Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4722/uSnTQALhlBlAe41qb6YZiBcf3rM.roa
File:                     uSnTQALhlBlAe41qb6YZiBcf3rM.roa (raw, json)
Hash identifier:          ZCIUXJM55hQYVmfaQufcyhdmT2dcL35NkCcmvDb0pD8=
Subject key identifier:   B9:29:D3:40:02:E1:94:19:40:7B:8D:6A:6F:A6:19:88:17:1F:DE:B3
Certificate issuer:       /CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
Certificate serial:       08
Authority key identifier: 35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/uSnTQALhlBlAe41qb6YZiBcf3rM.roa
Signing time:             Wed 22 Mar 2023 04:21:49 +0000
ROA not before:           Wed 22 Mar 2023 04:21:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     0
IP address blocks:        103.246.232.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
        Validity
            Not Before: Mar 22 04:21:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B929D34002E19419407B8D6A6FA61988171FDEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:7c:5b:ab:29:cd:a1:34:43:55:e3:4e:19:
                    cb:e2:7e:7b:cc:78:3d:8e:a1:9c:4e:99:f5:9e:15:
                    46:b6:af:7a:04:96:70:8c:38:75:d4:7d:d7:b0:d1:
                    e3:5b:20:03:c9:17:64:e6:37:c0:cb:d4:cb:9e:13:
                    39:1b:58:69:6a:8b:76:01:fe:a5:95:aa:66:1e:d3:
                    a4:d1:0f:7f:60:e3:95:7d:b9:19:e7:da:51:79:6e:
                    34:83:22:f3:07:46:d2:29:ef:a0:74:ba:26:99:75:
                    ca:a2:c8:db:a6:bc:16:d3:30:47:43:31:fc:5b:90:
                    ad:f9:90:71:4b:d3:96:7b:a2:73:ec:d0:82:b2:15:
                    e1:37:c3:de:64:35:c7:83:09:39:a8:cd:40:d6:60:
                    66:46:31:03:02:3e:db:5d:b8:22:90:c8:77:eb:40:
                    54:18:3b:76:26:2a:e3:33:b8:03:c8:0e:98:eb:b0:
                    e2:fc:db:25:2e:45:3c:76:f0:96:5f:2e:e5:87:6b:
                    a8:75:82:54:ef:e3:db:9e:07:fe:09:83:82:95:b9:
                    fa:61:2c:33:d5:d1:34:00:bf:9d:59:65:f2:b8:1b:
                    af:b8:a3:fd:32:1e:0f:87:f8:99:6c:d8:b0:3f:d6:
                    97:ab:3e:4a:82:24:bc:ba:1f:64:01:9b:1d:7f:3a:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:29:D3:40:02:E1:94:19:40:7B:8D:6A:6F:A6:19:88:17:1F:DE:B3
            X509v3 Authority Key Identifier:
                keyid:35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/uSnTQALhlBlAe41qb6YZiBcf3rM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:a3:63:60:fa:5b:9b:2c:53:a0:b7:f0:b0:46:90:52:2e:
         87:4d:74:74:7e:18:d6:fc:41:83:a3:50:af:c9:21:26:28:f5:
         a2:f2:fa:7f:a2:1d:ce:64:bc:cd:f4:a1:ac:f2:7a:b6:f0:bb:
         c2:a9:4b:49:58:fe:31:2c:5d:16:95:d7:cd:c6:8c:8a:34:87:
         b3:04:77:24:5e:c7:55:27:00:0d:72:c8:83:46:d8:68:3b:91:
         22:2e:b1:bd:fb:9c:d9:c7:ad:e3:dd:32:ba:f0:fd:5b:20:6e:
         87:f0:c6:04:fb:a4:8d:4f:c8:fc:22:67:b0:aa:d4:96:e0:a2:
         29:b2:7b:53:d8:ee:9c:60:2b:62:94:db:15:20:77:61:eb:f5:
         79:36:f1:c8:f7:df:1d:9b:fd:a6:5b:3e:08:db:c3:aa:4f:c4:
         5e:8b:62:15:9d:48:5a:ab:51:7f:d0:6f:67:d2:e4:8e:4c:87:
         39:0d:87:49:55:78:aa:81:5a:13:80:d9:99:fc:6d:26:41:00:
         28:77:db:6a:10:1e:b7:23:42:2b:bb:39:d3:2a:5b:d4:f4:cc:
         8c:ff:6a:10:87:94:95:e1:f3:10:de:d2:96:e0:70:3f:62:96:
         eb:82:b3:70:b6:1d:34:e2:73:d5:39:bd:33:c4:8b:8d:54:1b:
         8d:0d:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org