Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/MM9n_fDrUpW2cFUYYWJ9Yl3Vmyo.roa
File:                     MM9n_fDrUpW2cFUYYWJ9Yl3Vmyo.roa (raw, json)
Hash identifier:          v4uMb1UCaiqo6ynfRBy07zhvsm7UXw0k9koMFVds7MY=
Subject key identifier:   30:CF:67:FD:F0:EB:52:95:B6:70:55:18:61:62:7D:62:5D:D5:9B:2A
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       4B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/MM9n_fDrUpW2cFUYYWJ9Yl3Vmyo.roa
Signing time:             Tue 02 Mar 2021 08:46:35 +0000
ROA not before:           Tue 02 Mar 2021 08:46:35 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     8220
IP address blocks:        202.7.96.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar  2 08:46:35 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=30CF67FDF0EB5295B670551861627D625DD59B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:85:8e:a0:d5:1d:6c:94:49:3f:7b:59:45:
                    8f:70:2c:76:ea:dc:27:c3:52:7a:f7:6f:8a:7e:93:
                    f2:13:23:07:f0:fb:2d:35:b3:8c:fd:cb:1f:93:fb:
                    c1:dd:e7:8f:28:34:81:90:be:19:2a:78:a7:c5:93:
                    6d:c7:30:3a:4a:b1:e0:97:65:09:3f:03:a8:92:50:
                    48:8e:de:e8:83:b0:3c:e0:54:50:c5:a4:45:46:b0:
                    5f:3a:20:ca:dd:d4:b1:c7:ad:4c:32:d0:b9:c0:7a:
                    5f:5c:f7:c0:f9:aa:a9:72:f6:ce:16:a5:d1:53:15:
                    3f:c7:ce:2f:ec:10:0a:4f:62:df:2b:13:a3:17:1c:
                    4c:56:1f:3d:b4:ee:a0:4f:06:20:b0:a2:31:f1:b2:
                    3b:41:dd:11:e5:f5:a5:18:11:5c:3e:84:24:05:69:
                    fd:58:a1:fe:9f:19:0e:d9:f9:96:ca:30:c8:ae:3f:
                    58:f2:82:32:e5:75:99:fc:88:16:7a:55:a7:2a:d8:
                    cd:e7:d9:c7:d8:e6:ad:ca:02:42:76:51:c6:25:33:
                    65:f6:3b:02:f0:51:59:3e:a5:27:d8:b5:d5:d0:71:
                    49:6a:e9:dd:27:09:9b:f4:aa:36:89:ac:05:f6:70:
                    93:47:72:bd:ff:65:f2:3f:fa:57:fb:d2:bb:73:e7:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:67:FD:F0:EB:52:95:B6:70:55:18:61:62:7D:62:5D:D5:9B:2A
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/MM9n_fDrUpW2cFUYYWJ9Yl3Vmyo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:b1:00:32:07:07:0e:af:41:c3:f7:39:c9:6b:5e:6c:fc:
         2f:07:ed:fb:75:fc:b1:43:68:78:28:5e:6d:bf:14:8d:94:4b:
         52:cd:a8:c4:66:ba:97:24:69:c3:0d:a5:83:dc:e5:66:8e:9b:
         43:23:49:d8:a6:c0:13:b2:54:5e:5f:47:2b:95:27:06:8b:ab:
         d5:29:1a:a7:ee:df:66:e5:43:8f:7e:8f:de:8e:e3:dc:e3:10:
         12:1f:a6:e1:a6:eb:ea:5b:b0:47:9a:1f:81:75:2d:d5:9b:64:
         35:f0:ed:46:06:6f:07:fd:c2:0f:c4:fd:79:a0:9b:d7:ef:81:
         cc:19:40:6e:0b:c6:69:a5:ed:05:72:ff:51:55:80:b3:6f:a3:
         77:2c:97:97:59:0f:c4:3d:f3:20:da:55:76:dd:5e:dc:75:b1:
         64:be:eb:7f:d7:01:c3:5b:dd:a3:c5:00:1f:e3:ec:53:21:80:
         b5:9e:0f:e3:f2:47:9b:56:da:58:30:7f:3c:3a:bc:b7:8b:6f:
         ac:92:ea:5a:93:fb:05:e4:8f:16:2d:51:bc:89:94:d5:56:af:
         60:ea:bd:5f:ea:c3:51:9d:e5:de:db:e1:de:c7:fb:40:71:b4:
         02:03:c3:6f:72:5e:11:85:e3:e4:5a:dc:21:eb:57:50:96:cf:
         c1:8b:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org