Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/JxFhEOQdvpp11LBi_2X7rz1yzmw.roa
File:                     JxFhEOQdvpp11LBi_2X7rz1yzmw.roa (raw, json)
Hash identifier:          aaV5bytl+3LEezvDO3+GZigA7XK2Lr0LtJH4cg2u/FQ=
Subject key identifier:   27:11:61:10:E4:1D:BE:9A:75:D4:B0:62:FF:65:FB:AF:3D:72:CE:6C
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       02
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/JxFhEOQdvpp11LBi_2X7rz1yzmw.roa
Signing time:             Sun 02 Oct 2022 04:26:51 +0000
ROA not before:           Sun 02 Oct 2022 04:26:51 +0000
ROA not after:            Mon 02 Oct 2023 04:19:44 +0000
asID:                     18274
IP address blocks:        103.82.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Oct  2 04:26:51 2022 GMT
            Not After : Oct  2 04:19:44 2023 GMT
        Subject: CN=27116110E41DBE9A75D4B062FF65FBAF3D72CE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:f5:da:40:7c:1a:fd:28:8e:cf:f7:14:46:
                    43:45:e5:ab:ae:b7:8b:bd:54:48:37:6a:5b:4a:55:
                    f2:d5:98:4c:ce:c2:9a:2b:1a:a5:a5:ab:75:b7:c5:
                    05:64:f2:a9:1b:e3:ac:60:ec:2d:11:7d:29:d1:60:
                    07:16:b6:32:70:e7:80:fd:36:72:a1:43:2d:3f:c5:
                    35:23:ad:db:a6:b9:c6:9c:dd:0d:5d:67:ae:96:ed:
                    6f:8a:6a:03:8a:49:a8:3c:78:68:0e:63:ed:a4:6a:
                    32:dc:d1:8a:f3:2b:4a:6d:bb:db:60:f5:d7:2a:48:
                    e6:76:c7:57:bb:8d:2f:6f:ac:cd:3b:06:8f:bc:c6:
                    b2:6f:7c:09:4f:5c:c9:49:42:f8:76:a7:6e:28:4b:
                    85:7f:de:05:59:91:e5:69:36:d9:b8:98:95:92:17:
                    c6:97:41:92:e0:e9:e0:22:1d:cd:92:81:3e:91:35:
                    29:44:41:b8:da:68:db:3c:e0:b1:89:fb:19:54:8c:
                    df:66:f3:c8:f1:38:9b:8a:8b:25:2b:16:56:2c:59:
                    f7:e5:e2:59:3d:95:1a:b2:97:09:09:83:36:ba:2c:
                    79:fd:1b:6e:f8:07:d0:62:11:00:00:ca:59:80:5e:
                    92:23:97:d5:8a:4b:15:10:0f:11:be:ed:8c:61:d4:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:61:10:E4:1D:BE:9A:75:D4:B0:62:FF:65:FB:AF:3D:72:CE:6C
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/JxFhEOQdvpp11LBi_2X7rz1yzmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:c2:96:2c:f3:3d:20:e9:4b:3f:88:d1:b7:1c:0d:4b:e1:
         dd:8b:48:17:b3:55:9d:c4:47:3b:8d:6c:07:e6:e3:b5:03:e5:
         80:05:b4:be:4a:86:e6:b5:c8:34:7c:fd:d8:4f:b9:71:2e:d1:
         31:67:62:95:94:64:ce:86:52:99:7b:05:d8:8c:13:74:49:8c:
         c9:20:c4:4c:47:96:78:6d:67:b7:3e:e2:fa:66:5b:b0:cd:3d:
         0b:d1:63:38:24:fd:c9:82:5b:63:c9:38:d4:ce:74:5e:82:06:
         a2:63:dd:22:d3:dd:ee:62:3b:1d:e1:b9:bb:97:d8:c2:fd:5d:
         2a:99:ba:1d:c8:aa:d3:62:2b:93:66:60:8a:2e:1b:eb:8f:be:
         0f:4d:9a:ce:3b:ed:98:4f:a4:13:a3:1a:e8:fd:e3:f7:8f:ac:
         1b:01:6c:c8:28:b2:c3:ca:21:bc:9e:9f:b2:0a:56:58:45:aa:
         0d:b1:a7:0a:1a:53:ba:5f:e1:61:22:55:58:da:00:4c:69:47:
         5b:38:a1:4b:b1:52:92:ea:b3:b4:52:ec:36:58:3c:d8:2f:26:
         05:14:0d:ff:c8:ab:b4:8d:91:58:9f:75:92:f2:d5:cb:7b:0d:
         90:73:b1:f4:03:7a:89:b1:55:21:8d:04:4c:7c:6b:3b:da:52:
         ea:42:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org