Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/7i2dZsci0DAnqXPmqskF9wiD3bo.roa
File:                     7i2dZsci0DAnqXPmqskF9wiD3bo.roa (raw, json)
Hash identifier:          rwMeXmccxgovLzxZuSuDl772iKzbsDo9x7sJatNBPAI=
Subject key identifier:   EE:2D:9D:66:C7:22:D0:30:27:A9:73:E6:AA:C9:05:F7:08:83:DD:BA
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       4D
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/7i2dZsci0DAnqXPmqskF9wiD3bo.roa
Signing time:             Thu 13 Apr 2023 09:53:34 +0000
ROA not before:           Thu 13 Apr 2023 09:53:34 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     45680
IP address blocks:        103.235.40.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Apr 13 09:53:34 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EE2D9D66C722D03027A973E6AAC905F70883DDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:02:cd:bc:31:d7:a6:25:87:3c:0b:d3:2c:
                    48:0a:f4:fd:f8:36:e2:2b:db:f5:f0:9c:d5:cb:f6:
                    60:3a:93:cd:f2:99:61:f9:7e:da:f6:c5:5d:47:80:
                    d5:ab:2e:db:c7:54:8f:7c:5d:59:27:04:83:95:b0:
                    52:6c:a8:43:e2:77:10:86:80:3e:14:63:93:4e:ce:
                    6e:f8:be:bc:70:04:a6:55:d3:c4:16:d3:4b:a2:46:
                    a9:8a:e1:38:c0:dd:e3:aa:b7:c6:8e:5e:de:c7:c1:
                    6d:02:df:9c:3c:58:46:3a:01:8e:5f:44:41:f3:6f:
                    51:a7:fd:ba:3e:a0:0f:38:f4:89:44:0f:24:61:91:
                    c9:4f:2d:f3:3f:e4:51:3f:26:47:3f:7e:59:02:c7:
                    a8:3d:57:f2:79:b2:6e:bc:02:47:2d:ee:ab:01:e5:
                    08:b4:df:92:53:17:61:64:02:f3:6d:32:81:c2:0c:
                    a4:dd:56:8b:0e:4f:61:27:c1:3c:26:19:dc:0d:a7:
                    e7:0d:73:3a:8d:8e:3b:95:83:26:6d:7e:c4:7a:87:
                    b5:2c:f0:c5:d6:63:8b:ad:97:98:ef:db:57:f9:8f:
                    eb:29:18:5a:4f:2f:c0:55:66:40:63:38:63:e5:40:
                    b8:e7:c9:8b:a8:2b:12:17:85:8e:d6:ba:b9:5a:a5:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:9D:66:C7:22:D0:30:27:A9:73:E6:AA:C9:05:F7:08:83:DD:BA
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/7i2dZsci0DAnqXPmqskF9wiD3bo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:ce:12:c8:09:4b:f6:66:4d:e3:c0:06:69:4e:fd:ba:4d:
         6c:ec:42:e7:a6:f5:9f:20:b9:4e:52:ed:c5:c0:f4:17:43:42:
         8d:f9:3c:46:b2:6c:c8:14:c5:f5:ec:f8:13:da:80:1f:6b:4d:
         0a:36:f5:30:2d:52:97:9b:1a:96:3f:d7:ce:b4:dd:f4:5e:31:
         79:cf:b3:95:78:a5:6f:82:b8:81:b8:42:b5:17:30:4f:6a:28:
         7d:b8:4a:05:30:78:5c:5e:63:b1:e5:f9:ec:ce:a7:a9:63:3f:
         1b:50:d5:9b:0e:df:db:ca:67:04:52:c4:09:5d:57:4a:da:e5:
         78:3b:71:80:74:24:4b:b7:90:db:0e:5b:4d:ec:ff:30:5f:fc:
         db:59:ad:23:8b:70:32:c3:2f:60:98:b3:50:2f:8c:ba:5e:32:
         82:d6:11:96:e1:61:72:3b:63:96:35:ef:b9:a8:47:1a:12:ab:
         49:3c:00:45:14:5d:65:00:7e:55:1b:4c:57:3d:3d:6d:71:b5:
         44:ec:fc:e1:8b:10:b6:d9:7a:80:c9:50:ef:9f:08:71:8e:c1:
         32:3f:b1:10:86:9d:a1:11:ba:6d:fa:f7:46:cf:0a:96:23:fa:
         21:32:e1:12:81:1a:39:29:d3:f4:e5:ac:a3:d6:4a:52:2d:6c:
         33:10:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org