Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/PBEYSQ8UjvIsWLTKFagl8bt3UBk.roa
File:                     PBEYSQ8UjvIsWLTKFagl8bt3UBk.roa (raw, json)
Hash identifier:          6PBJvSJk+1XXKGVtNMeoTIfobmthBl1pKab9y+RKY0w=
Subject key identifier:   3C:11:18:49:0F:14:8E:F2:2C:58:B4:CA:15:A8:25:F1:BB:77:50:19
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       50
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/PBEYSQ8UjvIsWLTKFagl8bt3UBk.roa
Signing time:             Thu 13 Apr 2023 09:53:35 +0000
ROA not before:           Thu 13 Apr 2023 09:53:35 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     45680
IP address blocks:        101.78.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Apr 13 09:53:35 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3C1118490F148EF22C58B4CA15A825F1BB775019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:9e:4d:b5:c7:37:eb:f3:69:79:6b:87:19:
                    9a:70:1c:13:72:8b:2e:24:20:a7:4d:48:9e:be:e3:
                    5a:59:5f:bf:d4:1b:05:85:52:cf:c8:12:b2:66:fd:
                    e3:d6:0e:6e:91:bd:99:5f:4b:39:84:95:d3:55:aa:
                    bf:ea:2d:e7:c2:60:28:9d:9f:0c:58:8d:6a:63:a4:
                    5e:ba:a2:48:35:a7:ad:84:6c:48:9e:cf:64:9e:95:
                    e0:eb:a5:a1:8f:6a:2e:dc:b8:3d:df:cd:f5:81:33:
                    68:16:af:8e:1d:5b:8f:1e:c0:29:6a:a2:ca:d4:3b:
                    dc:c4:16:a2:10:c3:0b:38:3d:4c:6f:f6:25:de:14:
                    63:b8:57:08:08:86:3f:c0:00:e3:60:2b:be:cb:9c:
                    15:69:3d:13:9d:74:14:bc:a9:53:07:da:d1:ac:af:
                    9e:f5:a8:1d:4c:5a:eb:a9:40:27:4b:b6:f5:2b:2d:
                    b2:84:17:40:7d:91:62:2c:3e:6c:26:bc:ce:9c:bb:
                    05:b5:42:d8:31:29:2f:fc:e6:1e:37:80:da:81:ed:
                    37:62:6f:e0:22:eb:77:8a:ed:cb:1a:10:c5:27:41:
                    2d:cc:c9:43:c4:1e:a6:9c:af:77:ba:40:d8:00:be:
                    3b:5a:c2:73:39:b2:2f:8f:f2:4d:f3:8a:df:82:69:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:11:18:49:0F:14:8E:F2:2C:58:B4:CA:15:A8:25:F1:BB:77:50:19
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/PBEYSQ8UjvIsWLTKFagl8bt3UBk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:40:48:49:b8:e3:57:04:02:08:ce:5f:2e:fe:b2:37:d4:72:
         3c:37:91:e6:7f:21:39:74:3c:9c:0c:eb:9b:f7:b0:cd:3a:2a:
         0d:6e:4e:4b:c2:c6:99:d9:db:52:bc:7f:4f:dc:d4:e0:9e:f8:
         0d:d6:0d:ca:d4:59:b5:66:2b:6c:51:93:ba:fa:ca:92:4f:6a:
         84:b2:f5:86:6f:4f:01:8e:6f:d4:c6:7f:90:ed:6b:79:4a:63:
         9f:53:67:97:28:4e:21:20:ce:56:19:03:d9:75:b4:16:15:f7:
         c1:0a:90:7c:5b:68:49:d5:52:f9:b4:c9:97:72:da:d0:e0:0d:
         1f:c7:e4:7d:69:d9:65:e4:b0:30:0a:30:1f:01:32:4e:01:60:
         53:bf:8c:1e:03:60:91:33:e9:96:13:a3:e2:a1:0d:56:24:37:
         7c:be:eb:b7:97:5d:32:b7:c7:3d:5d:63:02:9f:9c:ee:dd:ac:
         07:b5:48:64:ac:17:c4:c8:8a:09:db:9c:4e:d6:52:67:6f:4c:
         76:81:6c:d9:6e:fc:0b:8b:24:a3:46:c7:7c:93:98:fe:37:af:
         76:d1:80:dc:06:04:a4:c9:aa:10:2a:11:d1:43:b2:a2:1a:6a:
         4b:be:8b:6f:75:c8:a1:2f:e8:6b:85:fc:d5:71:f6:7f:35:cf:
         de:23:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org