36:38:5C:FF:13:9E:6F:A9:10:44:F8:C2
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/E8YQtyBBGCc2OFz_E55vqRBE-MI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:05:b5:7f:97:a1:7a:ab:8d:99:c2:d0:12:66:5f:8b:c5:17:
         9f:8f:1b:fa:c3:4c:81:c6:08:9d:7c:f0:70:9b:be:24:8e:c8:
         b6:42:be:d3:46:5b:eb:a8:5c:6a:de:54:6b:9f:31:4f:e0:c2:
         98:25:ba:08:90:74:a7:c0:cc:3a:2a:f4:e2:67:c7:55:39:46:
         c8:16:03:7e:32:b4:d7:d8:9d:e3:6f:c3:ab:a1:f9:72:5b:24:
         43:ee:da:6a:e5:18:8d:5e:d8:1c:b7:27:b4:3a:6d:ca:82:68:
         46:4d:b6:7a:67:a6:de:af:a2:67:bf:be:5a:11:fb:af:f2:ab:
         b3:51:e0:88:18:4f:88:93:53:72:78:fd:dc:2e:1d:58:25:06:
         8d:39:c7:c6:7d:89:31:16:59:5a:0e:90:07:23:2f:86:cf:c7:
         3c:19:78:9b:cb:64:b5:78:d4:d4:77:26:52:ce:8d:72:5c:15:
         09:b0:75:ca:eb:70:90:d0:97:8c:6a:b2:b4:c8:94:fe:86:f7:
         a4:8a:28:9f:db:9e:eb:c0:d0:5c:5d:ae:eb:29:4b:90:ae:13:
         b8:83:3b:5d:58:d0:0b:af:fe:11:bc:18:b9:6d:2d:46:34:36:
         a1:c6:f3:a6:37:5e:29:44:28:42:1f:e0:c9:38:6d:61:36:30:
         f0:62:28:7f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDU3
QjNCOERCMzE4NTk4QjY2RjRERDY2MThDQjE5QTA4NTY1RkZEMB4XDTIyMTIyMzEx
MTAyNVoXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMTNDNjEwQjcyMDQxMTgy
NzM2Mzg1Q0ZGMTM5RTZGQTkxMDQ0RjhDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPWvtYAmSQYRRUksLCWOz7XwkVMIXBS3Axpz1j6Pp82QXONQA8yH
F9uU6WB1jzg0d8RrSU3IWwdcyHBWQtuCoJv2nAtnoLQ/V7ElkF+6TLsLTGXSwXov
7BjP+oCXXm2FHvdvk9ExPWX5yYDhV3If6U7OE6ls21t7UfiVes26wjdprNFcOUnc
a3e/PtNTyo3G7ln6BoyryuF0c5BKLngU52wiKesnjf3ksoODKKCxmG55OUFhWl+k
uPXainWsTVVv1ZyaEZhJmpmtNvfPPL+OlmXMO0gypFhJVbfbop4NNSr8FGBd8MXW
oHgzQuYbnodIhydFU+gDjvLqbtZ5TOTBwjMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQTxhC3IEEYJzY4XP8Tnm+pEET4wjAfBgNVHSMEGDAWgBSNV7O42zGFmLZvTdZh
jLGaCFZf/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxOTkvalZlenVOc3hoWmkyYjAzV1lZeXhtZ2hXWF8wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalZlenVOc3hoWmkyYjAzV1lZeXht
Z2hXWF8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTk5L0U4WVF0eUJCR0NjMk9Gel9FNTV2cVJCRS1NSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnJVgwDQYJKoZIhvcNAQELBQADggEBADQFtX+XoXqrjZnC0BJmX4vF
F5+PG/rDTIHGCJ188HCbviSOyLZCvtNGW+uoXGreVGufMU/gwpglugiQdKfAzDoq
9OJnx1U5RsgWA34ytNfYneNvw6uh+XJbJEPu2mrlGI1e2By3J7Q6bcqCaEZNtnpn
pt6vome/vloR+6/yq7NR4IgYT4iTU3J4/dwuHVglBo05x8Z9iTEWWVoOkAcjL4bP
xzwZeJvLZLV41NR3JlLOjXJcFQmwdcrrcJDQl4xqsrTIlP6G96SKKJ/bnuvA0Fxd
ruspS5CuE7iDO11Y0Auv/hG8GLltLUY0NqHG86Y3XilEKEIf4Mk4bWE2MPBiKH8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org