Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/kkaDyzfmQ0eToKf8g7AuEReDZGM.roa
File:                     kkaDyzfmQ0eToKf8g7AuEReDZGM.roa (raw, json)
Hash identifier:          DNzUkpdfqmIWceZzycQr3KlFIdsIYms7vg4a1v3J7QU=
Subject key identifier:   92:46:83:CB:37:E6:43:47:93:A0:A7:FC:83:B0:2E:11:17:83:64:63
Certificate issuer:       /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial:       1F
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/kkaDyzfmQ0eToKf8g7AuEReDZGM.roa
Signing time:             Fri 17 Mar 2023 13:11:13 +0000
ROA not before:           Fri 17 Mar 2023 13:11:13 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     131984
IP address blocks:        103.162.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
        Validity
            Not Before: Mar 17 13:11:13 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=924683CB37E6434793A0A7FC83B02E1117836463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:cc:5a:f8:cd:6c:92:08:59:7f:d7:2d:2b:
                    83:ad:22:de:f6:b1:ee:50:18:48:ed:d6:9b:c4:29:
                    46:77:96:31:4f:ca:a0:55:3c:7f:74:fa:6b:bc:a3:
                    a6:7e:e8:e6:bd:e7:2b:39:cc:41:39:97:7d:ab:a8:
                    db:f1:dd:6c:06:e5:52:a4:fd:42:9c:7f:7e:ae:68:
                    b0:00:78:b0:2e:de:42:71:00:6e:62:70:4a:33:97:
                    f4:63:50:45:51:32:bb:e5:5c:b7:81:92:f7:6b:ee:
                    43:0f:8b:8d:27:48:e0:60:d7:03:3a:f7:16:4a:90:
                    2c:9c:85:bc:07:86:94:d0:7d:a1:b4:59:d4:40:ef:
                    7c:b6:a3:a6:00:63:2c:15:85:8c:f6:fa:38:a2:dc:
                    72:36:bc:17:ce:6c:a2:25:70:a5:d5:70:c5:82:ba:
                    85:b2:a3:9f:10:51:05:c1:47:86:77:fe:e8:9e:8f:
                    85:58:3b:03:69:1c:af:17:fd:07:45:7b:78:cc:d6:
                    a5:70:6c:0c:f4:af:51:23:dc:25:0e:21:71:62:c6:
                    a5:80:75:6c:d7:d2:35:d5:07:78:05:e6:88:10:d8:
                    0a:d5:61:34:af:59:b4:5a:89:d5:ad:8a:51:a3:47:
                    3a:65:d8:4f:47:b1:31:4b:2b:42:19:24:17:41:60:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:46:83:CB:37:E6:43:47:93:A0:A7:FC:83:B0:2E:11:17:83:64:63
            X509v3 Authority Key Identifier:
                keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/kkaDyzfmQ0eToKf8g7AuEReDZGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8d:b1:f1:36:c5:a9:72:13:3b:f6:f2:9e:cc:c9:fb:84:2c:
         2d:14:19:51:a2:a9:78:a8:9c:eb:97:07:98:d7:cc:78:59:89:
         87:7f:f5:5d:05:35:7d:ee:77:8e:ab:30:0f:e9:23:e6:d4:e1:
         2c:5b:f2:38:48:1a:d2:5d:d0:ca:f3:c8:16:08:68:c4:7b:32:
         05:c0:fd:c3:ac:3b:48:cb:99:ef:eb:ee:bf:ed:6b:be:8f:9a:
         ab:8e:b0:67:af:68:1b:84:ee:72:19:dd:e3:c8:fe:06:70:a7:
         cc:f2:a6:c4:d7:0d:97:eb:57:68:03:be:82:2c:c2:ff:1e:b8:
         3e:58:da:03:ef:bf:6c:92:51:f5:c6:5c:58:96:50:dd:9c:ca:
         e2:74:e3:9d:f9:ef:aa:b2:7e:f8:43:fb:0e:19:ed:a8:96:78:
         91:2b:f5:fe:1e:a5:5c:c7:39:64:0a:ad:6e:c1:9b:68:46:b3:
         90:43:ca:44:3c:0a:76:87:7b:7e:fe:8d:1d:6c:aa:bd:94:86:
         a8:07:1d:7e:64:21:a9:ad:66:1a:0a:08:15:0c:d9:3a:9a:5d:
         83:78:73:50:c6:5a:73:7b:ab:ac:1a:6b:39:b3:ff:e4:30:10:
         b8:1b:28:1f:95:97:68:05:f2:08:c1:91:4f:b0:fe:02:e8:e6:
         34:1f:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org