Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/m1PMl4AN3pMTFTylnourV_48cq0.roa
File:                     m1PMl4AN3pMTFTylnourV_48cq0.roa (raw, json)
Hash identifier:          ToMGIXNRn6xGIgxkKcl4sZliT8aR4/1RxWVLIZoBCYc=
Subject key identifier:   9B:53:CC:97:80:0D:DE:93:13:15:3C:A5:9E:8B:AB:57:FE:3C:72:AD
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       3B
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/m1PMl4AN3pMTFTylnourV_48cq0.roa
Signing time:             Thu 13 Apr 2023 09:53:46 +0000
ROA not before:           Thu 13 Apr 2023 09:53:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2500
IP address blocks:        202.249.0.0/17 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Apr 13 09:53:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9B53CC97800DDE9313153CA59E8BAB57FE3C72AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:be:d8:51:37:d0:3a:24:b0:5b:58:f3:6f:
                    30:06:32:ba:c0:e2:41:6e:14:7f:6d:c2:18:fd:75:
                    e8:41:66:a3:d8:c2:87:03:6f:9a:9f:aa:cf:db:81:
                    c8:04:db:81:23:fc:13:30:66:68:2e:b8:b6:7c:09:
                    3d:6c:97:f1:57:7e:11:7d:4e:de:01:60:be:0d:ac:
                    59:ff:53:1c:c9:38:fe:6e:1f:9c:51:11:4f:64:45:
                    26:6a:d2:8a:70:f7:31:bb:2a:b6:dc:92:16:87:53:
                    63:9d:84:07:f2:7d:de:8d:ad:2d:02:8b:28:4b:46:
                    72:a6:ae:1e:15:eb:8e:ca:b7:48:8e:7b:68:c1:87:
                    06:37:9d:2c:72:42:82:b1:d2:cb:22:33:30:4f:3d:
                    e2:1d:5e:8f:fa:13:74:4f:ba:4b:10:e3:fe:5d:7f:
                    0c:1e:9e:e4:32:8d:e5:28:70:dc:4e:9c:94:e2:b7:
                    c0:cf:6a:a2:8b:ed:8f:65:29:07:5f:df:0a:77:25:
                    fb:fc:a3:f8:39:a3:af:a0:11:cf:10:ea:0f:2f:95:
                    b1:e9:cf:6f:c1:a2:75:7c:5a:25:4b:c9:45:0f:e3:
                    05:dd:e3:3e:60:cf:38:d3:49:46:63:fc:96:23:5b:
                    81:ef:ec:59:ac:93:f6:ec:f9:55:81:9c:54:a8:44:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:CC:97:80:0D:DE:93:13:15:3C:A5:9E:8B:AB:57:FE:3C:72:AD
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/m1PMl4AN3pMTFTylnourV_48cq0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:f8:0c:3e:6b:c6:e7:31:81:26:03:0f:6c:86:a3:5c:56:
         d1:48:ce:18:76:bc:3f:ae:38:dd:e9:e4:3c:8c:12:1d:37:92:
         a4:cf:32:af:ca:c8:76:e3:9e:b0:90:c3:62:86:83:ad:94:24:
         0e:fe:18:3c:c9:5f:89:a4:f0:15:21:4b:ac:f8:17:62:c8:cd:
         69:ce:ee:6c:3d:d5:9d:4a:cd:87:bd:64:29:98:8b:31:50:b3:
         6e:73:d2:be:ae:82:e4:c2:8b:4e:ab:a1:02:71:80:dd:cd:f4:
         0a:d2:c6:15:d6:76:3a:f1:8c:b2:ec:03:b5:31:ee:fa:fc:80:
         79:96:fc:55:b2:ed:25:48:18:7d:7b:15:b1:57:04:ab:d5:4d:
         66:fc:60:03:42:9c:5c:32:1a:e2:ff:dd:2e:db:fe:8e:4e:53:
         5b:d4:16:94:68:75:b2:01:fd:8a:c5:d4:7d:6c:12:ab:45:52:
         5c:9a:2d:cf:29:75:45:a3:53:9d:da:20:13:2c:df:56:12:a3:
         fd:7f:49:cf:e4:47:a2:ad:a6:fb:a0:62:28:6b:19:f6:f4:b2:
         dd:27:a9:7c:c0:86:b0:f7:31:f8:a9:6d:d8:b7:c0:46:08:4a:
         2d:dd:cb:92:8b:28:04:55:86:0c:04:82:06:b0:d8:c1:5d:30:
         fe:ed:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org