Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20202/QihiU2BG2a8SZPBbXTwObsnAcuc.roa
File:                     QihiU2BG2a8SZPBbXTwObsnAcuc.roa (raw, json)
Hash identifier:          Cqy/zlRtWhVGturvRDFyYdNYJts0peT8aAOjs37g95E=
Subject key identifier:   42:28:62:53:60:46:D9:AF:12:64:F0:5B:5D:3C:0E:6E:C9:C0:72:E7
Certificate issuer:       /CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
Certificate serial:       02
Authority key identifier: 91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/QihiU2BG2a8SZPBbXTwObsnAcuc.roa
Signing time:             Sat 24 Dec 2022 10:44:00 +0000
ROA not before:           Sat 24 Dec 2022 10:44:00 +0000
ROA not after:            Sun 24 Dec 2023 09:57:00 +0000
asID:                     63797
IP address blocks:        103.48.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
        Validity
            Not Before: Dec 24 10:44:00 2022 GMT
            Not After : Dec 24 09:57:00 2023 GMT
        Subject: CN=422862536046D9AF1264F05B5D3C0E6EC9C072E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:42:94:a9:78:34:b1:3a:fc:18:38:04:f0:
                    72:91:4c:8f:b0:f9:4c:56:5d:74:50:86:b3:b1:85:
                    ed:14:1b:90:0f:3e:2d:f4:2d:d4:7b:90:75:cc:90:
                    27:06:4c:9d:4d:f9:c1:d4:8e:68:2f:68:b9:63:01:
                    19:5c:6f:e9:04:26:82:79:3f:cf:d2:3e:fc:be:de:
                    79:0d:12:68:58:92:89:19:bb:a1:2c:f6:02:a3:a5:
                    44:f6:f5:13:14:f8:6c:ee:64:33:03:28:cf:47:9b:
                    b6:4b:6e:64:65:34:c0:82:da:78:d5:53:00:4f:e4:
                    bb:33:ce:a2:5d:a8:9e:f5:f0:86:ed:92:e5:54:f6:
                    cf:ef:f3:8e:49:c9:f0:19:00:6e:48:97:f3:39:f5:
                    44:0b:f9:bb:26:28:48:37:8e:13:f8:95:e5:04:16:
                    b3:97:85:29:0f:c2:de:60:60:63:f0:e9:61:4d:10:
                    35:ea:35:f2:63:61:27:74:8d:79:83:a0:22:b5:df:
                    32:14:03:3e:d4:ff:b0:d9:21:96:ba:5c:7d:80:00:
                    68:a6:85:ef:8a:55:b5:7c:91:f9:50:ee:a2:25:7a:
                    d4:ca:4d:96:28:dd:fa:7b:68:37:cd:e5:d4:eb:df:
                    dd:9c:be:2d:99:e0:a1:47:0d:77:29:c5:cf:56:3d:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:62:53:60:46:D9:AF:12:64:F0:5B:5D:3C:0E:6E:C9:C0:72:E7
            X509v3 Authority Key Identifier:
                keyid:91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/QihiU2BG2a8SZPBbXTwObsnAcuc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:4e:64:b0:81:13:67:49:44:30:11:72:53:c0:07:2a:72:a5:
         49:e4:77:7a:e3:e9:15:23:32:06:81:84:ed:ad:90:f9:1d:55:
         68:e8:84:68:a0:58:bc:0d:4f:ac:5d:1e:ff:99:ea:4f:a0:d0:
         9b:ab:5e:0e:58:54:a5:15:02:a2:3c:5f:c7:f0:44:fb:2f:76:
         6c:be:c8:7c:29:31:e0:a7:fc:63:19:33:7d:e6:f5:dd:2f:9b:
         03:48:02:58:86:b9:cc:1f:4b:69:62:6d:4e:a1:b1:e3:b2:a2:
         32:b9:b1:11:21:4b:1e:a8:28:94:2a:c5:31:79:28:e9:85:2e:
         7a:05:e0:0c:4e:ff:f9:85:f1:b6:9d:9c:3a:b8:3b:74:4d:8e:
         b0:bf:ff:76:81:b6:d0:2c:5f:df:0d:16:b4:65:66:de:43:3e:
         a9:66:1d:bd:8f:c7:e7:0f:bd:f1:38:45:9c:c8:97:98:93:6c:
         fe:92:48:e7:60:44:42:41:69:b8:4f:85:0e:98:de:7f:d6:01:
         b8:af:b6:84:f3:b2:f3:f1:9d:d3:a7:84:35:6a:db:02:51:a5:
         d7:9e:46:4a:e0:03:9b:14:14:7c:2e:85:02:c3:2a:36:c5:c5:
         51:8c:c0:43:1e:65:bd:f4:66:ab:73:9c:cd:c4:ce:c7:2f:fc:
         88:0d:18:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org