Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/0a0czWz16mEYAWvyCjEPsx3_3DE.roa
File:                     0a0czWz16mEYAWvyCjEPsx3_3DE.roa (raw, json)
Hash identifier:          vfQBosVqTfP4+fphDZp7FAFBUqhrfQl4IvrLIy7GUZU=
Subject key identifier:   D1:AD:1C:CD:6C:F5:EA:61:18:01:6B:F2:0A:31:0F:B3:1D:FF:DC:31
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       8C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0a0czWz16mEYAWvyCjEPsx3_3DE.roa
Signing time:             Tue 01 Feb 2022 01:31:03 +0000
ROA not before:           Tue 01 Feb 2022 01:31:03 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     8220
IP address blocks:        203.167.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:31:03 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=D1AD1CCD6CF5EA6118016BF20A310FB31DFFDC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0a:74:73:33:cd:d2:22:9e:16:89:78:48:db:
                    d6:40:28:38:24:52:dd:62:33:2a:30:d2:15:88:a5:
                    96:e3:cd:c8:e6:3f:81:ba:60:bc:b5:5e:f9:6d:1e:
                    96:34:64:11:cb:07:b8:be:7d:a0:42:f4:11:8c:99:
                    f2:e2:70:f0:1a:7b:17:b6:4b:57:59:4b:c6:af:c8:
                    30:67:34:6c:39:ff:d1:bd:a4:57:c2:db:0e:c3:c2:
                    a9:e8:15:e7:f3:32:cf:ae:33:64:8e:8a:3c:ee:3e:
                    dc:33:bc:b5:5e:d8:09:af:e0:42:0e:1a:51:08:fb:
                    3d:8d:68:c7:33:23:25:c9:11:09:50:ec:10:c6:bd:
                    d8:00:75:7e:51:2c:70:7f:87:61:0a:e3:ec:7d:61:
                    d5:2c:1a:1a:41:7b:3b:83:59:f8:e7:df:24:b8:bb:
                    19:d8:f2:5d:c2:2e:5a:d4:51:17:1f:e9:c5:90:96:
                    ef:c2:f6:d4:10:4c:77:1e:75:9a:35:ac:e0:b9:54:
                    44:cc:3f:a1:00:9c:86:49:08:2a:d4:09:3c:d5:84:
                    65:f1:25:92:54:42:31:96:21:ee:60:e5:ec:90:8b:
                    5b:d1:ca:0c:13:c9:57:28:56:4c:20:69:94:c0:96:
                    00:5c:47:c4:e4:3b:c6:fd:4d:ce:7e:d6:0d:d9:51:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AD:1C:CD:6C:F5:EA:61:18:01:6B:F2:0A:31:0F:B3:1D:FF:DC:31
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0a0czWz16mEYAWvyCjEPsx3_3DE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:56:17:8a:69:06:8f:ba:ee:3e:24:d4:2d:6b:ff:8d:2e:68:
         10:4f:86:8a:72:3a:52:87:c2:15:9a:03:a9:b4:48:b7:fc:3e:
         40:3e:3e:05:a4:06:37:d8:c4:59:58:c6:41:88:bf:9f:31:6c:
         ee:78:fa:81:22:58:0c:49:9f:c7:7f:7b:f7:fc:30:4c:48:40:
         4b:3a:2a:2b:7b:d8:47:2c:41:7c:ad:6c:f4:23:d6:4b:81:e0:
         1e:4f:f4:16:dc:51:98:c1:6f:d1:6b:df:a6:97:d1:ad:4c:21:
         c2:e6:09:4f:e9:cd:72:7c:e7:fa:b8:41:0d:61:d4:1a:aa:70:
         86:2b:24:6f:bc:81:36:7a:f8:ae:13:a7:a6:39:d7:9f:aa:71:
         36:e4:d5:68:16:48:9f:f8:a7:0c:9c:2d:a1:fb:c6:8c:23:bc:
         67:20:00:5c:87:ad:49:7f:b0:99:df:8e:84:b8:b5:43:0a:ef:
         1e:7f:75:7e:a0:b1:00:c1:b0:cb:4b:ec:98:3a:cf:e4:4b:27:
         7e:1b:4e:27:1a:7f:17:63:15:6c:ef:ae:08:bb:f3:23:20:2b:
         be:e9:f7:97:ce:91:f8:4e:64:de:eb:44:86:0a:8a:40:11:2b:
         3a:d4:17:29:bb:07:96:f4:ab:c1:76:d7:39:e4:7b:4c:ca:ed:
         54:26:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org