Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/JnpTY9wAKrkRrWzWE9aabH3MKRs.roa
File:                     JnpTY9wAKrkRrWzWE9aabH3MKRs.roa (raw, json)
Hash identifier:          2N6U5L3mcs2GGfZDQ/TJYbemZBK8FTHNQTcqUQhuOPQ=
Subject key identifier:   26:7A:53:63:DC:00:2A:B9:11:AD:6C:D6:13:D6:9A:6C:7D:CC:29:1B
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       64
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/JnpTY9wAKrkRrWzWE9aabH3MKRs.roa
Signing time:             Sun 01 May 2022 01:30:55 +0000
ROA not before:           Sun 01 May 2022 01:30:55 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        203.104.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:55 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=267A5363DC002AB911AD6CD613D69A6C7DCC291B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:03:ce:10:23:6f:06:ea:e1:ba:10:1e:4c:
                    e4:56:db:a9:f2:a5:8c:e5:d8:14:5a:20:56:33:7f:
                    1b:cf:ab:eb:ea:74:74:49:fc:30:7b:36:83:53:cf:
                    78:ac:80:09:ef:e0:7e:1e:87:29:fd:b6:27:6c:cb:
                    27:8f:c8:e9:01:5a:c1:86:12:d0:4f:2e:5e:46:2a:
                    d8:4a:19:db:a4:a2:a4:63:d1:29:a0:54:51:1a:19:
                    1f:c4:9c:3b:d1:19:8e:8a:9f:17:6a:97:cc:62:2f:
                    1f:d7:14:15:90:0d:97:11:92:57:a1:49:85:fc:a2:
                    31:e8:84:bb:d5:7e:b5:c2:3a:ac:fb:4a:96:b4:cc:
                    be:76:c6:c3:49:62:ad:4a:d1:24:8b:0f:56:63:71:
                    13:ca:4d:6a:c3:d8:91:5e:c5:e4:f4:ce:de:92:ee:
                    4f:a7:32:b8:42:0b:99:f6:60:f6:c1:41:1b:29:6a:
                    4d:25:ed:00:9b:9a:03:b0:03:e6:92:ef:0d:0b:06:
                    d5:c1:87:21:a9:15:09:44:17:36:67:c1:32:62:67:
                    8c:f6:ad:3a:40:8a:d1:7f:8e:fd:6b:7b:47:9e:9a:
                    62:51:ca:4c:b3:be:0d:c3:68:69:21:a1:00:0e:22:
                    e4:4c:49:7b:ec:2a:dc:ac:64:19:c2:33:62:66:aa:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:53:63:DC:00:2A:B9:11:AD:6C:D6:13:D6:9A:6C:7D:CC:29:1B
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/JnpTY9wAKrkRrWzWE9aabH3MKRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:48:79:3f:48:69:43:fc:f2:0f:0f:d3:5d:d7:4b:40:8b:
         74:1e:97:dd:9e:c9:7c:66:20:a1:80:06:39:81:c4:92:18:60:
         b2:e9:94:59:2c:20:59:ee:4d:64:97:cc:d1:dd:c1:7c:19:14:
         97:06:9b:cf:6f:d6:fc:e2:7d:30:52:3a:f8:65:d7:b0:96:b9:
         64:6a:15:4e:eb:ce:9c:21:e0:f2:15:f9:76:65:93:34:d8:76:
         84:d8:02:99:cd:b0:b2:2e:1e:21:9c:c9:0a:9e:3b:96:5b:d5:
         4c:80:7d:0e:21:f5:8d:ca:d5:ed:29:7e:bc:fd:9f:ff:31:ec:
         8f:0a:18:36:8e:cf:1b:99:ab:bb:c3:9a:82:7d:b9:51:63:0d:
         75:9c:4b:5a:bd:6a:1b:62:9e:b8:5a:eb:14:50:cd:8e:3a:ae:
         2b:c8:6c:70:db:de:a1:57:9e:1b:1b:52:8d:cc:42:9e:86:f8:
         9d:2e:3c:70:65:5d:b7:b6:ad:8c:e6:d3:c6:90:e9:ab:8e:e7:
         72:f1:88:df:18:3c:bf:63:e7:19:4b:8a:5b:f2:50:c8:a5:79:
         a5:61:58:3c:89:ac:11:e9:62:35:56:da:bc:cf:ec:d4:3c:b2:
         cc:52:3c:b1:28:9e:2c:4d:00:d1:4b:0f:13:93:20:d7:44:0e:
         65:75:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org