Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5529/LTsNsAkiKyFydbiRA32poxmDncQ.roa
File:                     LTsNsAkiKyFydbiRA32poxmDncQ.roa (raw, json)
Hash identifier:          9I6qG9cf8wretH6KVscMJ3gRCeBGy6dUZGgsAvCpIUk=
Subject key identifier:   2D:3B:0D:B0:09:22:2B:21:72:75:B8:91:03:7D:A9:A3:19:83:9D:C4
Certificate issuer:       /CN=31121BF92B352BAA5031D23343CEA9EED57151A6
Certificate serial:       13
Authority key identifier: 31:12:1B:F9:2B:35:2B:AA:50:31:D2:33:43:CE:A9:EE:D5:71:51:A6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/LTsNsAkiKyFydbiRA32poxmDncQ.roa
Signing time:             Fri 17 Mar 2023 01:42:45 +0000
ROA not before:           Fri 17 Mar 2023 01:42:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     146980
IP address blocks:        103.184.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31121BF92B352BAA5031D23343CEA9EED57151A6
        Validity
            Not Before: Mar 17 01:42:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2D3B0DB009222B217275B891037DA9A319839DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:91:6f:5b:ca:e5:16:4d:c3:1f:a3:5c:37:
                    e2:1b:bf:c5:0e:df:46:70:ef:4c:d0:5f:66:b5:36:
                    cc:6d:ab:b8:eb:06:7f:5c:15:98:e7:2d:bc:a5:97:
                    65:cb:98:b5:de:2c:9a:72:5d:b0:18:4f:7e:56:62:
                    fd:a9:23:25:5c:42:6b:f5:35:ca:cd:18:be:0a:b4:
                    0b:11:80:c2:31:9d:03:da:b3:07:dc:59:99:62:1f:
                    27:0a:65:49:9e:1e:95:c4:5e:1a:ec:b0:59:69:dc:
                    fc:03:67:55:86:ea:44:b2:3f:f6:75:5d:8d:c7:f3:
                    74:ca:dd:69:87:ac:1b:b8:64:cd:67:ad:76:0a:50:
                    79:11:2c:18:86:7f:ef:d0:bc:00:36:d5:7e:f4:bb:
                    f4:4e:f1:9c:94:e3:d9:b4:0a:25:51:76:3a:ba:4f:
                    9c:99:54:c8:0e:ef:32:96:72:f3:d5:8e:5a:85:49:
                    98:15:b3:f0:b6:a1:19:4c:89:10:71:9b:bc:42:7d:
                    9f:d5:1f:3f:fc:bb:08:57:24:8b:d2:8f:12:a5:54:
                    9d:2d:69:75:74:ca:0c:3a:f9:94:4e:04:0c:5c:30:
                    6c:e3:51:c5:fb:e4:4d:18:3c:5d:34:87:c8:ea:7f:
                    18:c2:dd:1a:8f:8d:d5:ec:db:e6:b5:f8:d3:7a:23:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3B:0D:B0:09:22:2B:21:72:75:B8:91:03:7D:A9:A3:19:83:9D:C4
            X509v3 Authority Key Identifier:
                keyid:31:12:1B:F9:2B:35:2B:AA:50:31:D2:33:43:CE:A9:EE:D5:71:51:A6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MRIb-Ss1K6pQMdIzQ86p7tVxUaY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5529/LTsNsAkiKyFydbiRA32poxmDncQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:89:68:94:69:22:bc:ec:75:50:43:09:96:f4:07:41:4a:9a:
         6e:67:5b:20:43:52:07:5b:0d:c3:c7:c0:79:8e:b6:04:f4:95:
         d5:1e:e8:3a:ee:a7:74:4a:5c:7d:1a:a2:83:16:94:84:ed:23:
         92:42:18:f8:9a:6e:47:87:3c:ed:41:12:9d:1b:ed:c5:39:8c:
         9c:d3:54:79:3d:20:cf:7a:ee:ff:d7:7e:22:1f:05:70:79:6e:
         99:2b:a7:99:91:84:89:8a:23:6c:e0:23:96:07:5c:ab:87:3a:
         3c:61:7e:48:01:4a:fd:9f:ed:88:ee:6d:49:0a:69:b3:b5:51:
         8d:06:05:79:99:20:08:b2:af:6b:f7:e4:1f:a3:35:95:d9:71:
         44:3d:76:26:09:c1:a5:fb:f4:4d:31:67:b4:f6:0c:c3:66:e8:
         ac:98:bd:dc:e1:73:d9:6f:7f:1a:68:0c:ae:dc:0b:bf:c3:76:
         a7:e1:47:f0:75:51:e1:d5:59:eb:16:2a:f1:d0:f6:74:9d:00:
         32:4e:4d:20:90:5f:9d:55:89:17:b9:88:51:25:23:9a:84:a8:
         19:53:b1:15:95:23:86:c0:40:ad:fb:0f:54:23:d1:2f:1e:92:
         0e:21:22:e7:62:02:c9:1a:3d:fd:06:e9:5b:f6:14:fa:76:47:
         55:e0:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org