Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/jc2-J_tTD_B0ZMUIfEZU-Pgx4WQ.roa
File:                     jc2-J_tTD_B0ZMUIfEZU-Pgx4WQ.roa (raw, json)
Hash identifier:          faWnE/hUHEhhhrzZzKemYsmQfHdH15cV2p5SDLRtomQ=
Subject key identifier:   8D:CD:BE:27:FB:53:0F:F0:74:64:C5:08:7C:46:54:F8:F8:31:E1:64
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       06
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/jc2-J_tTD_B0ZMUIfEZU-Pgx4WQ.roa
Signing time:             Thu 27 Apr 2023 08:55:23 +0000
ROA not before:           Thu 27 Apr 2023 08:55:23 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Apr 27 08:55:23 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=8DCDBE27FB530FF07464C5087C4654F8F831E164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:7b:de:83:0b:79:f7:7d:c0:ea:e6:80:68:
                    a0:f2:00:d6:45:55:9e:87:c7:c8:e1:92:04:34:fe:
                    2e:3c:98:62:62:bc:cd:e2:2c:1f:50:53:7c:8b:2b:
                    6d:0a:2f:bb:61:cb:70:fa:8e:2f:c5:30:5f:50:71:
                    2e:3d:ca:b2:b7:be:2b:68:2c:13:77:42:0f:ad:82:
                    c8:a2:02:8c:6c:2a:ca:42:40:f4:f8:8b:66:7a:85:
                    2f:3e:66:bf:01:e5:ef:9a:cd:a1:25:df:80:be:9e:
                    53:58:b6:31:84:8c:ce:fc:c4:e6:be:36:d7:6a:1c:
                    a6:bc:31:d4:b0:12:ca:c5:30:2b:63:5f:8f:42:9c:
                    e1:36:55:de:bd:36:2f:c3:3c:75:a3:4a:b3:cc:36:
                    f7:7b:83:c5:d6:52:a8:1c:e8:cc:80:81:e9:85:a0:
                    27:c2:23:e4:e3:4b:61:9e:ec:96:14:1d:3b:63:5c:
                    78:c5:48:7a:44:95:a6:a8:cf:48:28:2e:e5:a3:ad:
                    70:fc:01:83:83:af:e9:5e:91:87:3d:6c:55:b6:6c:
                    c8:c0:65:d2:85:aa:4d:8a:9a:75:c2:1f:1e:6d:27:
                    e5:2b:4e:c2:fb:41:e3:6b:75:86:5c:f2:5a:20:c1:
                    1d:04:7d:3b:df:c0:18:f3:59:3c:c6:58:92:72:cb:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CD:BE:27:FB:53:0F:F0:74:64:C5:08:7C:46:54:F8:F8:31:E1:64
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/jc2-J_tTD_B0ZMUIfEZU-Pgx4WQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:51:18:f5:45:9a:f2:b0:f0:df:b4:a1:76:31:8e:eb:7c:
         89:cc:f4:56:b4:e2:05:34:c0:7e:b6:fa:06:a7:29:f8:4e:ef:
         7b:b5:08:c8:12:17:ae:e9:b3:bb:37:35:b5:bf:94:f0:84:07:
         4f:5b:0c:55:45:03:b5:8a:e3:1e:94:4f:c4:d2:24:0a:10:36:
         d8:81:f7:6c:0e:71:48:e2:61:86:82:6d:b1:37:19:c0:8f:4c:
         a7:e4:55:af:72:aa:db:b3:14:fa:45:62:6c:8d:a7:f0:21:f4:
         96:34:b5:70:45:53:40:fa:c8:ed:61:51:cd:b5:1e:17:02:6a:
         18:47:ae:4e:26:55:0d:73:8a:c3:b4:ba:35:cc:00:f2:af:60:
         f8:0f:7f:ab:76:4d:91:c4:87:7d:eb:0a:6f:ff:d1:aa:60:0c:
         e9:77:82:00:19:f7:bc:92:93:e9:b2:bb:0e:13:66:b9:5c:89:
         3f:b4:2b:15:b4:05:35:fe:e3:29:6f:8e:bb:49:45:c2:38:18:
         f5:a7:b0:f9:1c:b8:bb:d9:38:53:cf:32:0f:5b:69:c2:99:38:
         24:f5:9e:88:b6:cf:7c:62:d4:7e:b0:92:bf:d3:2c:ee:87:ba:
         20:da:78:b9:b9:3d:3e:3b:7f:f8:1c:c0:94:c7:6e:c5:3d:1f:
         fd:58:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org