Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/xZ0fFldcs0n8BAN0mjFZAfPMBU0.roa
File:                     xZ0fFldcs0n8BAN0mjFZAfPMBU0.roa (raw, json)
Hash identifier:          6t8Nc0KydW0A/H/X74dX4Et+L1NP4ijeLK4sdNrIqXI=
Subject key identifier:   C5:9D:1F:16:57:5C:B3:49:FC:04:03:74:9A:31:59:01:F3:CC:05:4D
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       35
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/xZ0fFldcs0n8BAN0mjFZAfPMBU0.roa
Signing time:             Sat 01 Oct 2022 01:29:48 +0000
ROA not before:           Sat 01 Oct 2022 01:29:48 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     131896
IP address blocks:        103.239.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Oct  1 01:29:48 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=C59D1F16575CB349FC0403749A315901F3CC054D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:f8:de:a7:f7:13:fb:74:47:0b:db:50:2e:
                    19:66:ed:aa:56:8a:e2:d0:bc:42:12:51:18:ef:68:
                    d8:93:0f:a5:14:a5:b3:ae:6d:59:53:b5:d5:b9:40:
                    d3:e1:fd:80:00:8b:b7:ca:7e:68:74:a1:3f:fa:fe:
                    2e:1f:3a:0c:e5:19:17:16:5b:2a:1e:de:97:72:78:
                    2b:07:7e:79:ab:a4:bc:cc:e9:3e:c3:57:d4:26:85:
                    b6:cb:5e:98:b3:6a:8a:fe:72:6d:4e:ae:0d:46:bf:
                    7a:34:da:33:48:66:ac:05:37:bd:8f:0e:84:c8:31:
                    e7:e6:6e:af:b7:52:92:0a:1a:9d:53:8c:f9:13:f4:
                    2e:15:48:76:f9:6b:a4:02:af:9c:3b:94:cf:d3:76:
                    ec:0a:27:51:5b:09:77:ed:47:3a:6d:ee:47:df:28:
                    b2:09:76:f0:02:48:8f:a7:f0:2d:14:30:50:5c:59:
                    de:97:65:87:46:f8:a7:27:8c:9b:11:8f:af:a6:04:
                    dd:a8:57:00:61:15:89:bd:2e:aa:31:f1:eb:c1:85:
                    ea:22:b0:95:04:1b:12:f3:ad:1c:f7:5e:5b:f9:dd:
                    8f:4f:6c:e6:e3:52:88:fb:93:a2:ce:66:6d:d2:f7:
                    e4:2e:c7:4f:15:eb:9b:50:2b:e3:82:f2:f2:06:34:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:1F:16:57:5C:B3:49:FC:04:03:74:9A:31:59:01:F3:CC:05:4D
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/xZ0fFldcs0n8BAN0mjFZAfPMBU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:82:a6:25:5d:88:08:64:45:01:8e:af:30:5f:82:a4:77:8e:
         f8:6e:23:f1:1c:ac:9f:65:e7:59:36:11:51:b8:38:35:00:1e:
         ce:88:26:fa:c8:a3:41:02:f1:3e:88:d5:24:5d:e2:dd:79:f9:
         b1:bd:07:bc:38:0e:ba:7d:e9:75:6c:e6:5b:d2:4c:a8:b1:d4:
         51:5e:0e:1d:93:13:e8:b8:66:48:b5:76:28:fa:f9:99:be:48:
         e4:49:75:10:6f:76:a9:53:e8:33:11:0c:b4:86:5c:86:ac:42:
         f1:9f:a5:2a:a8:1c:39:83:e5:f9:dd:c0:a7:c4:23:76:48:44:
         d1:86:3c:aa:44:ee:b0:ae:f0:b3:b4:1f:83:10:ea:9c:8d:fd:
         7b:40:1c:b4:c9:ff:ec:72:19:cd:18:66:ff:00:b7:b6:d4:7c:
         21:7a:98:c1:0d:1a:04:56:2f:27:c9:3f:43:64:25:90:43:f6:
         83:89:4e:55:fe:c5:4f:49:b4:f3:09:9e:d5:45:57:b0:85:b2:
         74:4f:c3:62:b3:75:56:96:0e:b0:57:7f:89:7b:fd:96:6d:a4:
         ef:6d:a6:de:9b:2b:01:56:1d:0b:09:c0:6d:12:04:07:a3:4e:
         4d:7b:a7:7a:90:9d:b2:2b:01:e3:ba:fb:17:c0:9e:12:86:a4:
         9c:fd:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org