Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/dCj3G8o_k1nDlFmEdZ65p1SUJEw.roa
File:                     dCj3G8o_k1nDlFmEdZ65p1SUJEw.roa (raw, json)
Hash identifier:          NnRZrTSvaMvClwZJdPIwCRtXlQ0h8n9Q5JoDF4o6FD4=
Subject key identifier:   74:28:F7:1B:CA:3F:93:59:C3:94:59:84:75:9E:B9:A7:54:94:24:4C
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       E4
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dCj3G8o_k1nDlFmEdZ65p1SUJEw.roa
Signing time:             Sun 01 Jan 2023 01:31:07 +0000
ROA not before:           Sun 01 Jan 2023 01:31:07 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        121.103.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:07 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=7428F71BCA3F9359C3945984759EB9A75494244C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:63:30:31:ba:53:e6:41:f8:17:98:94:39:
                    49:57:4e:45:6e:2b:49:24:47:d4:a4:d3:c1:51:a5:
                    78:12:6f:49:f3:5e:7d:7a:c3:f2:11:57:f8:c0:84:
                    81:67:eb:39:28:28:d8:e8:1b:42:9a:ad:8c:72:0a:
                    ad:41:17:f8:e6:d8:fa:d0:14:b9:ea:68:2d:9a:31:
                    a3:a3:95:6e:79:bf:a2:4d:b8:8a:ca:f4:a3:cb:8b:
                    d3:cc:81:b1:fa:bd:e3:ba:ea:a2:8d:49:71:00:fb:
                    98:22:a4:12:70:57:61:70:19:b2:4d:6c:ff:39:19:
                    16:10:be:05:e0:63:5b:14:7e:2c:d9:0e:8e:2c:b1:
                    b8:77:64:30:4a:b1:db:70:7b:39:d4:dd:88:ea:66:
                    cc:c6:91:83:d4:f1:2c:a1:a7:0a:13:ba:58:91:6e:
                    d7:f0:ff:8e:55:62:c3:ee:ed:6b:3b:f0:e7:12:cc:
                    39:9e:a2:1b:2f:f8:24:22:36:92:ca:d5:6b:4e:a9:
                    c2:2c:01:3d:e5:18:d6:6a:ea:2f:b5:16:85:fb:ab:
                    f1:ed:7b:16:c2:a7:5c:cf:9c:65:4e:e7:a9:ac:9e:
                    a0:c9:5d:7b:38:d8:90:27:33:be:5a:b8:ad:84:27:
                    53:d9:80:b4:36:05:b1:b3:e9:fc:fd:71:cf:90:57:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:28:F7:1B:CA:3F:93:59:C3:94:59:84:75:9E:B9:A7:54:94:24:4C
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dCj3G8o_k1nDlFmEdZ65p1SUJEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:06:95:83:1a:46:5d:b1:52:f5:22:8f:25:d3:4d:28:e2:
         3e:50:5b:a7:59:d5:d2:6e:ae:11:22:51:9e:92:f5:6c:f6:c1:
         18:c2:d7:78:09:e5:45:40:3c:25:61:e4:f4:8a:87:88:9a:3d:
         3f:32:6a:28:f8:bf:58:c7:dc:50:77:ee:e5:19:7f:be:b3:5b:
         6d:70:02:23:2e:c1:1a:5e:ed:91:5b:77:4e:80:90:4b:bd:12:
         e0:7c:4b:e0:d3:e3:5c:15:16:57:bd:c9:29:65:ab:e3:4f:62:
         c0:17:f4:23:2d:54:1f:6e:66:2e:47:bd:06:4c:0e:ea:fa:7c:
         98:92:8e:36:d7:96:cd:8d:a1:63:ad:4d:f0:0a:e8:c7:79:a8:
         2d:cb:fd:25:7b:6e:71:ca:65:3b:f8:85:03:c3:38:3f:98:8a:
         fb:d6:fa:25:70:80:ae:0f:37:b3:05:c6:28:6f:9f:e1:9f:bd:
         74:3e:80:9f:8e:d3:e3:77:ea:f5:28:c3:a6:f5:d5:51:a0:03:
         e0:8e:c8:dc:8a:72:a9:e8:14:e4:30:77:70:de:28:8f:9d:07:
         ca:33:a7:25:78:5e:15:53:eb:16:0d:a7:ea:1e:50:7d:04:9c:
         50:d3:56:eb:3a:09:62:55:3c:9b:08:30:84:09:f9:e8:d1:54:
         13:4a:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org