Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/gp6IfbxyT4KVGPYTVj9uXIpl0DU.roa
File:                     gp6IfbxyT4KVGPYTVj9uXIpl0DU.roa (raw, json)
Hash identifier:          cpCR/Jm3yPtJsDSmw/7SepvByQYZCv6WWg/sNUctceU=
Subject key identifier:   82:9E:88:7D:BC:72:4F:82:95:18:F6:13:56:3F:6E:5C:8A:65:D0:35
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       47
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/gp6IfbxyT4KVGPYTVj9uXIpl0DU.roa
Signing time:             Fri 06 Jan 2023 09:38:04 +0000
ROA not before:           Fri 06 Jan 2023 09:38:04 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        210.166.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  6 09:38:04 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=829E887DBC724F829518F613563F6E5C8A65D035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:72:1c:af:5c:9c:22:8c:5b:6f:77:a4:a3:
                    92:79:fa:00:85:ce:8a:c6:ac:8e:03:b9:f1:5c:fb:
                    48:b3:50:6c:0e:32:32:07:40:99:38:64:f3:29:05:
                    82:df:dc:6e:65:22:3d:c1:1b:4d:0b:9f:60:4e:ec:
                    bb:28:a1:19:51:3a:f4:35:9e:60:d8:f5:15:39:a7:
                    69:4b:49:51:01:37:5e:31:c6:c5:37:8b:14:d7:61:
                    fb:ac:15:af:23:03:f1:35:78:0b:60:3b:91:c5:d2:
                    97:b8:c4:ee:67:92:10:ed:9f:13:bd:3c:f9:1e:cf:
                    bc:8d:89:43:9b:dc:d7:0c:58:0a:5b:c9:29:3e:84:
                    31:fb:ff:3d:7a:52:80:f8:08:2c:0b:1d:ed:4a:e5:
                    53:22:a3:96:1d:4e:60:e5:a7:e5:ea:1b:7a:06:8c:
                    7b:f9:49:65:e1:47:d9:74:5f:6e:10:32:b4:38:40:
                    6b:3c:2a:17:91:5e:b4:45:86:32:dc:08:f4:5e:2a:
                    1b:d3:ac:54:aa:a3:8d:46:3e:51:2b:24:34:cd:d5:
                    17:8e:2a:85:66:98:05:15:fd:1a:6b:ea:3b:37:d2:
                    da:a0:94:a1:be:27:46:88:86:a0:29:3a:84:5a:f7:
                    15:a0:63:7c:66:93:7a:90:d5:8c:9c:fa:26:e7:a9:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:88:7D:BC:72:4F:82:95:18:F6:13:56:3F:6E:5C:8A:65:D0:35
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/gp6IfbxyT4KVGPYTVj9uXIpl0DU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:72:a3:70:67:2a:0d:53:cf:29:04:e5:49:12:1c:f8:dd:c1:
         6a:4a:a8:c7:dd:74:39:ba:bd:66:0e:15:4b:f8:7f:ea:b7:8e:
         f1:c4:af:44:1f:bc:f3:25:d7:89:cf:96:86:8d:ee:69:c0:7a:
         0f:72:5b:ff:ac:52:ae:ea:b9:f7:1d:f1:e0:10:a1:62:de:b1:
         8c:4a:40:a8:1d:44:5c:05:a7:c7:84:b8:22:f6:41:34:97:5b:
         85:44:a4:b8:ab:8c:d8:13:c4:e6:11:ae:6b:28:02:89:c9:70:
         13:97:c7:be:3c:8e:fc:a7:1a:53:29:e8:e1:a8:57:3a:e1:a9:
         75:1e:39:ed:20:c2:10:4c:d0:c4:64:6a:32:ff:92:ce:6f:df:
         e3:08:07:29:46:59:6e:f1:8e:a9:de:42:c6:c5:da:22:ec:54:
         19:9a:98:5d:91:76:7a:ad:36:28:98:71:de:bf:4e:1a:4b:2a:
         a0:cb:7b:2e:65:5c:e2:e3:79:5d:05:8c:fb:bb:e7:e5:92:2b:
         33:e2:8f:02:df:ee:80:d8:43:e3:41:53:e5:b8:22:c8:69:66:
         69:07:d0:28:e9:74:c8:70:0c:eb:4c:b3:ed:74:0b:f0:cc:d9:
         1d:18:b9:7f:06:25:a1:d1:1e:74:41:aa:ae:71:b1:c5:81:c2:
         c8:43:39:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org