Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/2stPLbYGnTjhYgpqXr5Pu-efjAY.roa
File:                     2stPLbYGnTjhYgpqXr5Pu-efjAY.roa (raw, json)
Hash identifier:          A+Ia8hxoQiJ6VvL1SI8WN/pwXMenmyLBL5MNPKZvV/U=
Subject key identifier:   DA:CB:4F:2D:B6:06:9D:38:E1:62:0A:6A:5E:BE:4F:BB:E7:9F:8C:06
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       4F
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/2stPLbYGnTjhYgpqXr5Pu-efjAY.roa
Signing time:             Thu 13 Apr 2023 09:52:50 +0000
ROA not before:           Thu 13 Apr 2023 09:52:50 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     59105
IP address blocks:        103.48.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Apr 13 09:52:50 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=DACB4F2DB6069D38E1620A6A5EBE4FBBE79F8C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:03:e5:ca:2b:8c:cd:ed:03:2e:80:ef:be:
                    d0:99:0a:87:e5:46:ea:4f:af:6a:3a:49:39:fd:36:
                    a8:82:20:4d:97:dd:3f:e3:00:dc:22:e5:2c:a5:98:
                    33:9f:35:17:87:fc:a4:b1:c9:48:a0:a9:76:bc:bf:
                    ca:f7:34:53:a8:d5:a7:d4:18:59:41:ef:c9:f2:cd:
                    9f:3c:77:89:c0:f6:2d:43:cc:85:73:f2:f0:24:65:
                    8a:d1:fc:31:8e:8f:c7:82:68:f5:5e:90:3f:22:53:
                    71:6c:eb:a1:5b:e8:93:2d:42:98:9d:87:8f:29:0a:
                    f8:e1:d0:b9:fe:df:c9:d5:b1:60:dc:80:ed:8d:0b:
                    85:9c:5d:cb:27:d4:24:b8:45:a1:73:a8:c3:1f:08:
                    c0:fc:b8:7d:d5:e2:2e:c2:a5:59:f6:9f:d3:70:74:
                    98:7a:b1:97:1d:d3:cd:7e:3e:e4:e4:6b:47:88:ef:
                    a9:a3:ef:64:63:bb:86:49:ce:a9:23:e5:3b:d9:24:
                    76:8c:c9:0f:af:9b:07:66:3f:e6:a0:4b:02:8c:5e:
                    17:50:ad:2f:da:09:9d:d7:c1:bb:12:be:15:e2:01:
                    2c:8c:85:81:9f:89:55:92:fe:cd:bc:04:3e:be:72:
                    c8:0d:9d:64:69:55:b1:c7:f7:f0:18:eb:85:7e:4b:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:4F:2D:B6:06:9D:38:E1:62:0A:6A:5E:BE:4F:BB:E7:9F:8C:06
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/2stPLbYGnTjhYgpqXr5Pu-efjAY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:d6:39:ff:8d:f6:b1:c9:19:b8:40:78:bc:47:54:4e:44:
         88:00:c3:1e:72:53:75:63:10:dc:eb:e1:46:32:ce:31:97:e6:
         cc:71:c0:c3:ba:a6:c9:0b:43:95:4a:1a:93:75:86:27:88:6d:
         12:c6:5e:b0:54:99:fb:11:27:06:a9:8a:d9:c7:23:c5:65:9e:
         95:ec:18:f0:b4:9e:da:94:c8:94:05:19:6e:5b:cd:48:81:ba:
         1f:92:c5:62:1a:cb:e4:11:ed:58:dd:ed:84:13:a0:cc:ad:d1:
         b4:ec:58:6d:56:b8:36:83:30:0f:fe:73:81:fb:51:8f:bf:ed:
         26:99:5a:f6:67:51:77:80:94:80:54:3a:88:bd:c3:2e:b0:b8:
         86:a6:a6:9f:f2:0b:36:70:89:13:28:36:86:42:c3:ca:0b:1e:
         fc:41:15:00:17:3f:57:6a:e0:c0:d1:55:b2:6c:ef:00:94:96:
         ff:71:db:54:62:50:d7:32:6c:b5:e0:39:ce:16:23:f1:f0:c0:
         47:d1:c1:b8:7f:0a:3c:dd:95:d1:5c:3a:a4:9a:f4:b5:eb:84:
         80:f2:3f:20:bc:02:9a:c9:7d:5a:5a:62:08:da:31:5f:54:c7:
         c6:ea:08:0f:41:6e:ee:99:79:bf:63:64:b5:01:a7:3b:9d:23:
         2a:8e:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org