Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/gxP2iJQ9i7ag0baeOUrmQ2yRtBE.roa
File:                     gxP2iJQ9i7ag0baeOUrmQ2yRtBE.roa (raw, json)
Hash identifier:          2pcs/t+fGtHOGnALptQk9Iu6dfZLb7kW1ZzvjOHgBvA=
Subject key identifier:   83:13:F6:88:94:3D:8B:B6:A0:D1:B6:9E:39:4A:E6:43:6C:91:B4:11
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       40
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/gxP2iJQ9i7ag0baeOUrmQ2yRtBE.roa
Signing time:             Sat 01 Apr 2023 01:29:48 +0000
ROA not before:           Sat 01 Apr 2023 01:29:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        103.235.124.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8313F688943D8BB6A0D1B69E394AE6436C91B411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:4b:c0:84:33:9f:6c:4d:5c:e1:7c:40:d5:
                    38:ca:a1:41:97:f6:19:6f:eb:17:e0:7a:75:d2:6e:
                    cc:3a:f8:68:d1:f5:ba:9c:12:7b:1c:f8:ed:28:a0:
                    16:37:95:8c:6e:7a:16:29:cc:71:28:3c:38:6b:f5:
                    23:68:35:56:ac:0a:b5:c8:7f:71:b2:53:c5:f9:08:
                    22:71:45:73:20:4e:83:c5:69:98:8b:28:47:c7:46:
                    01:6b:a8:5d:29:34:0b:1d:b8:82:ad:5b:81:bd:72:
                    35:82:64:fe:a2:57:22:a1:55:2a:5b:d9:fc:9b:88:
                    b2:a4:f2:67:ab:ee:45:e4:ea:13:0f:ae:7a:66:1a:
                    c4:fe:23:3a:6d:db:e1:3a:c9:b4:d6:79:9d:3a:5f:
                    17:7d:4d:48:ee:0c:0a:33:fb:7d:9d:d3:c5:ac:2f:
                    10:6b:60:97:f6:06:f8:e1:a9:d6:25:85:e3:53:5c:
                    a3:c5:8b:80:d3:06:a1:b5:b1:1b:0b:bf:9d:9f:ed:
                    79:db:4d:b2:0d:ca:3a:0c:a7:e2:ab:90:79:c9:bb:
                    0d:e5:f1:fc:9f:df:5f:82:62:01:5b:ce:44:e7:25:
                    d3:0a:e7:10:78:c3:3a:0d:f9:b7:44:fd:c9:c7:54:
                    48:d1:2f:4a:9c:2c:19:d2:7f:00:50:9f:b6:dc:6f:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:13:F6:88:94:3D:8B:B6:A0:D1:B6:9E:39:4A:E6:43:6C:91:B4:11
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/gxP2iJQ9i7ag0baeOUrmQ2yRtBE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:73:4c:15:d7:5b:7c:6d:01:5e:71:16:b8:42:af:2b:cf:
         20:0b:83:25:10:24:3a:27:b2:6f:b5:f6:4d:b0:33:52:ad:44:
         54:ac:bb:3b:ba:72:37:2e:3f:6a:af:19:7b:d3:64:ba:f3:91:
         00:a4:2b:1b:43:3c:97:c4:58:fa:db:c1:fa:2a:bd:e8:c0:a0:
         af:c7:99:a6:8b:7c:c8:63:33:1d:54:b0:a5:3a:e7:76:a3:50:
         80:57:a5:d9:e6:0f:53:94:60:d7:2d:d6:64:ff:3d:c6:7f:b5:
         50:07:a5:20:d5:c2:75:f2:d4:96:cc:51:7a:a5:c1:c7:fb:a9:
         02:bc:a3:08:58:2d:26:99:ce:5a:f8:eb:2f:c8:75:dc:d7:2d:
         19:b5:54:5b:fe:91:52:b2:05:a0:e6:1d:de:9c:db:e4:3b:ed:
         ef:5b:50:1a:e3:36:c0:53:25:a7:57:12:a8:fc:92:0c:73:be:
         6d:c5:88:11:2b:38:70:e8:d8:c2:0d:59:8b:54:7d:55:d2:a6:
         d4:dd:3d:8e:67:ce:ab:f6:b7:f6:42:14:7e:fe:4f:a1:a7:de:
         72:e7:3d:40:b8:8f:31:d3:ec:16:9c:36:76:3d:e0:bb:21:21:
         69:84:7e:cc:ae:a3:31:9e:c3:c8:41:3e:c5:f9:07:da:4a:cd:
         16:eb:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org