Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/DqGYHt2OJt6rKAqG9NuYw-mkFP8.roa
File:                     DqGYHt2OJt6rKAqG9NuYw-mkFP8.roa (raw, json)
Hash identifier:          OCQIZDtm83a0dljlFMVarO6ZwfGf7Ij3vOOtIxwIAkY=
Subject key identifier:   0E:A1:98:1E:DD:8E:26:DE:AB:28:0A:86:F4:DB:98:C3:E9:A4:14:FF
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       AA
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/DqGYHt2OJt6rKAqG9NuYw-mkFP8.roa
Signing time:             Tue 01 Nov 2022 01:28:09 +0000
ROA not before:           Tue 01 Nov 2022 01:28:09 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        202.7.105.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:09 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0EA1981EDD8E26DEAB280A86F4DB98C3E9A414FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:60:30:b6:19:47:b2:9b:ed:32:31:a8:02:
                    d9:57:f4:cc:f4:4f:2b:74:a5:6b:6d:6e:93:b8:a2:
                    36:54:04:a0:6a:f4:32:d2:ee:76:bc:34:6c:ee:c5:
                    66:49:d3:9c:c4:8e:11:62:7a:2e:55:d1:ea:c3:a3:
                    10:63:46:55:16:68:c4:9f:c3:f6:f7:df:ec:25:de:
                    b4:dc:5e:93:03:2e:51:11:e4:b4:57:a1:82:97:ab:
                    cc:7b:0c:86:74:61:88:dd:ea:17:94:1e:b6:fb:65:
                    00:7b:1d:27:64:7b:d7:c3:b7:df:02:94:c3:6b:5e:
                    5c:36:60:ae:46:5a:7f:24:19:94:ba:70:6a:b5:16:
                    e3:da:ff:74:97:52:73:4d:80:6b:7e:6b:79:67:14:
                    62:2b:31:81:df:2e:63:b6:d8:ae:43:04:5c:06:0d:
                    87:d2:05:94:b5:f0:aa:e5:a0:b9:c8:7a:13:ec:f9:
                    bf:b6:c6:be:4a:48:40:51:5f:74:06:d1:7e:99:9d:
                    8e:4a:ce:41:c8:0c:60:39:e4:9a:1e:62:3a:1e:1e:
                    2d:f7:1b:fe:d6:08:6f:8a:3a:37:17:a2:85:87:69:
                    42:be:36:bb:23:6c:67:80:cd:f7:69:c9:1c:42:18:
                    d5:53:49:dd:f7:b6:cd:db:0f:25:f6:b1:3b:fc:3f:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:98:1E:DD:8E:26:DE:AB:28:0A:86:F4:DB:98:C3:E9:A4:14:FF
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/DqGYHt2OJt6rKAqG9NuYw-mkFP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:5c:83:e6:98:b4:e7:a0:d6:ac:28:66:40:0a:80:56:43:3b:
         32:32:ad:7c:f2:16:10:a6:63:20:8c:16:1c:49:79:b0:f7:39:
         cd:c8:ce:71:7b:fc:ed:39:69:66:09:1a:c9:c6:ba:1e:68:5d:
         c5:f5:62:3e:e2:2f:91:7d:e7:ca:50:2f:9f:3b:17:ab:ac:0b:
         84:3e:a1:9f:cf:5b:ff:23:2a:83:c9:6f:04:e7:f1:3b:cc:d8:
         7e:e7:4b:f1:65:de:88:a2:1d:79:76:32:aa:5a:56:dc:ec:e6:
         dd:06:af:07:5f:f4:31:84:d8:76:5d:72:65:d3:1f:82:85:ad:
         dd:6c:da:45:9c:7e:e1:dc:31:5b:33:01:d8:af:bd:bd:07:80:
         19:78:7a:47:be:ae:50:dd:80:a1:2f:e2:4d:d7:2b:ea:e8:75:
         91:fb:54:de:b0:02:b7:02:28:99:bb:a0:15:5c:74:3e:fb:91:
         39:0e:05:37:39:d1:0e:02:42:b2:6f:44:87:d1:c8:65:54:ba:
         1e:82:b0:ec:a5:28:b8:a2:56:f9:3f:38:35:34:f4:17:b1:15:
         e2:da:29:e7:b2:b1:1b:75:ed:60:2d:e0:7e:6d:16:7c:46:5a:
         3d:ec:9a:ab:dc:20:bf:2f:eb:98:40:72:ed:21:a4:89:8a:5c:
         ba:0d:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org