Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/Rq0n6c1QI-5fh9jPf1tdrNzfpJU.roa
File:                     Rq0n6c1QI-5fh9jPf1tdrNzfpJU.roa (raw, json)
Hash identifier:          SxuyQ+ToyTSHi0zFlyVJ4+lPzfu1OkQwJoqX6U6hkpo=
Subject key identifier:   46:AD:27:E9:CD:50:23:EE:5F:87:D8:CF:7F:5B:5D:AC:DC:DF:A4:95
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       32
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/Rq0n6c1QI-5fh9jPf1tdrNzfpJU.roa
Signing time:             Sat 01 Oct 2022 01:29:48 +0000
ROA not before:           Sat 01 Oct 2022 01:29:48 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     131896
IP address blocks:        103.239.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Oct  1 01:29:48 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=46AD27E9CD5023EE5F87D8CF7F5B5DACDCDFA495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:ed:27:c4:ed:10:98:e9:cf:7b:37:da:18:
                    fb:c2:34:3c:3a:e0:6f:8e:81:be:36:7b:9c:4a:df:
                    05:9a:a2:98:9a:5e:b7:64:75:eb:b6:a9:b3:e9:05:
                    60:d9:fa:a9:56:ea:45:75:91:8e:d4:22:e1:34:85:
                    c1:2b:3d:e2:57:0a:1f:57:04:dc:e5:3a:ae:a1:e6:
                    34:ec:12:8e:8c:60:29:36:68:b1:89:e9:f1:04:71:
                    88:68:cf:08:ee:d6:6e:8f:90:fa:9d:24:9a:e8:15:
                    fb:90:9d:e9:be:a8:4f:be:96:38:d6:3c:74:b6:06:
                    6d:50:c1:b4:7d:a6:fc:02:63:af:84:c9:41:5b:b5:
                    40:15:97:9b:2b:53:97:43:58:10:52:17:a8:cf:1e:
                    68:ad:24:d8:98:3e:6f:1f:cd:1b:fe:81:2c:a1:fc:
                    91:32:1e:6b:74:ec:32:76:4f:b6:1f:1d:16:5d:b4:
                    75:35:40:32:f5:6b:a9:0d:3d:73:08:24:0d:73:ad:
                    53:0b:7e:56:83:21:59:c0:51:8f:2e:5e:42:ea:14:
                    94:ac:03:9f:ba:9b:14:12:0d:5c:5c:5a:9f:15:0b:
                    1f:de:b0:c8:cd:d2:4c:3e:a2:61:f5:25:7d:f4:9a:
                    31:8c:69:dc:2f:05:19:e1:5c:41:e9:d9:c1:37:e3:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AD:27:E9:CD:50:23:EE:5F:87:D8:CF:7F:5B:5D:AC:DC:DF:A4:95
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/Rq0n6c1QI-5fh9jPf1tdrNzfpJU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:51:99:ef:9c:f9:27:7e:cb:ba:9d:a4:29:ef:f7:4f:82:95:
         d2:ae:40:37:a7:0c:b6:bb:69:ef:e5:bb:b1:c6:3f:bb:14:97:
         34:86:a7:a1:8d:4e:95:b1:02:c3:3d:a8:53:9c:e9:94:7a:91:
         25:96:01:3b:2e:83:d1:92:34:78:ff:35:f8:b7:2a:28:3c:4d:
         ea:05:4f:ff:61:ad:7d:16:b0:60:21:09:a3:11:b6:5a:a9:2a:
         ed:25:6a:37:af:ec:c2:5b:6a:dd:e6:7c:74:b1:e1:b0:1f:cc:
         8b:41:26:dd:b0:d2:dd:ce:1f:ea:19:7d:af:93:cd:3b:4b:68:
         ff:34:20:01:69:9e:42:2e:d8:3f:7f:98:e9:ec:cf:98:80:ce:
         8d:1c:67:23:e3:9b:ee:e1:b2:eb:69:46:55:b0:23:3c:39:8b:
         e8:f5:d6:33:5e:e2:34:2e:9e:29:a4:38:ed:7a:44:02:3a:fb:
         b4:43:03:38:50:0c:c5:ca:30:95:c6:d2:6b:46:ca:38:34:59:
         2b:0f:3d:59:38:e7:06:f8:3f:99:a3:f3:cc:84:cc:fd:8b:08:
         cb:c1:e5:a5:ad:a5:fd:66:42:d7:61:0c:07:44:77:4e:c6:a8:
         ee:3b:3a:3f:f3:2e:a9:7e:84:e2:80:3e:9a:7e:5a:8f:eb:7e:
         d0:58:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org