Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/R-nNHs5Z7-ZxWk_VE_AOlzFshAA.roa
File:                     R-nNHs5Z7-ZxWk_VE_AOlzFshAA.roa (raw, json)
Hash identifier:          LTzeTeIVsXaSUdv8tzPPlssHZN5MNExJhBbZ8L29An8=
Subject key identifier:   47:E9:CD:1E:CE:59:EF:E6:71:5A:4F:D5:13:F0:0E:97:31:6C:84:00
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       45
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/R-nNHs5Z7-ZxWk_VE_AOlzFshAA.roa
Signing time:             Sat 01 Oct 2022 01:29:30 +0000
ROA not before:           Sat 01 Oct 2022 01:29:30 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     55900
IP address blocks:        103.250.92.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Oct  1 01:29:30 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=47E9CD1ECE59EFE6715A4FD513F00E97316C8400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c4:76:88:f3:ff:9c:70:df:b6:65:9e:9f:5c:
                    3b:2d:02:d7:02:a8:0d:d2:63:6d:45:ea:ce:62:52:
                    2e:e3:38:36:1c:1c:94:11:12:4e:29:b5:c1:62:dc:
                    5f:5d:bb:a6:82:a1:ec:dd:21:d1:70:fa:b3:69:36:
                    f5:ed:a7:30:39:33:a2:ea:f5:a8:24:c8:93:68:20:
                    4c:73:7f:30:1b:db:39:3e:aa:1e:d9:43:92:bb:83:
                    23:21:f5:d1:1f:a3:e5:a7:2e:2c:b1:3b:e0:36:17:
                    1d:4b:64:65:a5:7e:46:c5:87:d2:d7:4d:8f:94:70:
                    54:46:3d:e4:54:41:2f:95:5c:f7:a4:17:20:d2:72:
                    f2:e7:42:1a:50:0f:87:84:12:15:48:6e:5d:2f:80:
                    75:08:6f:dc:42:f1:4e:1d:56:de:44:bd:78:fb:36:
                    72:f7:66:2c:98:8e:9d:1b:15:c3:16:cc:9e:11:7a:
                    00:e5:22:21:67:fe:77:93:cb:47:f6:01:4e:9e:f8:
                    6f:50:e3:b4:72:14:b1:e8:28:74:95:7f:83:94:a7:
                    11:01:ef:28:3e:e5:e1:e0:7e:05:96:1d:b0:80:4a:
                    24:73:2b:27:22:22:bb:0d:84:18:23:9c:8a:9d:7c:
                    da:d8:48:b9:d2:30:68:e0:d8:4b:a5:1c:76:a7:4e:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:CD:1E:CE:59:EF:E6:71:5A:4F:D5:13:F0:0E:97:31:6C:84:00
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/R-nNHs5Z7-ZxWk_VE_AOlzFshAA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:7b:b9:69:91:7f:ab:d8:dc:a2:28:c4:ca:a9:fe:d9:fb:
         ee:4e:6a:36:d5:1e:9b:59:83:b9:e0:26:79:e4:8f:df:2d:71:
         30:75:10:6e:73:39:b7:59:e2:86:8a:d3:72:8b:4a:e9:e5:b8:
         04:b4:d5:a1:b2:54:50:c2:6a:a6:f1:e1:96:f0:b4:e0:b6:47:
         43:aa:8c:a3:ef:65:78:66:a5:52:41:2f:6b:9b:72:04:c9:ce:
         6f:75:3a:90:10:86:13:0f:a8:4b:9f:59:75:8f:dd:d0:32:fe:
         3e:6d:63:7e:54:49:bd:3a:8a:34:5e:cb:91:91:72:90:d5:e1:
         e7:e7:ee:28:4c:c9:07:32:af:b4:c2:f4:cf:6e:0e:a3:0f:23:
         41:5d:5b:18:3d:d0:57:e1:e4:55:0f:1b:9a:4f:ed:74:01:e8:
         b9:8e:f7:f6:c4:20:0c:cf:3a:19:9f:ba:b2:8c:f5:97:37:47:
         17:1f:95:7a:21:0a:ec:e3:d3:d9:76:97:ba:b5:bd:7c:c7:6d:
         36:76:98:50:d5:06:bc:77:08:f4:f6:fd:23:03:cb:18:93:37:
         fd:75:08:07:c7:a5:96:67:fd:26:98:23:0c:ff:5a:65:a9:ae:
         4d:34:6a:42:40:c1:7f:70:3e:46:65:11:db:79:39:b1:5a:11:
         fa:a4:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org