Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/_j9fMddE95RIcU4T3LxQlQSCvl4.roa
File:                     _j9fMddE95RIcU4T3LxQlQSCvl4.roa (raw, json)
Hash identifier:          whTxle1Pp7I16xIyOP274bBJU+j3j9/xkBIW/iX3gGI=
Subject key identifier:   FE:3F:5F:31:D7:44:F7:94:48:71:4E:13:DC:BC:50:95:04:82:BE:5E
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       40
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/_j9fMddE95RIcU4T3LxQlQSCvl4.roa
Signing time:             Tue 25 May 2021 02:46:58 +0000
ROA not before:           Tue 25 May 2021 02:46:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        203.104.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:46:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=FE3F5F31D744F79448714E13DCBC50950482BE5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:75:bc:65:a2:53:98:7b:cf:d9:bb:41:09:
                    e7:90:76:ec:78:3a:4f:2b:98:9c:67:ea:28:18:68:
                    28:c0:2a:73:d9:c3:ed:84:a7:9d:44:17:a1:d2:fd:
                    a5:79:2b:4a:93:8d:8c:4d:cb:37:62:01:d9:97:af:
                    23:71:d3:63:f3:ef:50:7c:c9:a0:c1:7f:17:af:c5:
                    2c:56:df:10:04:d5:7c:8b:f4:e5:26:c0:0d:c5:7e:
                    0f:57:95:5a:05:d9:d0:c7:32:1e:a8:4d:c8:9f:e8:
                    b2:50:5e:f4:29:c7:97:f3:ef:a9:e5:21:b4:d0:2c:
                    e1:e1:31:cc:75:2d:c3:4e:12:ec:b1:c2:cd:1d:fd:
                    f5:84:be:cf:ec:c4:fd:54:af:db:a7:7e:92:90:62:
                    2a:fd:7d:41:ec:c8:50:e0:54:83:f9:bb:1c:86:5a:
                    c3:45:86:23:b9:d8:1e:95:bc:8c:0f:7d:8d:2c:d9:
                    a5:f8:e3:08:d1:71:26:f4:c2:92:36:d1:e2:d1:03:
                    da:48:29:4b:c3:6b:6b:3d:fb:48:7e:41:84:56:a0:
                    32:b3:d6:7e:01:a8:65:cd:f8:e5:2a:78:b6:c0:b5:
                    4e:4f:95:b9:13:25:bf:4d:14:26:91:f4:b6:02:a5:
                    17:0d:30:ca:ae:f9:fe:16:37:46:e0:90:c3:bd:d0:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:5F:31:D7:44:F7:94:48:71:4E:13:DC:BC:50:95:04:82:BE:5E
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/_j9fMddE95RIcU4T3LxQlQSCvl4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:59:34:e9:d2:6b:dc:ff:32:72:1a:a0:3b:76:bd:2f:13:fe:
         48:c9:bc:64:5f:12:05:a0:86:0a:c4:b0:83:4a:00:af:6e:86:
         51:b6:bb:4b:cf:b8:8e:c4:f8:de:9e:9f:e7:8c:01:6d:72:ec:
         ce:33:78:60:c6:ae:4e:41:30:6c:26:d3:e2:e7:a2:90:8e:b4:
         d6:45:15:b9:18:db:0a:9f:97:34:d7:ed:28:6d:cf:24:24:24:
         4a:86:c5:16:2c:d4:91:e6:92:65:84:b2:3c:23:cf:55:33:e4:
         e2:a0:0e:6e:b8:07:1a:80:e2:bb:6f:cb:44:de:e9:7a:5e:65:
         79:97:0e:22:36:45:df:6c:e8:45:42:47:b4:1b:37:33:13:30:
         3b:61:1a:0a:26:eb:ce:2f:fe:78:e4:26:19:bb:e9:26:3e:6b:
         c1:33:97:1f:c4:92:ce:c9:7f:a0:fc:dc:89:7b:54:1d:cc:11:
         cc:40:0a:78:52:02:eb:74:a2:17:04:77:b6:9d:11:e3:27:53:
         06:88:e1:82:4a:25:3b:be:5d:cd:0f:20:6b:4c:30:e5:48:fe:
         c4:d0:4e:07:2b:fc:5f:a9:d6:0a:31:00:aa:17:06:69:a2:21:
         be:e0:67:d7:d6:38:f1:ee:23:5a:03:ec:54:de:93:fb:5a:35:
         54:a0:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org