Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/fxagYJS6sGg-taWFhCyPI07Pmbo.roa
File:                     fxagYJS6sGg-taWFhCyPI07Pmbo.roa (raw, json)
Hash identifier:          mVF9a3/b19xQOwsABnqUQFiqzlM1LSa82SAbk6Gi4R8=
Subject key identifier:   7F:16:A0:60:94:BA:B0:68:3E:B5:A5:85:84:2C:8F:23:4E:CF:99:BA
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       3D
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/fxagYJS6sGg-taWFhCyPI07Pmbo.roa
Signing time:             Thu 13 Apr 2023 09:54:01 +0000
ROA not before:           Thu 13 Apr 2023 09:54:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        103.2.64.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7F16A06094BAB0683EB5A585842C8F234ECF99BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:5c:11:9b:cd:bf:6e:30:a5:a7:ca:17:35:
                    dd:7b:f4:76:09:08:f7:50:e9:2f:02:1b:5e:4a:8e:
                    77:74:4b:85:95:60:43:51:6f:b2:bd:55:8d:ba:2e:
                    04:38:bc:41:87:0f:f1:fa:5b:60:ae:48:58:c5:ad:
                    b5:18:e7:88:f7:8b:2c:b5:53:c7:e0:fa:6a:56:83:
                    71:30:a4:45:a6:a8:20:ff:5e:d8:4f:ea:2a:1c:8f:
                    d7:70:0b:f4:9a:74:0e:99:ef:42:46:1d:b1:8a:6a:
                    ab:7f:50:fe:a0:6f:db:7c:f2:bd:44:bb:2e:a1:d4:
                    6c:db:e1:fa:e6:51:29:47:c2:a9:d7:a3:69:dd:5d:
                    14:74:c3:c6:a7:0d:0b:b2:cb:3d:c7:1f:bb:61:90:
                    ba:0d:32:6c:aa:0c:12:32:13:95:9a:3c:57:05:c1:
                    5d:f6:8a:73:d3:a8:89:b6:79:a3:af:9b:70:62:e8:
                    cf:69:f6:70:a5:dd:d7:0c:27:c2:ab:f0:4b:0b:d8:
                    be:33:77:68:2e:bc:a9:5d:0a:6b:c7:b6:e3:2e:c3:
                    d8:e8:c6:d0:a7:cd:7d:a8:3a:8e:4d:1c:c2:15:4a:
                    1d:6c:00:3f:28:3c:f8:9d:cb:54:85:5f:95:ce:c9:
                    da:ff:fd:59:ea:01:76:86:a5:92:f6:62:60:11:bc:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:A0:60:94:BA:B0:68:3E:B5:A5:85:84:2C:8F:23:4E:CF:99:BA
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/fxagYJS6sGg-taWFhCyPI07Pmbo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:11:cc:85:8f:c2:55:a1:f0:63:0e:69:3a:f9:a9:e5:1b:eb:
         11:cd:76:5b:5f:67:81:7f:c7:25:06:61:0c:ec:4d:fc:ce:c9:
         8e:44:5b:af:60:fb:1c:e2:f6:5a:2d:66:1d:be:cc:8c:00:2e:
         9e:6b:20:e4:12:0d:e3:56:17:d3:d8:e6:26:54:b0:89:77:16:
         15:3f:ea:5b:ec:10:1a:cb:dc:7f:eb:8f:97:63:fa:02:75:52:
         26:0c:40:b1:aa:aa:47:a7:9f:e5:81:52:78:59:12:cd:b8:84:
         7c:35:0e:e8:09:18:23:b2:1f:83:44:e9:c0:31:a0:c7:22:ff:
         65:b3:4e:d9:c3:a3:9e:b9:a9:4f:23:4f:4c:f2:fe:aa:ab:67:
         c1:2f:45:81:a0:0f:07:4b:9c:ca:90:f5:99:2c:2f:b3:37:f6:
         78:8e:07:57:71:7c:fe:26:d6:00:b5:02:64:04:cb:99:43:60:
         0d:aa:3d:6a:af:3d:41:32:da:7d:47:d8:78:11:94:d9:cb:e6:
         a9:68:e2:fa:2f:4f:0d:f3:7d:63:37:7f:46:5c:d7:0e:90:e1:
         bb:4f:71:47:2c:52:c2:ea:4d:aa:2f:42:b8:9b:31:33:ac:c4:
         74:b0:f7:c6:86:01:fc:3b:50:1e:17:f6:04:08:c5:43:33:fe:
         89:13:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org