Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/md3JsfN6uKxvB7SB2Hs0M2mkeFM.roa
File:                     md3JsfN6uKxvB7SB2Hs0M2mkeFM.roa (raw, json)
Hash identifier:          tBh6x4+RMxdpAJGUpV0/EJz0/IPzSxV/VzjGxmPD5Ts=
Subject key identifier:   99:DD:C9:B1:F3:7A:B8:AC:6F:07:B4:81:D8:7B:34:33:69:A4:78:53
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       3F
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/md3JsfN6uKxvB7SB2Hs0M2mkeFM.roa
Signing time:             Thu 01 Sep 2022 01:28:35 +0000
ROA not before:           Thu 01 Sep 2022 01:28:35 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     55900
IP address blocks:        103.13.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Sep  1 01:28:35 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=99DDC9B1F37AB8AC6F07B481D87B343369A47853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dc:d1:51:39:dd:73:c7:9b:c8:58:44:50:4b:
                    fc:d0:7a:b2:bb:f7:19:ed:78:ef:6e:aa:89:a5:ab:
                    64:4c:5c:0a:43:56:b2:5c:da:20:50:ed:0e:fe:01:
                    6b:99:9e:ec:ba:ce:b3:87:25:d5:a2:4f:82:09:8c:
                    e8:10:e7:a6:32:ee:2d:b8:12:12:fa:9f:7b:3d:49:
                    4e:5e:59:41:23:1a:fc:06:43:c9:a9:b8:64:1f:e4:
                    9a:21:53:c2:7c:9b:ad:e5:34:ba:89:c6:1b:b3:48:
                    7b:92:a0:b0:55:16:23:bc:b1:4e:47:1a:92:b4:9f:
                    68:d1:b9:5e:26:c3:44:dc:59:48:2e:c0:c0:30:f5:
                    23:2d:7e:01:cb:43:f2:b3:c2:7c:11:b9:3e:9c:ed:
                    3f:8a:c7:49:37:e2:6f:f2:be:45:62:c1:bc:16:82:
                    42:19:4b:f1:93:e4:80:7d:65:eb:40:19:ba:ec:79:
                    5c:49:ed:95:a8:8a:fb:9e:6e:19:6e:78:42:53:4e:
                    38:f8:5e:71:f8:fd:7d:5f:aa:2d:a3:84:b0:cd:70:
                    78:70:e2:91:4c:a3:9c:a5:7d:99:17:cd:52:c6:e4:
                    b4:07:70:f7:fe:33:f7:a4:2b:ad:41:35:18:68:64:
                    d8:38:78:4a:18:07:c6:84:4f:16:00:ec:80:c0:12:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DD:C9:B1:F3:7A:B8:AC:6F:07:B4:81:D8:7B:34:33:69:A4:78:53
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/md3JsfN6uKxvB7SB2Hs0M2mkeFM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:92:24:7e:86:a2:a6:c9:3e:ed:fd:59:77:6f:32:da:ca:ae:
         21:1b:ed:a8:db:f9:85:fe:fc:b5:3e:c8:06:cf:44:f4:28:81:
         b0:49:51:48:5b:47:79:6a:16:a6:54:34:5e:e5:e1:e3:75:dd:
         00:83:3c:12:ca:f1:55:17:d1:23:46:3c:b1:20:31:12:73:d7:
         c7:f0:4b:31:4b:4e:07:d7:2b:af:72:c7:d6:7f:a2:5d:17:e4:
         7f:b0:c7:7b:fa:54:41:df:81:bd:ea:f0:40:6a:dd:d9:73:7e:
         51:08:12:1f:c8:51:2d:65:ba:a5:9d:03:dc:e6:65:54:b2:65:
         66:d4:e1:61:87:03:bd:c6:85:03:ff:37:9e:6d:2c:8a:55:6c:
         28:4c:05:1a:39:b8:f0:3e:c2:2d:25:f0:69:20:d6:c8:61:ff:
         6e:9f:9d:96:f5:39:36:f6:70:56:19:fd:a7:1b:a6:d5:9d:4e:
         56:a7:13:ed:09:b2:45:83:7e:54:d0:00:83:59:97:54:73:f1:
         26:1b:9c:9e:69:0c:2f:18:38:3c:3e:70:08:b0:6b:ff:f4:b2:
         33:59:e6:45:a2:41:2a:74:da:84:3f:46:fa:c8:21:7f:6e:2c:
         35:71:76:d2:e1:e0:4d:12:73:69:0e:a6:0b:54:38:eb:bf:f0:
         dc:bc:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org