Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/_zO75tJJWnvjc9FUAuMwq1D00Y0.roa
File:                     _zO75tJJWnvjc9FUAuMwq1D00Y0.roa (raw, json)
Hash identifier:          ytYf5nouFbpyyxrhH0tkzs6C2XdqWCHklzZ1fnqz9r0=
Subject key identifier:   FF:33:BB:E6:D2:49:5A:7B:E3:73:D1:54:02:E3:30:AB:50:F4:D1:8D
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       18
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/_zO75tJJWnvjc9FUAuMwq1D00Y0.roa
Signing time:             Thu 06 Apr 2023 03:02:52 +0000
ROA not before:           Thu 06 Apr 2023 03:02:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     23618
IP address blocks:        103.114.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Apr  6 03:02:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FF33BBE6D2495A7BE373D15402E330AB50F4D18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:78:70:ec:88:11:71:79:c4:b5:8d:68:a6:
                    b9:44:4d:84:1a:66:76:3d:be:dd:d9:55:43:57:97:
                    9e:2b:0e:b6:d0:d7:c2:38:f0:7c:ea:a9:10:75:f7:
                    96:75:b1:d8:3b:92:71:d7:76:0e:5c:aa:15:66:d9:
                    00:69:70:cc:ab:31:5b:7a:4f:4a:69:cf:f3:5f:62:
                    89:7f:4c:c7:f6:9a:46:6b:ba:12:20:7e:04:2b:d5:
                    01:51:36:ac:19:2c:d4:57:87:c2:06:2e:bb:6d:4b:
                    50:ef:f3:d6:ef:cb:3a:cd:d6:67:84:74:11:57:f4:
                    1e:ca:02:3c:f1:26:4f:79:ed:7b:2d:de:0c:c6:18:
                    6b:8e:15:e7:f9:ba:8a:e1:13:7e:1b:95:ca:17:3d:
                    1c:d3:4a:da:ed:2e:92:9b:38:31:f5:3b:37:a2:cb:
                    b6:54:01:6d:4b:f2:48:24:c7:8c:cf:9a:95:6a:fc:
                    80:60:56:69:53:04:45:67:01:65:10:99:76:2d:c6:
                    8f:3f:c1:d9:7c:1a:87:b6:6a:e2:50:cc:a5:a7:da:
                    4f:e9:aa:94:43:e3:bc:97:b5:0c:f8:a5:8c:80:ed:
                    ba:26:f5:ac:6b:c4:a0:c8:19:57:db:aa:80:c8:cb:
                    60:1c:60:3c:ce:64:3e:a2:0a:bb:5c:a5:9a:ef:77:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:BB:E6:D2:49:5A:7B:E3:73:D1:54:02:E3:30:AB:50:F4:D1:8D
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/_zO75tJJWnvjc9FUAuMwq1D00Y0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:57:ff:42:7e:17:65:aa:3c:0a:5e:66:a9:12:af:63:31:ce:
         fe:40:69:de:5b:6f:51:90:2d:a2:9f:1d:36:7a:ca:2f:83:b8:
         13:11:b0:3b:1c:47:68:01:ec:13:11:99:7c:70:e4:de:45:48:
         d5:f2:9b:a7:a3:47:a7:54:90:7f:3e:79:60:52:50:e9:3c:b0:
         2d:f3:5d:78:6d:04:e9:3b:f2:21:2b:af:c7:5e:8b:5d:a6:47:
         21:4c:02:31:26:ca:74:52:0d:e8:82:1a:b4:93:ac:02:46:d4:
         37:e8:8e:31:ba:a0:e6:93:75:5d:28:76:d0:6c:cc:8e:7e:f5:
         1d:88:d5:1d:95:87:6e:13:69:f2:80:34:3a:31:9c:48:25:7e:
         83:64:b4:15:ca:fa:dd:de:36:16:35:ba:45:81:ff:5d:d1:bc:
         52:60:44:dc:f5:2e:2e:5f:f7:b7:02:fb:3d:cc:b1:96:8d:f2:
         7e:4c:52:96:89:cd:e4:cf:08:e0:84:37:cd:ba:1c:9f:86:3f:
         19:0d:4e:2a:e6:95:f8:e1:8d:be:67:a5:4c:85:3d:33:23:63:
         81:d7:94:99:54:17:38:ac:a0:6a:af:e4:fc:f8:6a:25:6d:10:
         58:32:56:53:a6:ad:a8:82:6c:2b:d2:c4:a3:b9:68:d0:8c:e0:
         0f:c1:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org