Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/sQ1P3bAne820xm_bRQhBOSBXyoY.roa
File:                     sQ1P3bAne820xm_bRQhBOSBXyoY.roa (raw, json)
Hash identifier:          1n7pH6xPv3WWDCBqiTZc/r4iY0Tm+MV4C/COGrug5D4=
Subject key identifier:   B1:0D:4F:DD:B0:27:7B:CD:B4:C6:6F:DB:45:08:41:39:20:57:CA:86
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       2A
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/sQ1P3bAne820xm_bRQhBOSBXyoY.roa
Signing time:             Mon 01 May 2023 01:29:26 +0000
ROA not before:           Mon 01 May 2023 01:29:26 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     23778
IP address blocks:        116.50.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: May  1 01:29:26 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B10D4FDDB0277BCDB4C66FDB450841392057CA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:9e:85:34:16:9b:d3:a8:6c:93:0a:7f:ca:
                    ef:1f:64:14:24:a0:01:3b:ab:d1:8a:aa:ca:54:70:
                    4f:c4:77:32:57:ed:7b:7c:3a:41:4a:f8:df:45:1e:
                    13:fe:80:72:63:7e:26:7a:6d:ea:d5:2a:fb:9d:2f:
                    9b:96:84:b4:a2:7a:17:19:18:2e:58:7d:77:17:6b:
                    b6:19:a8:fa:47:44:6e:95:c9:11:80:01:8b:8b:86:
                    09:c5:41:c6:ad:a2:85:9c:3d:0a:b2:c2:32:9b:9a:
                    39:ab:15:e4:e3:03:6e:ad:a5:25:77:9f:cf:4d:75:
                    7e:4a:b1:c5:8e:3f:2f:ad:6f:60:35:db:59:89:6f:
                    37:4e:00:bf:c0:0d:76:ff:65:fd:76:2b:a5:dd:36:
                    a9:23:25:e2:37:44:14:7d:93:52:2c:db:6c:95:1e:
                    e3:d4:6b:bd:69:5d:95:93:30:6e:c4:49:fc:06:95:
                    2c:bf:08:2b:cf:6e:81:5a:47:87:e0:98:66:e5:37:
                    e7:c0:ae:37:a2:07:e1:53:fc:85:46:e2:16:2f:39:
                    b1:59:56:46:98:db:70:e8:b0:32:68:c4:23:ae:c6:
                    0f:05:d8:c1:4c:4f:37:ec:69:28:51:07:96:e0:60:
                    a1:f1:45:7b:34:e4:1e:63:7a:4f:fe:87:f2:4f:d1:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0D:4F:DD:B0:27:7B:CD:B4:C6:6F:DB:45:08:41:39:20:57:CA:86
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/sQ1P3bAne820xm_bRQhBOSBXyoY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:a4:ef:53:67:2e:07:04:b4:ea:c0:55:11:be:e1:4b:a4:
         88:1c:03:26:b2:bb:0b:d1:79:52:30:24:28:7f:f4:dc:d5:6a:
         1b:32:dd:0a:00:df:e2:41:20:3b:cd:00:38:04:db:15:45:f9:
         1a:80:d9:b0:85:5b:f7:02:3d:3f:4b:3c:e3:e8:ba:43:89:0b:
         aa:d7:24:ed:cd:2b:72:cf:aa:b6:18:00:75:1f:ab:d3:ce:e6:
         6d:78:9e:43:7d:c9:68:e3:60:10:e2:7d:1b:27:0e:68:83:2f:
         df:51:ca:3f:0a:65:b8:ba:15:d3:c8:01:aa:c0:44:69:ad:0a:
         6a:b3:91:41:da:36:35:1d:99:13:f7:5b:58:72:6f:49:e7:fb:
         eb:4c:1f:0b:e0:5a:ca:c4:4e:2f:0c:68:f4:eb:24:24:66:ae:
         3c:0c:2b:e9:d4:ec:8a:51:ab:8b:90:fe:e9:13:0d:05:79:d1:
         c2:20:1f:be:95:71:cd:2a:45:9a:77:cc:04:4b:69:e1:d0:6a:
         2d:e5:0d:11:a5:0b:86:cb:c5:7f:40:6c:73:fc:f1:77:63:da:
         66:b9:a2:2b:0a:12:1d:5c:1d:aa:3b:a8:58:c6:78:5f:7f:92:
         db:de:10:07:3b:39:39:5c:8a:4a:10:f3:0c:f4:e6:8a:9b:57:
         59:a1:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org