Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/32NFuJCDjEWK1lFz2Uv7DLe-8QI.roa
File:                     32NFuJCDjEWK1lFz2Uv7DLe-8QI.roa (raw, json)
Hash identifier:          T28LW/+lo55HjX1CzZGHaj6tLfHAqz7OC5b673h9l8g=
Subject key identifier:   DF:63:45:B8:90:83:8C:45:8A:D6:51:73:D9:4B:FB:0C:B7:BE:F1:02
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       26
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/32NFuJCDjEWK1lFz2Uv7DLe-8QI.roa
Signing time:             Sun 01 May 2022 01:30:47 +0000
ROA not before:           Sun 01 May 2022 01:30:47 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59125
IP address blocks:        103.246.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: May  1 01:30:47 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=DF6345B890838C458AD65173D94BFB0CB7BEF102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:91:f6:59:bf:ed:2d:1b:f2:83:2f:ef:32:
                    78:de:fc:01:40:b6:34:26:3b:1d:90:02:31:80:4b:
                    1c:8d:c1:07:ab:be:81:ac:ec:ef:1f:db:c3:34:d6:
                    1c:c7:e2:3c:96:73:28:ea:9f:2b:7e:70:75:90:cb:
                    70:0a:d1:41:36:d4:7f:03:c3:61:2e:90:b0:b9:db:
                    ba:54:f6:6a:98:f6:9d:8c:85:31:ae:05:1e:0a:07:
                    c5:b5:69:68:b1:f0:61:d5:02:fe:7d:b6:fc:20:fd:
                    6c:6a:e2:b6:4c:c7:3b:13:df:0e:f8:1a:39:9a:21:
                    4f:05:72:30:fe:d9:8f:a3:6b:2f:bc:f9:2e:c3:c2:
                    3d:18:b6:1a:9e:a4:6b:9e:00:4f:94:dd:c2:37:de:
                    43:cb:0a:0b:ef:5e:30:f6:ef:6c:56:02:db:05:33:
                    79:d5:d3:32:1d:13:46:3a:6c:e2:a6:0d:a5:4d:d5:
                    37:e5:54:54:63:e4:57:e4:d3:ad:a1:5f:21:fd:84:
                    91:e5:ac:53:5f:e2:89:69:b1:00:c7:72:35:ad:bf:
                    25:98:32:31:b0:10:07:c8:e5:4d:1e:16:4d:c4:ba:
                    0a:95:94:8d:a7:ac:7e:41:1e:7b:ee:da:f9:9c:41:
                    95:88:b8:c3:3d:6c:38:cb:bb:6c:73:74:bb:c2:4e:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:63:45:B8:90:83:8C:45:8A:D6:51:73:D9:4B:FB:0C:B7:BE:F1:02
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/32NFuJCDjEWK1lFz2Uv7DLe-8QI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:d0:8c:36:72:52:99:36:f3:74:5e:db:1f:6c:ae:45:c6:b3:
         dc:8d:cb:71:ed:2b:71:4d:b8:4f:c9:14:50:dd:3b:12:55:d7:
         58:8e:c2:94:d6:61:ac:1a:12:81:0e:3a:b1:e3:bd:40:fe:41:
         d1:4b:73:01:86:2d:4a:0e:87:75:96:47:c4:aa:93:cf:71:f3:
         0a:09:ba:cb:c5:d5:9d:67:c7:af:3d:65:6b:59:b0:ef:64:dd:
         d1:61:2a:0e:fe:5d:65:d5:ac:18:93:2d:98:a6:28:5e:e7:46:
         e3:69:6c:81:f0:b3:65:23:fa:74:90:b8:8b:94:04:df:a3:68:
         71:43:9f:2b:75:39:ac:9c:3a:5d:70:8e:40:22:96:51:a9:13:
         8c:b6:d1:05:6e:dd:c0:e8:c5:43:61:33:57:65:bf:21:fb:33:
         db:df:c6:bc:3d:90:b0:67:25:4b:ed:90:c1:94:79:1c:a7:54:
         d5:bc:70:a7:b9:75:3a:c0:8a:93:fa:79:ef:a4:2f:62:89:c8:
         7c:5e:0e:78:de:26:cb:e2:f1:fc:7e:36:a6:bb:57:9b:83:2c:
         c9:c4:07:7c:e6:4d:23:2e:c6:b5:23:dc:13:dd:2f:5d:6e:b2:
         93:4f:2c:0c:7d:90:1c:03:d1:49:f4:3e:22:ae:7d:39:1f:8d:
         d2:f1:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org