Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/BAipA8wXpdwc3er3BphAIMH_Nyw.roa
File:                     BAipA8wXpdwc3er3BphAIMH_Nyw.roa (raw, json)
Hash identifier:          GDt25SYSggEFYcKGGc/s5qXEL0D+jYzCufuLWxUj1WM=
Subject key identifier:   04:08:A9:03:CC:17:A5:DC:1C:DD:EA:F7:06:98:40:20:C1:FF:37:2C
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0F
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/BAipA8wXpdwc3er3BphAIMH_Nyw.roa
Signing time:             Tue 09 May 2023 08:16:40 +0000
ROA not before:           Tue 09 May 2023 08:16:40 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        203.112.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:16:40 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=0408A903CC17A5DC1CDDEAF706984020C1FF372C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:9f:96:22:f3:0c:75:ea:eb:8d:a2:03:2b:
                    84:8d:ed:0a:0e:eb:70:58:6e:d3:07:3a:4e:ac:8d:
                    8b:9c:45:95:e6:56:c4:76:69:ce:25:fd:95:5b:fa:
                    25:55:6a:a2:22:a6:81:cc:96:48:d4:cf:ad:b6:f5:
                    ca:8b:36:3d:0e:c2:6f:a8:2c:4e:45:53:d0:f6:72:
                    27:47:11:0f:3c:96:9d:80:5c:1a:32:2d:7c:3b:0f:
                    df:63:a2:f8:4b:a7:3c:0e:2f:ae:82:21:2e:7b:8f:
                    28:5d:2c:76:73:4c:56:1c:72:c6:92:3b:2e:1d:f1:
                    fc:70:3a:95:88:c7:b6:7e:c3:73:0b:d8:34:f6:10:
                    0d:ec:65:f6:64:a4:b0:7f:98:97:bc:5e:72:79:1d:
                    46:d4:ff:a3:d7:56:67:f3:df:d4:24:cd:6f:c8:99:
                    a7:ea:c5:1a:f8:e0:85:25:05:cf:08:70:76:cb:d5:
                    37:ce:b4:e2:ea:98:2b:f5:39:8c:d5:cf:9d:60:57:
                    9e:03:45:3f:eb:97:2e:c3:af:88:f0:e7:e4:04:b1:
                    26:d1:33:1f:25:d6:8f:e5:4f:2d:bb:2c:04:b8:3a:
                    b8:24:84:49:ea:89:02:19:2e:3c:40:c1:9b:ab:56:
                    6f:16:f6:91:91:ec:64:ae:cc:31:24:58:4a:5f:cb:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:08:A9:03:CC:17:A5:DC:1C:DD:EA:F7:06:98:40:20:C1:FF:37:2C
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/BAipA8wXpdwc3er3BphAIMH_Nyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e1:e4:4c:27:ea:a4:99:9e:1e:1b:42:4a:83:5f:65:85:5f:22:
         ad:3e:ad:d9:d7:d8:33:5c:38:3f:4f:d8:ae:17:b1:d2:6a:b9:
         02:6c:6f:2d:f5:f5:e7:44:d9:4c:8c:89:65:ce:00:be:f9:fb:
         ec:55:f8:c0:d0:66:a1:61:e1:97:09:fe:b9:46:88:1b:e9:83:
         98:78:8c:9e:1c:19:e6:91:29:f8:f1:d4:3e:74:cf:e8:80:e7:
         8d:80:92:9f:d5:a7:5a:23:5b:5a:a7:a6:d2:af:89:cc:c2:f8:
         a6:d9:14:e4:04:01:f8:30:7e:7b:4e:c6:1a:c2:2b:49:70:29:
         79:27:e7:72:6a:4f:83:32:7a:dc:e6:d2:47:33:cc:f6:26:1e:
         ef:6d:f7:80:35:1a:e3:39:cb:52:fe:54:bf:03:1e:6b:b0:f6:
         85:62:90:e0:77:ce:55:bd:e0:87:d4:80:6e:8f:89:18:d7:7e:
         4c:a0:78:65:e7:98:3f:1b:be:2d:3b:3b:f8:c0:3c:85:53:44:
         1b:ec:89:e9:f0:34:83:8a:91:90:ac:59:6d:78:48:35:0c:72:
         08:a8:ca:5c:79:36:00:52:eb:0a:65:32:d1:69:c8:e9:9e:37:
         27:5d:59:88:50:0a:68:a4:29:37:87:e8:70:9f:6f:da:c5:fd:
         a8:2a:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org