Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/afNU6nYwl4MhQq97Hsf8xiyIWX0.roa
File:                     afNU6nYwl4MhQq97Hsf8xiyIWX0.roa (raw, json)
Hash identifier:          7wpq9gp3GHJsFkDjcOQ6I8aFuSRpYlssJr8ZSTgpEsA=
Subject key identifier:   69:F3:54:EA:76:30:97:83:21:42:AF:7B:1E:C7:FC:C6:2C:88:59:7D
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       3E
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/afNU6nYwl4MhQq97Hsf8xiyIWX0.roa
Signing time:             Sun 01 May 2022 01:30:06 +0000
ROA not before:           Sun 01 May 2022 01:30:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59105
IP address blocks:        103.247.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: May  1 01:30:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=69F354EA763097832142AF7B1EC7FCC62C88597D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:87:6f:49:27:18:33:e1:50:1f:b1:9f:0a:
                    af:08:50:13:ff:f9:2e:e5:5e:5e:5f:6a:c4:b7:13:
                    d7:14:52:d8:1c:e7:a0:4d:fc:e9:50:e5:d3:ad:4c:
                    90:98:91:d3:82:a8:18:a1:59:32:21:06:7b:0d:f7:
                    23:9b:53:c9:2b:a2:82:3b:4c:88:3a:8d:f3:4a:96:
                    b2:61:9c:62:2a:2d:bf:45:0e:93:0e:3f:84:fb:06:
                    8e:20:b1:cd:12:63:a9:f9:57:67:34:b4:26:b3:17:
                    b8:5d:f6:05:e5:33:0e:0e:d1:3b:ee:21:ef:7c:ad:
                    47:c9:ad:57:b5:7f:5c:2f:07:1e:61:e8:10:20:ac:
                    7f:17:24:68:34:82:63:24:d8:4a:b0:64:45:66:63:
                    37:c9:59:10:1e:ce:d1:93:d7:a4:f4:c0:ff:c4:4f:
                    e4:05:75:38:76:ce:b0:76:70:f3:fb:fe:4b:51:90:
                    46:a4:66:b7:93:ea:a2:f9:04:a2:8b:e9:72:5b:6c:
                    28:e0:8a:03:01:f5:b7:34:35:fb:4d:31:11:b0:df:
                    a7:9e:8c:75:74:45:61:9b:42:50:6d:79:b0:b2:1a:
                    17:3e:28:d1:53:7f:ee:c2:8a:0f:3e:e2:af:98:fc:
                    c6:39:83:34:a2:26:c5:2f:f9:5b:b5:95:1b:2d:9f:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F3:54:EA:76:30:97:83:21:42:AF:7B:1E:C7:FC:C6:2C:88:59:7D
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/afNU6nYwl4MhQq97Hsf8xiyIWX0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:35:43:c1:d4:c6:80:64:35:1a:36:49:b5:af:cd:af:e2:
         a4:8a:25:1c:11:3f:bf:7b:57:1b:cf:f8:94:6d:32:62:3a:27:
         6d:8b:ed:e9:4c:ff:3a:8b:3a:da:2b:e4:33:e3:c8:a3:10:c3:
         9e:41:99:bd:20:fc:c2:f5:49:49:35:42:f3:fd:05:0d:78:0b:
         6c:75:63:14:ea:59:c9:75:80:fe:8e:4c:4a:9f:93:e6:88:fb:
         6f:3f:51:bb:f0:78:06:fb:2a:fa:f9:d4:b7:82:29:4c:14:33:
         e8:07:2a:5e:4e:08:36:05:be:bd:03:78:c7:9a:4e:10:cc:0c:
         f4:27:e9:08:19:6c:a2:94:33:e7:60:4e:ee:0e:a1:ee:da:12:
         a9:ce:76:34:4d:79:ae:15:74:4e:1f:73:75:6e:08:73:20:bc:
         57:84:91:30:ff:54:57:a2:a8:6f:db:36:33:84:cf:93:b4:1f:
         97:03:b4:bb:b6:52:c3:53:69:16:7d:39:ed:f5:5c:37:2a:69:
         40:2a:85:9f:da:fe:e3:60:36:1b:c5:16:59:c3:f5:7e:9e:f8:
         e5:1c:e8:95:bd:eb:44:84:ca:68:c3:44:88:0f:b0:5c:3e:8b:
         af:07:0b:3f:21:03:96:bd:4c:8c:48:89:0a:13:a8:bf:d0:54:
         39:57:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org