Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/a4u-jb3qDtusVzJVWCI4lT5qru4.roa
File:                     a4u-jb3qDtusVzJVWCI4lT5qru4.roa (raw, json)
Hash identifier:          rHfUxJ2dT46JwgqMOq0mnTEVlDZEmct+FoKFZvMuUuY=
Subject key identifier:   6B:8B:BE:8D:BD:EA:0E:DB:AC:57:32:55:58:22:38:95:3E:6A:AE:EE
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       49
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/a4u-jb3qDtusVzJVWCI4lT5qru4.roa
Signing time:             Tue 25 May 2021 02:47:01 +0000
ROA not before:           Tue 25 May 2021 02:47:01 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        203.104.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:47:01 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6B8BBE8DBDEA0EDBAC573255582238953E6AAEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:88:ce:6c:94:53:27:1b:3e:63:44:92:81:
                    61:0b:a4:8e:19:bc:54:a8:22:1a:88:94:98:de:d9:
                    03:8d:44:83:27:34:ae:66:b0:45:67:86:fe:3f:81:
                    5a:1a:d6:d9:c2:e1:9d:16:c2:c1:a7:8f:dc:5e:33:
                    4e:1f:04:f3:a2:d7:03:69:f7:d3:82:28:e7:21:e7:
                    d4:1b:6d:2a:c6:40:df:56:29:7a:a3:8f:80:04:d6:
                    f0:87:5d:fd:a6:d7:b8:7f:1b:98:91:bc:ba:be:9e:
                    bf:cc:78:9f:c8:cd:ad:68:ff:08:d0:17:0c:8a:fc:
                    58:03:1b:cf:69:71:c4:51:dd:3e:dd:51:43:3c:c5:
                    54:2f:35:ea:12:a5:5f:56:16:b8:cc:4c:38:66:df:
                    c4:df:49:d9:da:80:3c:02:82:87:5a:eb:f8:03:de:
                    79:ce:36:1d:76:79:96:37:38:6a:63:c5:68:7d:86:
                    b6:74:1a:62:c3:ac:9a:97:19:60:48:59:b0:6d:0e:
                    2a:d7:6f:0d:2e:e4:0c:fa:69:1a:8d:4e:c7:23:04:
                    cc:2f:45:68:6c:ab:c0:1a:a2:ff:c1:8b:82:87:5b:
                    ec:54:87:91:f9:3e:49:1d:2b:36:85:0a:96:04:e2:
                    23:78:6e:33:bb:ef:07:3e:b6:bc:1b:13:9d:f7:b6:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8B:BE:8D:BD:EA:0E:DB:AC:57:32:55:58:22:38:95:3E:6A:AE:EE
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/a4u-jb3qDtusVzJVWCI4lT5qru4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:ba:a7:dc:a4:a8:f8:08:be:ff:aa:61:c3:39:ff:c0:98:
         9d:11:38:f2:5a:96:af:94:52:d2:39:2b:bc:18:32:ff:b8:d3:
         68:da:ca:20:80:e3:ce:1d:3f:9a:01:ac:51:9d:39:6d:61:ab:
         91:0f:26:36:02:df:09:cb:0d:db:b5:ff:ac:2f:d2:5a:0e:06:
         bc:28:c0:19:30:35:d0:03:c3:1b:9e:7d:9a:c3:66:1f:58:e0:
         1a:32:6c:60:4a:21:de:c2:b1:0f:1b:e2:23:6c:c2:9b:85:8e:
         1c:5a:35:c7:c9:18:3c:d0:75:d5:fe:4e:31:69:82:a2:f1:64:
         ed:82:a4:ac:a6:34:32:b7:48:b0:2e:d1:d4:9b:da:ae:3e:3b:
         c0:1a:92:b3:31:0e:90:a6:b9:bb:de:9d:12:57:c7:3c:8b:9e:
         31:46:fa:81:21:45:5f:4c:b7:e7:cd:11:5c:b8:63:1b:8c:45:
         7d:c5:ee:10:4b:c9:df:1b:44:9e:04:55:d5:17:f8:9d:e0:84:
         5a:d8:13:ea:3d:02:5f:14:3c:39:ff:71:db:5a:a0:36:93:d6:
         d9:55:2a:58:58:b9:9f:8c:b9:55:7f:4d:a2:a3:4b:6c:28:f3:
         63:78:4a:b3:e7:20:24:cc:c5:8a:14:63:ae:86:6b:cf:05:9a:
         fc:f0:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org