Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/lO2KispPa62qgrECNxnN9A6EXcg.roa
File:                     lO2KispPa62qgrECNxnN9A6EXcg.roa (raw, json)
Hash identifier:          rfmxu4A8ooRu7W8g6smPH21XPWfhZZa9C6gaUmkPMf0=
Subject key identifier:   94:ED:8A:8A:CA:4F:6B:AD:AA:82:B1:02:37:19:CD:F4:0E:84:5D:C8
Certificate issuer:       /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial:       02
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/lO2KispPa62qgrECNxnN9A6EXcg.roa
Signing time:             Thu 21 Jul 2022 02:24:00 +0000
ROA not before:           Thu 21 Jul 2022 02:24:00 +0000
ROA not after:            Fri 21 Jul 2023 02:05:48 +0000
asID:                     23808
IP address blocks:        103.40.128.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
        Validity
            Not Before: Jul 21 02:24:00 2022 GMT
            Not After : Jul 21 02:05:48 2023 GMT
        Subject: CN=94ED8A8ACA4F6BADAA82B1023719CDF40E845DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:f2:34:2b:27:ce:c2:84:4a:f0:11:d0:b1:
                    61:82:9f:24:cb:fe:3d:f7:15:15:1a:a2:ed:30:30:
                    f2:c9:03:94:4f:70:f7:51:62:02:ce:65:c5:b1:55:
                    13:79:4a:2a:24:a0:93:10:d8:42:33:cd:bc:c4:7a:
                    6f:b5:3c:95:0f:db:c0:f1:7e:4e:97:4b:64:59:42:
                    ec:59:ca:51:ec:d2:1a:f5:9f:f1:9c:a6:92:34:cb:
                    3b:a3:71:98:67:d6:ce:be:e0:7e:37:44:c7:a7:14:
                    e8:6f:c3:d1:9c:79:d0:20:b2:a4:3a:93:f3:cc:b1:
                    3b:86:f4:31:5a:8a:34:20:a1:5a:20:a7:4d:4a:ba:
                    4d:ac:c8:54:c6:61:4f:01:a0:cf:73:58:5b:a0:51:
                    43:e7:7a:bf:08:62:53:83:2e:e5:3b:55:c0:61:dc:
                    46:d9:29:a1:63:04:81:27:8b:8f:ed:97:40:3b:ca:
                    66:7b:ac:9a:6b:b9:74:ab:e9:ca:fc:e7:f5:05:59:
                    97:da:06:1c:25:6b:b2:a9:8a:bf:a0:6a:f4:35:ef:
                    da:a7:e3:c3:dd:ce:b2:73:29:b1:12:69:c4:5a:23:
                    fd:1a:98:b2:a8:3c:91:b3:b6:b8:58:a9:6f:69:d6:
                    91:d0:39:b2:67:96:d4:34:d9:d6:61:f8:18:8a:06:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:8A:8A:CA:4F:6B:AD:AA:82:B1:02:37:19:CD:F4:0E:84:5D:C8
            X509v3 Authority Key Identifier:
                keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/lO2KispPa62qgrECNxnN9A6EXcg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:15:6e:1a:84:44:94:d0:cb:d5:3d:6e:8c:09:be:63:22:
         0a:d9:c5:78:7c:69:8a:3c:93:79:39:16:29:ce:21:54:f2:c4:
         1e:79:58:80:c6:db:42:1c:bd:ca:b7:79:3b:8f:57:8f:27:08:
         5f:97:5c:12:3c:ca:fe:01:27:ac:c5:5e:f4:b8:fe:d3:20:e7:
         7d:33:34:47:0a:91:da:f5:e8:54:8c:f1:b1:0b:dc:76:eb:12:
         88:ae:5a:bf:e7:32:45:e1:43:b3:fb:af:f3:2c:28:d2:b2:c3:
         2d:13:a7:0e:ff:37:ba:e5:d2:e6:9a:60:6d:8d:b5:ac:10:49:
         d6:ca:0d:cd:d1:ce:b5:c2:45:f4:c5:42:ad:90:1b:ed:b6:20:
         a9:98:4f:b6:84:d9:54:3e:51:77:11:3e:c6:6e:c4:b8:27:43:
         31:ea:92:b3:81:8e:74:33:72:f8:dc:f7:84:59:05:8e:5e:1b:
         96:90:78:b8:89:5f:8e:e5:c4:5d:af:dd:e3:18:2f:45:04:b8:
         3f:28:9f:06:d8:68:23:21:ea:ef:cd:a7:a9:19:3a:d6:50:0f:
         3e:b3:2c:43:43:7a:d4:ee:87:86:08:c3:f7:04:4d:24:1a:cf:
         a8:b8:ff:a9:f7:6d:2d:f9:8b:ec:ec:f0:a3:b7:f9:b2:06:69:
         91:ef:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org