Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/saHzFe77vAYu17AF-R5zGjGxMkk.roa
File:                     saHzFe77vAYu17AF-R5zGjGxMkk.roa (raw, json)
Hash identifier:          O+wH193TLsGuP/8KZVbGiBbMGGhX3vVSYgi5pjyBcNo=
Subject key identifier:   B1:A1:F3:15:EE:FB:BC:06:2E:D7:B0:05:F9:1E:73:1A:31:B1:32:49
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       98
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/saHzFe77vAYu17AF-R5zGjGxMkk.roa
Signing time:             Fri 01 Jul 2022 01:28:11 +0000
ROA not before:           Fri 01 Jul 2022 01:28:11 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     8220
IP address blocks:        103.87.146.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jul  1 01:28:11 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=B1A1F315EEFBBC062ED7B005F91E731A31B13249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:ea:92:b7:b3:53:45:70:bf:10:c1:a2:e7:
                    ee:41:d7:e8:a6:fe:59:29:03:a8:b0:9d:63:26:4d:
                    2c:03:40:50:0e:0a:75:fd:b3:87:e8:11:f2:93:f2:
                    35:71:1c:1d:a9:ff:d3:d7:09:9f:fd:c1:f2:44:3f:
                    53:ba:ba:c5:81:a6:cf:91:d2:37:f2:d6:45:93:21:
                    d0:47:b9:15:cd:2f:8a:cb:a5:78:14:6f:06:e2:27:
                    93:9e:23:31:de:bc:4f:6f:a5:0e:c1:0b:bd:0d:cf:
                    90:af:06:3a:54:e4:b4:20:d4:fc:6b:32:dc:94:0f:
                    03:d3:ae:47:68:a0:06:6a:55:59:9b:b0:cc:14:07:
                    41:66:d9:9e:2c:47:c8:a6:e7:6d:a3:ed:b0:35:8e:
                    85:ff:5c:f1:a0:55:b1:37:ec:8f:e3:3a:5e:5f:9b:
                    73:3d:90:df:0a:41:cd:5f:19:b4:9f:55:f4:a2:8f:
                    49:80:e5:24:87:b6:86:70:2c:bd:53:8a:8a:d1:83:
                    a3:54:fa:1b:ac:2c:53:c7:de:dc:58:25:10:42:c7:
                    4b:6b:f7:57:40:cb:0b:5f:d8:b6:5d:ee:5b:b3:a3:
                    4e:11:5a:64:b8:75:6a:8e:2f:10:83:b7:ad:a9:0c:
                    c7:d8:c9:00:b6:e3:24:4e:21:f6:c3:d1:79:24:3f:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A1:F3:15:EE:FB:BC:06:2E:D7:B0:05:F9:1E:73:1A:31:B1:32:49
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/saHzFe77vAYu17AF-R5zGjGxMkk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:95:ae:a1:02:fe:d3:57:9b:9e:07:21:90:58:8b:a0:0f:e2:
         3f:3b:59:5f:9e:ed:bf:ce:8f:9c:e6:d7:d4:38:f2:d3:1b:f3:
         10:ca:3f:e2:ac:0f:89:f8:d3:6c:75:82:bd:fe:a5:fd:d1:9b:
         3c:18:7f:37:d5:73:61:09:53:8f:e6:42:1c:57:61:26:80:14:
         cc:4d:7e:38:fe:bb:99:f0:5b:80:24:dd:68:63:39:4e:89:56:
         75:b1:99:6b:f4:ca:e7:7d:94:fe:94:f0:39:d9:bf:dc:cb:a4:
         5f:c2:c9:f7:f2:9d:f6:b6:bd:3b:0d:ca:12:7b:c5:6b:86:bd:
         aa:58:df:b6:c1:92:33:77:a2:9a:fa:80:d0:86:ac:da:b5:be:
         75:49:69:12:ee:b4:af:95:fb:b1:ec:08:19:50:16:28:17:13:
         36:7f:4e:56:00:74:b2:d3:53:fe:65:e9:e3:89:8d:11:36:f8:
         2b:00:31:6d:33:10:95:0a:af:fb:2c:d2:f8:1f:28:18:2f:cd:
         3b:b3:45:bd:ab:5b:29:7f:98:82:6d:a5:c7:7f:2d:84:0c:bb:
         7b:b2:e8:f8:23:81:ad:35:18:86:a6:56:4c:d9:44:8d:24:eb:
         a2:ab:40:ec:5e:cb:a1:51:a4:25:75:65:b9:cd:37:02:84:20:
         52:80:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org