Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/Ko1SDqfqqj_d2LS2CD7wjzRqPYE.roa
File:                     Ko1SDqfqqj_d2LS2CD7wjzRqPYE.roa (raw, json)
Hash identifier:          Pkf4Qo3HVbsehuV7y8riiXnzbvqDdFhxA4T/DPPect8=
Subject key identifier:   2A:8D:52:0E:A7:EA:AA:3F:DD:D8:B4:B6:08:3E:F0:8F:34:6A:3D:81
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       22
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Ko1SDqfqqj_d2LS2CD7wjzRqPYE.roa
Signing time:             Wed 11 May 2022 01:40:33 +0000
ROA not before:           Wed 11 May 2022 01:40:33 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        103.2.64.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:40:33 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2A8D520EA7EAAA3FDDD8B4B6083EF08F346A3D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:53:4b:57:70:39:21:b1:b6:67:e6:5f:fc:
                    1b:10:14:ec:99:53:28:e2:a0:b5:01:01:24:1f:0a:
                    76:01:90:b0:39:ee:f5:f0:df:99:4b:cd:68:05:a6:
                    71:30:6e:53:59:07:00:02:12:cb:b5:81:2b:97:a1:
                    fa:b4:d3:81:a7:31:d9:67:67:a4:87:f3:10:c5:26:
                    f7:9e:a4:c6:ac:0a:bd:25:bf:5d:93:a3:16:90:d4:
                    0d:2c:85:aa:f4:94:ed:be:3f:62:bc:bd:25:d3:50:
                    41:cc:8f:a1:14:78:64:f1:d6:c8:e3:bb:7a:14:53:
                    b6:af:3b:b1:30:fe:a2:82:c2:63:08:48:8f:dc:79:
                    77:09:68:f8:52:97:2a:0a:1d:09:59:89:83:a2:d9:
                    55:88:47:28:76:08:02:77:49:a9:f7:c3:f1:a7:d2:
                    30:70:8d:58:21:5e:17:cd:ac:5b:46:78:8b:bb:ac:
                    90:0f:3b:e2:08:6c:51:06:1f:d0:59:d9:06:c2:5d:
                    6b:c9:60:d7:d6:3c:9d:52:65:77:98:e8:c0:cc:5a:
                    0e:d6:26:30:e4:9a:1c:1f:da:19:b1:8e:bf:1a:13:
                    8a:33:b3:a0:92:76:06:96:c4:e6:90:0a:b1:26:a3:
                    1f:a7:69:cf:47:30:f7:44:c3:06:98:67:ef:5d:22:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8D:52:0E:A7:EA:AA:3F:DD:D8:B4:B6:08:3E:F0:8F:34:6A:3D:81
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Ko1SDqfqqj_d2LS2CD7wjzRqPYE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:f1:67:b5:82:88:87:bb:a8:50:d5:89:03:01:35:2a:53:
         00:30:e6:d0:04:13:05:ce:61:e4:7a:f4:e6:01:93:85:de:f1:
         cc:68:a3:e3:c8:b8:e9:06:0a:6c:9a:9d:ca:b1:71:4b:38:82:
         1a:c7:a7:3a:7f:bd:c6:6b:94:22:6e:53:35:91:74:23:88:f2:
         ae:be:3e:d6:96:1a:60:65:f9:32:f4:de:1d:fe:31:60:0a:1d:
         85:62:38:a2:c6:ee:45:19:05:04:db:df:48:c2:4f:04:e9:17:
         b4:8c:5d:e9:9a:8f:78:af:1a:9d:de:f4:e3:49:48:82:d0:c4:
         4d:88:e8:e8:a4:0e:64:41:d8:d6:d7:06:0c:d8:58:04:d7:5e:
         f8:c6:12:c7:e5:6d:77:c5:55:22:44:ec:80:40:03:8a:57:e5:
         85:27:af:4d:c0:ea:1c:b4:d1:0f:22:0b:a5:53:7e:d6:04:76:
         3f:bf:ed:e6:2b:f4:f8:71:b3:a7:e7:6d:94:57:b2:68:60:10:
         ab:ba:72:a9:e7:ec:2c:c5:7e:b3:50:c6:3a:a4:1a:12:cc:fc:
         85:4f:81:28:d4:b5:3e:25:59:e2:a4:a2:3c:fd:39:b6:08:7d:
         f0:d5:e4:78:04:b7:1d:ea:46:13:4a:bd:97:fd:c8:c1:5d:0d:
         c9:2d:7c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org