Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/PwtsqRItAzdX7c8KW6SWuOjs0NI.roa
File:                     PwtsqRItAzdX7c8KW6SWuOjs0NI.roa (raw, json)
Hash identifier:          3F1zzXgjVVSx0xn2O6w6eSlN7xoq4ZWWyVcxJLs31hQ=
Subject key identifier:   3F:0B:6C:A9:12:2D:03:37:57:ED:CF:0A:5B:A4:96:B8:E8:EC:D0:D2
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       14
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/PwtsqRItAzdX7c8KW6SWuOjs0NI.roa
Signing time:             Mon 13 Jun 2022 06:18:42 +0000
ROA not before:           Mon 13 Jun 2022 06:18:42 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     23778
IP address blocks:        103.18.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Jun 13 06:18:42 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3F0B6CA9122D033757EDCF0A5BA496B8E8ECD0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:61:60:84:73:9d:98:7c:e9:6c:f0:04:0e:
                    5c:ce:e2:7a:26:b8:c2:b3:4d:b0:09:f6:53:32:f8:
                    ea:10:67:df:dd:8c:10:c0:8d:4e:7d:2e:3e:48:7b:
                    8a:05:8a:cf:09:f1:d7:4f:bd:0e:d4:77:b6:12:94:
                    5d:62:33:a6:a0:e0:06:ad:08:65:a7:c9:05:d7:c6:
                    83:6e:dc:f9:fa:c0:51:26:d3:3c:1c:1d:1f:7a:13:
                    00:32:24:1e:55:59:0b:7e:d9:e9:ba:c3:57:4f:2e:
                    44:dc:09:d2:03:29:5d:b4:83:06:95:dc:a9:28:f1:
                    b3:d8:b9:32:1b:1a:a6:98:22:bd:49:87:b0:b6:b5:
                    20:bc:f7:1a:7a:4b:5e:24:f5:37:37:34:9f:52:fc:
                    0e:35:89:f0:c6:a2:4b:02:b1:8b:89:52:7f:42:41:
                    c0:3f:a6:97:1a:84:a2:b8:cd:fc:ba:4b:67:30:f4:
                    ae:d3:20:4f:dc:6b:21:27:73:18:10:6b:86:56:c2:
                    25:d7:67:cf:d5:c8:38:d3:99:3e:a6:46:c7:20:9b:
                    a1:78:5f:ca:6c:53:73:0e:fc:48:72:e7:a6:10:de:
                    13:f3:dd:2a:ad:23:8d:bb:30:41:b7:29:ae:de:d1:
                    ac:bb:f7:75:31:22:7d:46:be:c3:ce:07:cd:a5:5d:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:6C:A9:12:2D:03:37:57:ED:CF:0A:5B:A4:96:B8:E8:EC:D0:D2
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/PwtsqRItAzdX7c8KW6SWuOjs0NI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:60:2b:37:83:ca:47:8e:12:f0:c5:5c:a3:10:b1:a5:9d:
         ab:90:bb:4f:be:4d:82:7b:6d:37:e9:59:f0:f1:60:d6:3e:cd:
         0a:08:43:b2:df:4e:4b:64:de:98:ef:fe:43:20:bd:b7:16:14:
         3f:77:43:d0:21:9e:c3:e3:7a:9b:43:d1:a1:3f:23:ee:e1:82:
         aa:d4:1d:0e:bb:33:b0:2c:5a:18:1e:ea:77:ff:34:e6:93:95:
         6b:7b:e0:28:12:f8:bb:dc:d4:83:74:b7:40:f6:d9:bb:8c:05:
         d4:80:bd:0e:ba:15:10:df:ce:6f:1d:4f:78:a3:dd:20:bd:f6:
         c0:9a:a5:cf:14:d7:3d:5f:87:87:a8:28:4b:2f:18:25:e3:35:
         2a:83:5d:a2:bc:9b:0c:f5:51:e7:9e:d0:2f:cd:ec:d6:3a:39:
         43:fe:f3:e7:b7:81:df:ac:ea:b8:83:30:c6:a0:e5:83:c6:e7:
         78:b5:f4:e1:f3:83:40:21:13:f2:4d:20:95:2b:da:ec:18:9d:
         35:bf:5f:6d:4a:59:4c:2a:95:12:b8:a7:34:38:45:ec:d2:c8:
         e8:f1:e1:2a:0d:80:68:4c:ba:ef:e7:79:c0:9b:48:d9:4f:04:
         c1:ea:45:81:58:3e:47:5d:00:47:31:c4:80:cd:d1:16:c1:8c:
         f8:67:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org