Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/1wgr87OeCqqlJOgeg6JHljhENf4.roa
File:                     1wgr87OeCqqlJOgeg6JHljhENf4.roa (raw, json)
Hash identifier:          SSe2WmzQbjkZ3z3Znxo6iABU7LeA205rA/1vgy78SbU=
Subject key identifier:   D7:08:2B:F3:B3:9E:0A:AA:A5:24:E8:1E:83:A2:47:96:38:44:35:FE
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       D2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1wgr87OeCqqlJOgeg6JHljhENf4.roa
Signing time:             Sun 01 Jan 2023 01:29:41 +0000
ROA not before:           Sun 01 Jan 2023 01:29:41 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        103.2.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:41 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=D7082BF3B39E0AAAA524E81E83A24796384435FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:87:35:4d:31:66:6a:77:05:9c:df:b1:7e:
                    b7:f6:f2:96:3e:db:85:35:c1:e0:a7:29:41:48:c1:
                    00:5e:09:7a:94:a3:1f:6a:86:89:07:9b:02:60:e8:
                    44:66:7a:ca:0b:c0:9d:c0:27:d4:0c:27:d9:2e:ed:
                    66:b1:f6:df:07:af:d8:55:bf:e0:3c:d2:2e:46:c2:
                    54:d6:14:19:46:7f:d3:a6:0f:9a:fe:ca:97:50:1d:
                    8a:47:91:4a:51:59:77:0c:12:c0:88:ad:22:b4:c9:
                    af:2c:bd:43:da:19:26:e0:fd:e6:4f:c2:b2:df:67:
                    f4:50:ef:27:d8:f0:a6:73:dd:76:9f:04:88:a0:35:
                    03:4e:34:ed:69:44:df:32:90:15:c8:70:be:31:33:
                    68:f8:b4:36:a7:47:c3:3c:07:5c:2a:f5:01:ad:33:
                    01:b8:fb:52:36:ef:c8:36:12:cb:ef:dd:55:f6:f2:
                    b5:9a:c7:06:b7:ef:56:91:c3:e9:fc:23:40:3a:43:
                    39:77:cb:bb:fe:f1:50:6f:6d:2d:f6:45:7e:eb:5f:
                    be:91:68:e1:f3:61:4e:73:02:03:cc:b4:76:54:7a:
                    57:90:51:79:f2:c7:72:d6:49:b0:99:d8:f9:9b:b5:
                    c0:2c:07:ce:0e:5e:8c:34:89:af:47:ef:fa:32:b5:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:08:2B:F3:B3:9E:0A:AA:A5:24:E8:1E:83:A2:47:96:38:44:35:FE
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1wgr87OeCqqlJOgeg6JHljhENf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:3a:80:35:de:fc:38:92:73:26:1f:d0:5b:de:16:99:b0:
         a4:54:5e:ca:f2:bf:74:44:ff:69:5e:8b:44:14:a3:88:67:16:
         82:9a:6f:29:bf:89:68:12:23:fd:de:f8:cf:c8:04:92:49:68:
         3b:3d:e6:3e:c4:22:16:6f:8a:f8:b9:b2:ac:63:23:d9:7e:c1:
         af:9b:a0:1e:11:a7:32:87:47:b7:e4:2c:63:8c:e8:12:b3:8d:
         d9:a5:79:a8:16:b8:9d:d8:71:2e:47:59:13:b4:e9:24:2f:5a:
         8f:ec:9f:59:5d:43:f2:e7:07:3f:86:42:ae:a7:93:b0:20:1c:
         a5:d8:77:73:2b:92:f5:a3:10:9c:30:8a:b5:05:c8:c5:eb:5e:
         64:73:82:df:b3:09:35:ca:fb:20:e7:d2:69:55:b7:98:f5:19:
         8e:24:93:1c:83:c6:4a:b5:00:ce:db:5b:a9:2f:ea:80:8c:a4:
         16:7f:20:c8:aa:06:1b:fc:b9:8b:7f:4c:81:d2:50:49:48:cb:
         67:e5:38:3f:51:73:2d:f1:73:53:d0:36:a2:2d:42:f0:7e:cb:
         a3:fd:04:e1:dd:a8:bc:f9:5d:41:f4:aa:af:44:c8:4d:e9:bf:
         b8:6a:ca:e2:2e:1a:bf:c6:29:b1:90:1d:7c:c5:5c:9e:44:bd:
         ee:83:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org