Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/XYcdgCTn0grHXE_KSLiHlajZJ1E.roa
File:                     XYcdgCTn0grHXE_KSLiHlajZJ1E.roa (raw, json)
Hash identifier:          cVqJ6MPu083JXBeiYcoXDbLDOfZXYEf/t6ScjEITBvo=
Subject key identifier:   5D:87:1D:80:24:E7:D2:0A:C7:5C:4F:CA:48:B8:87:95:A8:D9:27:51
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       22
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/XYcdgCTn0grHXE_KSLiHlajZJ1E.roa
Signing time:             Sat 01 Oct 2022 01:29:37 +0000
ROA not before:           Sat 01 Oct 2022 01:29:37 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     63790
IP address blocks:        103.167.206.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Oct  1 01:29:37 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=5D871D8024E7D20AC75C4FCA48B88795A8D92751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:c3:7b:c4:23:36:4b:ec:49:c8:9f:72:c0:
                    e4:50:d7:60:21:00:5e:21:9e:85:2e:ec:92:2a:7f:
                    21:32:15:90:aa:d2:fa:61:d3:be:93:8e:82:78:55:
                    de:38:68:b9:f2:0f:df:c8:49:6f:37:c4:2f:5f:40:
                    8e:f7:bc:43:73:fd:42:db:00:1f:0b:96:1b:9f:d1:
                    e3:66:15:e5:a4:24:16:e0:94:34:48:94:0b:44:16:
                    d2:1c:fd:47:72:08:6d:1f:9f:e1:f4:ca:62:03:d2:
                    c6:ca:42:fc:c3:46:c2:6e:db:bf:25:40:70:42:66:
                    23:89:5c:c9:e4:64:d7:6d:52:ab:3f:45:79:f6:25:
                    8a:cf:f4:89:e0:d6:87:b8:40:06:93:c1:8d:62:1c:
                    2c:67:3d:b3:93:14:b8:5e:17:ad:aa:dc:f6:f9:3e:
                    66:95:57:00:5f:e8:8a:34:12:4d:f1:11:69:2f:91:
                    23:db:f5:b2:0d:78:51:19:3d:30:91:e6:ad:da:ff:
                    c4:dc:33:0f:9a:fe:48:2b:fa:4d:32:fa:0f:b1:f5:
                    91:e6:00:98:c7:a1:40:18:27:b7:b3:25:34:06:41:
                    79:9d:06:15:fe:46:5e:5d:f4:c7:01:c6:68:9f:1f:
                    dc:6a:ff:b8:d6:47:84:1c:f8:a1:86:27:ba:db:f1:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:87:1D:80:24:E7:D2:0A:C7:5C:4F:CA:48:B8:87:95:A8:D9:27:51
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/XYcdgCTn0grHXE_KSLiHlajZJ1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:f9:56:a6:ae:94:2b:92:34:7d:e0:bd:2f:fe:f1:ce:ee:
         68:df:10:89:82:59:3c:ee:bc:07:0f:25:bc:82:60:84:71:df:
         97:c7:9d:44:ed:2f:3f:77:43:b7:17:a4:50:71:cd:19:7a:16:
         11:57:00:41:1d:89:8d:80:b9:87:3e:61:0b:da:68:3c:af:c1:
         b0:d9:5b:d0:93:45:1e:bc:eb:b7:39:a3:f1:c9:ea:dd:94:f2:
         c7:54:e7:8c:3e:fc:d0:e6:cd:67:7a:36:4c:cf:dc:62:01:27:
         3a:9c:3d:f5:c0:75:78:c7:4b:bd:64:5a:25:a2:1a:21:8e:af:
         c0:58:98:8d:53:7b:55:41:ef:b6:68:02:ad:56:8e:6a:79:5a:
         78:0d:e1:14:3e:d6:55:fe:be:7f:ac:51:86:52:67:f0:87:d9:
         16:71:62:aa:dd:76:85:20:9d:de:95:7b:28:99:4f:b5:ce:b0:
         09:c2:c9:ec:55:6f:40:b1:2f:b3:0b:52:84:73:62:a2:77:98:
         b9:52:73:28:73:13:1a:b1:5d:b5:78:8c:b2:65:f9:78:9a:fa:
         d2:b9:ae:42:06:b5:f9:b4:c6:c7:89:28:b7:fa:84:2c:c7:e9:
         49:8b:06:62:5f:df:74:03:ec:4a:a3:6b:c5:2c:3c:d1:56:e2:
         2c:6f:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org