Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5309/RcnoW8yXpwP09-MVqJmByPw2MRo.roa
File:                     RcnoW8yXpwP09-MVqJmByPw2MRo.roa (raw, json)
Hash identifier:          rjM+OAjNpJYgGzzVsu3vRuxCfMXDfL/G89heVtralkw=
Subject key identifier:   45:C9:E8:5B:CC:97:A7:03:F4:F7:E3:15:A8:99:81:C8:FC:36:31:1A
Certificate issuer:       /CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
Certificate serial:       20
Authority key identifier: 50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/RcnoW8yXpwP09-MVqJmByPw2MRo.roa
Signing time:             Thu 01 Sep 2022 01:28:55 +0000
ROA not before:           Thu 01 Sep 2022 01:28:55 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     2515
IP address blocks:        103.131.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
        Validity
            Not Before: Sep  1 01:28:55 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=45C9E85BCC97A703F4F7E315A89981C8FC36311A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:e1:da:f0:95:22:04:7e:a5:45:0f:c7:1a:
                    eb:e7:da:53:e8:c0:c1:e4:bb:db:00:6b:99:de:7f:
                    25:ad:5d:33:2f:72:e3:04:6f:e4:be:46:61:93:ec:
                    81:c0:7b:a5:38:e5:c0:2e:9b:c7:28:eb:2a:24:2b:
                    24:04:d3:5e:17:e7:c3:62:ff:14:2b:89:a3:e9:00:
                    a5:1e:28:07:70:2b:57:e4:14:72:b0:7d:84:85:ad:
                    25:33:f3:c8:a7:cb:17:d6:67:e8:12:ce:e6:4f:1a:
                    30:7a:90:6a:76:61:36:fb:15:2f:69:4c:30:26:cd:
                    18:85:c6:9a:52:c2:5e:e8:78:ec:22:1a:b4:24:49:
                    ad:9f:89:66:d9:e7:c8:f8:c8:02:d6:05:80:86:82:
                    87:b3:97:d9:1e:97:e7:03:34:dd:ec:d7:ff:ee:41:
                    68:1e:08:92:58:03:8a:ad:3e:f0:00:8c:5e:17:14:
                    f3:59:99:da:9d:7c:67:79:5d:df:b7:c9:7f:ca:d1:
                    86:c7:34:11:e5:a8:2f:23:74:29:d1:ea:c7:b7:72:
                    84:32:95:0d:6e:7d:76:2c:1a:a3:ce:63:b6:34:4b:
                    4b:13:bc:e9:67:22:0f:85:1a:8a:7e:ca:07:56:15:
                    39:e7:42:3d:91:5f:32:df:a1:75:dc:47:a5:77:1c:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C9:E8:5B:CC:97:A7:03:F4:F7:E3:15:A8:99:81:C8:FC:36:31:1A
            X509v3 Authority Key Identifier:
                keyid:50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/RcnoW8yXpwP09-MVqJmByPw2MRo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:6b:4d:70:8b:d3:bd:31:11:f0:1e:93:5a:8d:23:87:6d:
         d8:cb:38:f6:8c:04:33:c2:33:4b:52:dd:22:fc:01:9c:65:aa:
         73:89:a3:13:7a:c1:58:3f:ed:63:02:72:03:2d:b1:b5:59:98:
         fe:fc:53:fa:0e:68:81:95:a5:56:b4:42:f7:25:ff:f7:d0:29:
         3e:65:96:d6:17:8e:73:25:90:8e:12:e9:6f:6d:86:b2:ea:68:
         a3:5c:47:a3:63:ae:b8:b6:40:81:43:f4:92:a6:a4:56:d4:86:
         8b:0c:75:de:58:2e:6e:fa:f1:d3:8f:5e:6b:c0:75:0b:5d:22:
         00:3c:6b:0d:87:b8:6b:68:65:a3:3f:27:34:6a:3e:65:96:46:
         0e:88:66:5d:75:a6:b2:61:0b:21:35:f8:df:57:ae:53:d3:35:
         b5:8b:31:aa:1b:24:72:37:cc:61:8a:ba:0b:4e:c3:7d:1c:28:
         aa:5a:2a:2a:e8:37:77:fa:c1:ae:80:e7:58:1d:28:db:9b:23:
         04:f9:de:f5:17:b5:93:9d:b6:8d:17:a8:0d:5d:2c:a0:cb:ac:
         8c:73:15:10:49:30:a2:c9:c6:3e:47:6f:a3:2d:98:bd:85:d0:
         20:92:91:9c:b4:34:38:4d:59:e6:3e:78:95:50:e5:dc:01:f2:
         e8:53:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org