Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/xPdIMncaku8MXRpffI9rzcsZ7gU.roa
File:                     xPdIMncaku8MXRpffI9rzcsZ7gU.roa (raw, json)
Hash identifier:          vBflENTeN7J7rgsazTVxtRe6lfxS6BeRDPWvdXyoNpU=
Subject key identifier:   C4:F7:48:32:77:1A:92:EF:0C:5D:1A:5F:7C:8F:6B:CD:CB:19:EE:05
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       3D
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/xPdIMncaku8MXRpffI9rzcsZ7gU.roa
Signing time:             Sun 01 May 2022 01:30:06 +0000
ROA not before:           Sun 01 May 2022 01:30:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59105
IP address blocks:        103.202.216.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: May  1 01:30:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C4F74832771A92EF0C5D1A5F7C8F6BCDCB19EE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:f9:23:ac:e2:d8:44:fc:8b:07:60:c5:ce:
                    05:ae:20:4b:40:ac:a6:a3:6c:31:b6:6b:5e:4a:b3:
                    c2:31:19:ce:cb:95:d4:5b:38:10:d1:6e:23:b5:b9:
                    da:c4:2a:62:28:a1:f9:de:55:dd:7c:b5:79:dc:7f:
                    90:fa:5e:e5:a9:a3:6f:fd:2c:87:d4:25:30:3e:d8:
                    af:d1:e2:d6:95:53:9c:26:70:7d:7f:19:fe:ae:e0:
                    eb:97:7e:bd:c1:f8:81:d5:df:50:15:fa:b2:6e:a3:
                    39:b4:b7:6b:c1:dd:82:1c:9b:82:6b:bd:a7:75:0c:
                    ec:a0:42:ed:ce:4c:6d:9f:7f:07:88:f3:04:09:8d:
                    b2:c9:4a:6b:e6:8e:e9:55:fa:39:f9:cf:cb:39:81:
                    c1:83:2e:4d:73:a0:43:1a:d4:4d:03:53:a5:fd:f4:
                    de:bc:7e:e9:02:bc:00:68:3e:5a:8a:ef:1f:59:f4:
                    48:9c:43:0c:d9:24:aa:47:d6:45:94:29:81:c1:5b:
                    e2:12:6c:5f:91:81:02:0c:6d:0d:95:c9:61:67:17:
                    53:be:e5:fa:91:25:42:c9:7f:17:49:6b:91:16:68:
                    75:6b:48:fa:f4:3d:a8:a2:0b:cc:c2:f8:14:52:f5:
                    e6:86:51:f6:69:1e:2b:57:36:7a:2a:de:5a:86:99:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:48:32:77:1A:92:EF:0C:5D:1A:5F:7C:8F:6B:CD:CB:19:EE:05
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/xPdIMncaku8MXRpffI9rzcsZ7gU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:48:d4:87:b2:6c:62:7d:b8:93:b5:b4:91:bd:0f:49:dd:2e:
         85:43:62:c5:02:ee:0e:17:5b:43:ba:54:04:d7:cc:f4:78:ac:
         e3:00:22:7f:9d:35:a4:f5:65:36:47:79:fd:7f:ea:ec:6d:4d:
         cd:a6:c1:3f:41:0c:5b:2f:e4:7e:85:a9:c0:43:65:c1:5c:3b:
         b6:0c:8a:2b:17:77:93:0b:18:89:4c:e1:93:f8:c5:91:75:83:
         2d:8c:fa:4e:d0:d4:10:39:54:02:10:3b:28:c6:04:24:fa:12:
         01:ca:14:eb:4a:15:6e:1a:51:42:28:e5:38:c1:8d:58:5a:bf:
         6e:80:d0:28:05:08:a9:ca:55:94:96:06:29:6c:19:84:3d:4e:
         21:11:d3:ba:a4:61:5d:df:94:f8:96:85:de:12:db:0d:90:96:
         b1:29:6d:80:32:6a:6b:97:3e:18:56:29:54:86:4b:31:b2:09:
         e1:d9:79:9c:56:55:75:fa:eb:3c:75:8f:d0:0a:cf:db:64:f1:
         00:08:42:fd:cc:83:09:e7:66:1b:92:05:5d:97:ba:d0:80:8b:
         1b:2a:c9:22:66:b7:a9:25:25:43:25:1b:39:9c:53:49:28:b8:
         0a:ef:d6:cd:ed:4f:2b:7e:5b:67:73:72:55:03:ce:69:fb:05:
         02:e0:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org