Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/3k5N2diyFOBtEv_88QRLUKFB3BE.roa
File:                     3k5N2diyFOBtEv_88QRLUKFB3BE.roa (raw, json)
Hash identifier:          cn7c5GoQhhTA4WehNGK6PV+7NponcAucdAF+M76O/Z8=
Subject key identifier:   DE:4E:4D:D9:D8:B2:14:E0:6D:12:FF:FC:F1:04:4B:50:A1:41:DC:11
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       51
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/3k5N2diyFOBtEv_88QRLUKFB3BE.roa
Signing time:             Tue 02 Mar 2021 08:51:38 +0000
ROA not before:           Tue 02 Mar 2021 08:51:38 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     10021
IP address blocks:        203.167.48.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar  2 08:51:38 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=DE4E4DD9D8B214E06D12FFFCF1044B50A141DC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:03:04:87:71:07:f8:57:32:13:b7:45:76:
                    fd:79:ce:89:3b:10:ab:fc:7e:92:49:38:5e:76:cb:
                    19:cf:97:c5:d3:9e:f1:38:e0:fc:94:61:75:dd:30:
                    d5:73:15:ee:1c:80:b6:65:42:df:e2:e0:a2:ed:d5:
                    5f:0d:da:1a:2d:d7:3a:d5:c5:aa:79:d2:e2:a8:d9:
                    c3:d6:91:57:11:80:57:d9:85:66:77:80:88:db:c5:
                    04:8d:d1:4e:db:df:50:56:cb:7f:80:99:b2:34:d6:
                    3f:da:d0:6a:3b:76:67:d2:31:60:ea:32:da:36:6c:
                    84:ef:39:6a:d6:16:c3:37:8c:cd:42:45:50:ec:20:
                    b9:65:2a:ab:12:7f:5b:c0:af:d3:ee:d9:e7:20:3d:
                    3b:0f:0d:c2:8c:ce:3f:fd:28:5e:b2:63:99:11:77:
                    ec:25:5f:7d:f3:d9:1c:b2:ce:11:c7:9c:6a:81:73:
                    c9:03:b2:8c:05:59:7f:1b:8d:5a:c2:0a:89:21:08:
                    6a:be:bb:cc:aa:47:a7:62:ce:7e:a7:1d:85:b0:0c:
                    c0:f0:a6:2a:31:bc:5d:0b:b8:0f:d8:9a:ac:f2:5e:
                    4a:34:6b:15:d8:9e:d6:8e:91:14:6c:05:d9:10:83:
                    e8:e7:a9:a1:bf:b2:92:79:a5:b0:a4:3d:73:e4:2f:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:4D:D9:D8:B2:14:E0:6D:12:FF:FC:F1:04:4B:50:A1:41:DC:11
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/3k5N2diyFOBtEv_88QRLUKFB3BE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:8f:28:57:8b:40:10:07:56:13:5f:5d:00:4e:ca:e6:86:
         55:c2:37:22:f1:9b:d2:c9:63:ca:f2:73:ce:9e:5b:c0:48:0b:
         57:29:f6:d6:38:ec:89:0a:a8:95:fe:94:3e:f6:ab:e2:c8:77:
         23:45:fa:63:ac:9d:9d:32:1a:70:ba:e3:91:42:20:96:24:7d:
         9b:e8:bf:bc:fc:92:f4:f5:44:14:16:b3:15:50:68:9f:ed:83:
         8d:46:90:39:21:e5:03:b9:7d:9b:66:65:e6:b4:4e:6e:66:6c:
         fb:41:aa:64:68:ec:d2:12:80:cb:ca:8d:36:ee:7b:24:7d:c4:
         30:0e:d8:45:9a:19:3e:03:49:b2:85:8c:46:1d:48:27:59:85:
         15:ad:5e:2f:fd:71:52:4d:7e:17:03:5b:b3:e7:af:98:eb:84:
         17:b7:a7:d3:99:56:fe:a4:a6:30:33:ab:ee:b2:c5:fd:8a:b8:
         a9:70:3a:47:fd:65:24:8b:1e:56:4c:96:ea:e9:2e:56:c7:de:
         46:3b:a0:ea:99:16:76:26:dc:47:ac:8b:e7:90:7d:ea:72:a4:
         c4:73:62:23:57:ec:29:fb:ac:79:cd:a3:87:f6:3a:c9:23:e8:
         5e:94:3e:2a:83:43:c3:ed:31:80:55:9d:0e:48:42:68:c1:29:
         ce:e4:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org