Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/J0u0cktovMg6qAN2pt1y3Wh2ftA.roa
File:                     J0u0cktovMg6qAN2pt1y3Wh2ftA.roa (raw, json)
Hash identifier:          cOU1oHM3Qjm75PhWNBeE5Dn7Pi2s9voYh/L2G/bCbF8=
Subject key identifier:   27:4B:B4:72:4B:68:BC:C8:3A:A8:03:76:A6:DD:72:DD:68:76:7E:D0
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       B6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/J0u0cktovMg6qAN2pt1y3Wh2ftA.roa
Signing time:             Sat 01 Oct 2022 01:29:36 +0000
ROA not before:           Sat 01 Oct 2022 01:29:36 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        103.241.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:29:36 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=274BB4724B68BCC83AA80376A6DD72DD68767ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c5:a7:c5:0a:b2:6a:34:8d:30:9a:61:6b:ac:
                    a7:87:21:21:0c:b0:0a:af:4f:f8:73:c5:cf:2f:0b:
                    75:f2:4f:ab:54:26:02:bd:70:45:06:5e:10:68:88:
                    50:b7:5f:ed:93:41:74:b1:74:41:73:2f:84:b5:98:
                    bf:42:e3:07:d2:45:3d:64:cf:04:0f:a4:e5:48:c1:
                    ea:07:21:e2:f2:6c:04:3d:cb:b5:d9:67:4c:27:a6:
                    fb:f5:88:ba:f2:13:1c:7a:9a:06:f5:b9:2c:64:63:
                    89:79:a1:6a:72:6e:e4:41:c4:59:3f:d0:d2:29:1b:
                    6e:87:63:3c:77:05:be:14:5e:4a:2d:ac:7f:79:16:
                    fe:3d:c7:5b:ea:3b:2b:22:62:c6:f0:1d:f2:2d:3c:
                    1c:1e:7e:9e:39:29:b9:6d:fd:54:04:15:e3:23:b5:
                    9e:c5:71:21:9d:e1:e7:1f:42:ed:61:3a:30:ee:63:
                    c8:9e:e9:52:0d:04:f9:c3:a7:2e:76:99:b6:d8:41:
                    95:89:78:5b:90:b1:a7:61:96:5e:7a:dd:1d:7a:f3:
                    27:32:b7:4e:60:dd:fe:f9:b8:d9:23:a9:5f:db:39:
                    2b:49:de:98:bb:bd:5f:e5:56:cd:fc:82:d2:05:e8:
                    da:e5:fa:b2:9e:d7:a6:8a:0a:bf:5a:64:56:e3:8b:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:B4:72:4B:68:BC:C8:3A:A8:03:76:A6:DD:72:DD:68:76:7E:D0
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/J0u0cktovMg6qAN2pt1y3Wh2ftA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:f7:b6:22:0a:f0:d9:42:03:12:69:3d:ad:33:c8:8d:08:
         6f:1b:3d:99:c0:7f:79:7e:01:a2:9d:0d:b7:92:dd:9f:54:49:
         4b:58:be:56:b7:df:15:a5:db:db:2f:ff:ea:2f:9b:60:aa:5f:
         5e:03:62:2b:93:86:d8:6d:15:45:3e:93:ca:e1:25:78:a4:3f:
         2a:01:6e:bd:6e:e4:e7:55:e5:a2:4e:32:32:2c:b1:cc:2d:6d:
         33:e4:37:4f:b8:ff:21:5f:6a:06:44:95:d5:02:59:cb:b4:d5:
         82:a6:59:a0:83:8e:74:21:71:62:d5:cd:d8:71:ad:52:07:71:
         03:69:f4:3f:f0:a8:92:6e:f8:43:c5:24:b5:7e:2f:4d:c2:55:
         9f:4e:3c:6e:8e:6e:42:fe:9c:66:84:77:6d:43:b9:7b:c3:65:
         df:4c:07:c3:f8:fc:e9:8c:1d:b1:3a:d5:62:ad:89:89:f5:f0:
         d1:97:87:4c:5d:db:2f:cb:42:25:2e:8e:ec:e6:55:47:b4:e6:
         0e:d8:93:49:9a:51:ec:54:6a:52:c7:d6:a0:3a:f7:fa:04:03:
         e9:ec:01:76:6d:b8:33:e2:ca:a8:2f:7c:8e:88:b0:ad:80:88:
         6a:77:fe:93:89:e9:3b:58:3e:78:c1:3e:a8:1d:70:3f:dc:f2:
         a2:33:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org