Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5309/r0OfKV-8ZJjjLeOxwqVpuaYHZRo.roa
File:                     r0OfKV-8ZJjjLeOxwqVpuaYHZRo.roa (raw, json)
Hash identifier:          Lgk7mcw6I2M1EvS/nimh4jIivVvw9fVV5PXGIKGGjbg=
Subject key identifier:   AF:43:9F:29:5F:BC:64:98:E3:2D:E3:B1:C2:A5:69:B9:A6:07:65:1A
Certificate issuer:       /CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
Certificate serial:       10
Authority key identifier: 50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/r0OfKV-8ZJjjLeOxwqVpuaYHZRo.roa
Signing time:             Wed 13 Oct 2021 11:22:43 +0000
ROA not before:           Wed 13 Oct 2021 11:22:43 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     2515
IP address blocks:        103.131.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
        Validity
            Not Before: Oct 13 11:22:43 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=AF439F295FBC6498E32DE3B1C2A569B9A607651A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:b1:5b:19:61:18:35:5d:46:1a:5f:52:f3:
                    41:42:ea:bf:24:5b:a2:38:a5:15:c5:49:44:70:de:
                    c6:16:8b:f7:59:b9:9a:8b:9c:9e:f7:3c:5a:a2:64:
                    81:fb:8f:98:17:57:92:4f:17:34:81:e9:05:64:43:
                    d7:85:c6:95:99:bd:a8:1b:ad:a7:3e:18:dc:5a:9c:
                    f9:a4:6d:df:da:bb:a3:e5:76:5c:eb:7e:52:bc:82:
                    d9:25:b1:ce:2d:27:fe:c6:e4:78:f6:d7:3a:24:cc:
                    a2:e2:57:86:61:ea:9e:82:b2:a0:23:b3:c8:84:fc:
                    5b:6a:c9:83:b0:df:61:f7:be:b3:1a:ba:00:60:51:
                    48:06:6f:ef:9f:b1:fd:a6:3f:56:0d:f9:9c:c9:c4:
                    4a:b0:e0:17:5a:fc:12:e6:0f:80:fd:0b:25:36:64:
                    6d:8f:2a:c6:4f:12:25:d1:68:fb:07:c4:2c:91:f6:
                    63:27:5b:61:06:14:3e:a1:29:a0:96:b5:3a:ff:f3:
                    ab:4f:dd:e6:b4:88:a0:d3:81:8f:8e:7b:c0:0d:c7:
                    89:e3:64:d5:8b:ff:34:e3:53:19:19:ed:dc:7c:19:
                    b5:d7:61:c6:69:6d:e6:1a:c1:a6:4c:df:4b:ea:eb:
                    6b:76:13:d3:d5:b5:a2:35:22:14:68:af:9b:5c:fc:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:43:9F:29:5F:BC:64:98:E3:2D:E3:B1:C2:A5:69:B9:A6:07:65:1A
            X509v3 Authority Key Identifier:
                keyid:50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/r0OfKV-8ZJjjLeOxwqVpuaYHZRo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:23:9e:9d:bb:f6:2a:70:5f:46:ad:9c:08:54:73:cd:98:
         5f:82:14:cf:cb:9b:45:e9:d8:ba:2e:9a:f4:7d:cd:34:b1:ab:
         05:3a:6c:fe:53:61:80:a5:c2:3a:ea:6a:67:36:9f:e0:ad:64:
         dc:f1:2d:e2:bb:54:46:a1:7d:c4:c1:76:8e:ff:27:a8:10:57:
         8b:49:2d:83:8e:71:5f:97:41:cc:f5:c6:73:70:f7:99:ec:66:
         df:94:4e:5b:d3:9a:c7:e5:ba:41:e7:c1:15:fa:14:9f:02:8c:
         8e:f3:d2:8b:d9:83:d7:16:be:96:2e:8e:5a:06:76:f8:5a:dd:
         15:dd:d4:2c:79:19:e3:d4:09:2c:1f:bd:70:fd:13:39:58:65:
         7c:5d:c3:22:ac:55:d8:ac:f1:c4:bf:1b:72:85:a6:5f:df:8c:
         28:7c:28:5b:2f:d3:2b:ee:0d:fb:a5:2c:b0:d7:1a:37:54:4c:
         d0:c2:9c:c7:4d:51:50:91:25:5c:f9:5a:9f:2d:e0:35:b8:6d:
         58:62:ee:d5:fe:1f:fe:0c:45:73:3c:64:49:1a:6f:b4:49:c7:
         ee:11:b4:7f:40:14:95:0c:22:af:ab:a8:72:90:6e:8b:41:48:
         ef:c9:74:83:ce:67:2d:57:b5:3e:f7:00:f2:7e:a5:a8:9c:9b:
         73:90:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org