Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/pIcT4JFmVIw23DZkLJiCdEXL2mY.roa
File:                     pIcT4JFmVIw23DZkLJiCdEXL2mY.roa (raw, json)
Hash identifier:          dSAVjH3MoVC1kbzVVVCDJSKtRRC62ouVxC1mUREyatA=
Subject key identifier:   A4:87:13:E0:91:66:54:8C:36:DC:36:64:2C:98:82:74:45:CB:DA:66
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       50
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/pIcT4JFmVIw23DZkLJiCdEXL2mY.roa
Signing time:             Fri 17 Mar 2023 06:12:23 +0000
ROA not before:           Fri 17 Mar 2023 06:12:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55900
IP address blocks:        103.100.190.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Mar 17 06:12:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A48713E09166548C36DC36642C98827445CBDA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:4b:74:46:73:6b:08:2e:da:82:c0:8f:a3:
                    2e:b3:74:fe:c4:bd:6f:a0:7a:7d:6f:00:d6:2d:c0:
                    99:d6:12:71:35:de:5f:55:47:6f:d2:a0:19:1a:4a:
                    4f:cb:30:72:69:a0:1d:82:a2:71:90:be:87:80:5f:
                    5c:ae:53:0a:96:6c:0b:22:0b:c8:5b:8f:91:9e:cd:
                    e7:00:9d:65:24:c3:c9:16:92:65:20:80:c4:cc:a3:
                    00:b9:10:67:c5:c8:57:ec:0c:bf:b2:7a:35:44:e6:
                    5c:99:aa:2b:32:da:f4:bc:f6:33:ab:04:a4:66:1e:
                    85:76:ea:22:c5:0b:7a:b1:7f:40:55:9b:7f:bc:85:
                    1f:cb:ce:5b:20:7c:37:fa:f5:19:0d:a9:1d:97:ba:
                    66:f1:85:43:ba:6e:c5:4e:91:a7:46:45:0b:e4:92:
                    67:10:aa:8f:ca:97:7c:20:33:b9:b5:b7:7f:60:b7:
                    91:1c:09:8e:e3:9d:01:36:97:ca:11:b9:b0:46:dc:
                    52:55:ac:a1:a4:2d:f6:1f:f1:cf:a0:e0:aa:35:1e:
                    4d:5e:dd:2b:2f:f9:98:42:1e:4d:7c:11:75:a0:e9:
                    07:cb:48:06:54:93:e0:ab:24:72:2c:c9:4c:08:89:
                    1e:f5:c4:eb:c2:67:f3:91:b6:ad:6e:3a:02:e8:76:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:87:13:E0:91:66:54:8C:36:DC:36:64:2C:98:82:74:45:CB:DA:66
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/pIcT4JFmVIw23DZkLJiCdEXL2mY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f5:b9:a0:7a:25:4f:76:6a:3f:a8:54:b0:3a:7b:1a:64:46:76:
         bf:05:cd:33:67:77:46:96:11:00:67:e1:ad:98:27:b2:72:61:
         c4:79:98:7e:a8:9e:c3:75:fe:86:31:5f:ed:c8:dc:bb:80:7a:
         35:0d:93:99:53:74:4c:0c:b6:54:e4:7d:8d:62:49:d0:ea:25:
         c4:d4:81:43:63:65:a0:b6:f0:56:46:2f:37:60:7b:7a:fd:90:
         31:8a:66:4f:12:2f:8e:bc:04:71:85:89:ae:f2:62:a8:df:8d:
         2a:f9:73:b6:50:d4:80:ec:f2:f4:16:26:0a:7b:e2:3a:20:5a:
         0f:d8:80:41:62:fe:cf:98:75:a0:27:30:f9:89:74:14:b8:f5:
         af:9f:59:21:74:4c:cc:59:92:29:e8:e9:98:52:b6:7e:b4:78:
         4d:13:86:83:8c:17:b2:84:14:05:ed:83:76:b3:49:41:05:67:
         cc:09:ce:3d:2d:46:54:a8:37:c9:b9:1b:e7:48:ae:37:75:ff:
         03:b8:19:fc:72:ed:34:e7:6d:3c:ef:5e:4e:4e:93:d6:6a:cd:
         d2:f7:a2:e2:20:b2:4d:32:1b:13:b5:d4:fd:49:d0:d2:76:4d:
         e1:a8:a5:ee:e6:dd:3d:bd:bb:28:67:0c:a6:13:19:02:7f:c7:
         1b:52:8f:95
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjBE
NzJGOUY0MzBCN0Q0MDAzMzc1RjEwRDUwMjVCOUU1QzAwNDM3MB4XDTIzMDMxNzA2
MTIyM1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQTQ4NzEzRTA5MTY2NTQ4
QzM2REMzNjY0MkM5ODgyNzQ0NUNCREE2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALtqS3RGc2sILtqCwI+jLrN0/sS9b6B6fW8A1i3AmdYScTXeX1VH
b9KgGRpKT8swcmmgHYKicZC+h4BfXK5TCpZsCyILyFuPkZ7N5wCdZSTDyRaSZSCA
xMyjALkQZ8XIV+wMv7J6NUTmXJmqKzLa9Lz2M6sEpGYehXbqIsULerF/QFWbf7yF
H8vOWyB8N/r1GQ2pHZe6ZvGFQ7puxU6Rp0ZFC+SSZxCqj8qXfCAzubW3f2C3kRwJ
juOdATaXyhG5sEbcUlWsoaQt9h/xz6DgqjUeTV7dKy/5mEIeTXwRdaDpB8tIBlST
4KskcizJTAiJHvXE68Jn85G2rW46Auh2/KkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSkhxPgkWZUjDbcNmQsmIJ0RcvaZjAfBgNVHSMEGDAWgBRbDXL59DC31AAzdfEN
UCW55cAENzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L1d3MXktZlF3dDlRQU0zWHhEVkFsdWVYQUJEYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1d3MXktZlF3dDlRQU0zWHhEVkFsdWVY
QUJEYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvcEljVDRKRm1WSXcyM0Raa0xKaUNkRVhMMm1ZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdkvjANBgkqhkiG9w0BAQsFAAOCAQEA9bmgeiVPdmo/qFSwOnsaZEZ2vwXN
M2d3RpYRAGfhrZgnsnJhxHmYfqiew3X+hjFf7cjcu4B6NQ2TmVN0TAy2VOR9jWJJ
0OolxNSBQ2NloLbwVkYvN2B7ev2QMYpmTxIvjrwEcYWJrvJiqN+NKvlztlDUgOzy
9BYmCnviOiBaD9iAQWL+z5h1oCcw+Yl0FLj1r59ZIXRMzFmSKejpmFK2frR4TROG
g4wXsoQUBe2DdrNJQQVnzAnOPS1GVKg3ybkb50iuN3X/A7gZ/HLtNOdtPO9eTk6T
1mrN0vei4iCyTTIbE7XU/UnQ0nZN4ail7ubdPb27KGcMphMZAn/HG1KPlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org