Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/EwqdFu651lLQVIsh3c4jKFwjaQo.roa
File:                     EwqdFu651lLQVIsh3c4jKFwjaQo.roa (raw, json)
Hash identifier:          r+R3RdbTk5aFYGgfPQ7mZJhIk40VOND2sVTVfnEGJNU=
Subject key identifier:   13:0A:9D:16:EE:B9:D6:52:D0:54:8B:21:DD:CE:23:28:5C:23:69:0A
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       33
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/EwqdFu651lLQVIsh3c4jKFwjaQo.roa
Signing time:             Sat 01 Oct 2022 01:29:48 +0000
ROA not before:           Sat 01 Oct 2022 01:29:48 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     131896
IP address blocks:        103.239.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Oct  1 01:29:48 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=130A9D16EEB9D652D0548B21DDCE23285C23690A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:a8:1d:b6:45:63:9b:07:be:c2:c3:08:59:
                    12:56:de:27:1f:91:89:f3:70:db:b9:ca:84:26:36:
                    88:13:6d:9f:dc:ae:25:97:f2:76:d0:ba:83:8f:af:
                    c7:f5:3d:19:76:31:f4:c4:88:ed:77:01:f3:70:b8:
                    7f:9d:82:d1:db:63:4f:e8:b4:4a:e9:d8:97:41:cc:
                    5e:48:47:57:5d:a3:26:3c:28:1a:98:3b:73:7f:fc:
                    7b:f6:e8:cc:11:d4:99:19:00:fc:05:23:96:20:0e:
                    e2:60:6f:25:c7:57:f9:cc:76:04:8e:4e:38:cc:fe:
                    57:31:89:d1:42:39:d0:de:29:1e:d4:59:d5:16:58:
                    d6:c3:c2:88:7a:4a:d7:8d:02:3a:fc:35:16:ea:bf:
                    10:8d:df:e5:a2:a9:f4:a7:94:26:8b:8b:b7:c1:fe:
                    b4:7a:7c:da:32:43:ad:52:fb:75:1d:b6:4a:55:46:
                    b2:3c:a1:d7:c1:b5:ff:0f:f3:8c:83:96:3a:a8:15:
                    65:74:8d:41:02:b6:10:ba:95:72:be:77:25:fc:d1:
                    1f:b9:2a:db:00:2c:d3:a4:0d:f7:e3:c0:94:7e:dd:
                    62:2d:16:0c:5f:de:26:73:74:1b:2c:ef:ac:ac:3d:
                    98:20:aa:d8:7f:79:8d:82:84:39:dc:71:e7:4f:5f:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0A:9D:16:EE:B9:D6:52:D0:54:8B:21:DD:CE:23:28:5C:23:69:0A
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/EwqdFu651lLQVIsh3c4jKFwjaQo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:03:d3:22:85:cb:43:e1:18:eb:82:d0:cc:b0:b0:89:17:
         a4:d3:ef:dc:0b:be:86:7b:24:65:77:25:6e:9f:32:64:8b:9a:
         5a:33:93:1c:fe:40:52:ea:6f:7a:03:7f:1e:d5:cb:dd:8f:2b:
         d7:05:91:2e:1a:6b:96:b6:4a:2a:c3:0e:7f:17:ae:88:33:90:
         27:b5:50:d1:48:1a:0f:f7:67:f2:c5:ce:75:38:cf:76:3f:ca:
         3a:ae:9c:4d:2d:07:f4:2d:0b:3a:47:b1:5e:1d:22:57:8b:b4:
         7d:c8:61:1e:4a:de:c0:44:78:33:fa:52:de:46:df:46:20:0c:
         2a:6e:72:a7:56:15:80:fb:ca:a7:47:88:d5:47:50:a5:fa:48:
         80:71:55:96:53:ca:a5:6f:f6:7d:6d:1c:b1:c8:ad:01:c0:78:
         2d:40:c8:b1:67:1f:3a:23:dc:c3:68:f7:3f:44:66:c5:1c:cc:
         1f:72:09:69:31:04:d8:a2:d2:aa:e9:8b:d8:f5:25:6e:1f:9a:
         40:9c:09:f3:9e:79:d7:9f:10:91:04:2a:6f:a9:be:38:c5:2c:
         7d:3a:a9:e5:b0:75:ba:a4:99:9b:28:d1:11:c1:af:be:bd:9e:
         fd:71:67:aa:23:29:1c:03:7c:77:5a:4f:30:c1:24:ce:14:b4:
         71:91:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org