Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/q2aZsjSQ46QXcwIEfw7H6aoTSqk.roa
File:                     q2aZsjSQ46QXcwIEfw7H6aoTSqk.roa (raw, json)
Hash identifier:          f+dIA5Kr7cmwM5KgcDH4NtIi1NemDbr/5UBfkA+iniY=
Subject key identifier:   AB:66:99:B2:34:90:E3:A4:17:73:02:04:7F:0E:C7:E9:AA:13:4A:A9
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A5
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/q2aZsjSQ46QXcwIEfw7H6aoTSqk.roa
Signing time:             Tue 01 Nov 2022 01:28:07 +0000
ROA not before:           Tue 01 Nov 2022 01:28:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.48.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AB6699B23490E3A4177302047F0EC7E9AA134AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:09:f1:8f:be:fd:35:88:5b:0d:0a:33:51:
                    77:2c:40:ea:b4:50:e0:63:2d:ef:6c:e6:0b:c0:cb:
                    5c:b9:0e:c4:fc:e1:be:1e:a3:a4:4f:62:ac:87:dd:
                    1e:a3:1f:4d:67:cf:79:18:e0:6e:87:d5:b6:57:ff:
                    e4:4f:8a:de:26:8a:03:f6:b9:73:78:53:6c:95:51:
                    fc:e3:d6:f5:e9:f6:04:43:bc:95:1a:a0:4a:a8:40:
                    92:c6:b0:cf:85:b8:60:fb:c2:b1:8a:b1:3c:b1:55:
                    77:22:cb:b4:2a:33:d1:7e:7c:98:5d:80:16:5e:85:
                    6c:a2:ba:56:69:48:d3:9e:c7:3a:52:37:2a:8b:a6:
                    df:94:8a:b8:27:fb:a7:ca:1d:64:88:25:34:3f:9c:
                    c8:fa:7e:a6:e5:59:00:77:15:47:35:39:55:53:b7:
                    ee:70:a3:73:36:d7:d8:9a:77:cf:d4:15:1e:23:ec:
                    2c:89:33:e5:f5:e2:41:d0:4f:fc:0f:63:c0:c1:e1:
                    27:51:6e:3e:c8:27:9d:89:73:7c:b6:0a:6f:1e:d4:
                    ec:fe:2e:20:66:e7:c4:b8:26:45:2c:0f:c8:48:51:
                    27:d2:3f:63:77:12:d6:9a:7c:45:f8:d8:a3:31:f6:
                    5f:d0:3c:50:17:b2:70:8d:57:a0:db:0a:0c:a7:fb:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:66:99:B2:34:90:E3:A4:17:73:02:04:7F:0E:C7:E9:AA:13:4A:A9
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/q2aZsjSQ46QXcwIEfw7H6aoTSqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:f1:03:b7:0d:40:0b:37:a9:a6:38:0b:21:3e:ff:be:94:
         49:c6:af:4d:f2:09:e4:7c:ec:87:b0:bf:d4:d5:7f:42:b6:53:
         64:3c:30:ec:3b:37:eb:4d:8f:44:21:ce:d8:c8:b4:36:70:40:
         7f:59:d1:b8:5c:6b:98:85:36:5a:72:ab:6b:ff:ca:eb:33:b6:
         61:00:97:d8:b0:e8:0c:c8:8c:e8:5a:3c:8a:2d:ec:e7:2d:1a:
         72:31:19:67:55:1f:e5:25:57:db:cb:15:2d:c7:7f:06:c0:e4:
         1c:fd:8c:f7:1f:10:24:df:50:ce:f6:cc:b3:55:ea:0c:e6:b3:
         a1:41:5c:ec:8f:31:66:44:82:0a:fb:ec:f1:50:d2:60:58:19:
         13:21:86:4c:d9:88:a4:39:9e:60:e6:cc:2d:b9:4e:a9:36:8f:
         fa:9a:82:1b:e4:cb:8f:08:04:1c:c4:24:b0:7c:2f:05:69:1f:
         03:1c:1f:7a:0a:b0:6d:1f:c3:54:1d:22:33:f6:d2:84:9f:1c:
         58:7e:6c:52:71:30:77:ba:6f:40:8e:75:c6:43:e6:60:cc:6f:
         81:40:d5:6b:e3:f3:5e:5a:d3:92:ca:67:2b:dd:86:3c:68:4b:
         56:1c:c9:9e:39:bf:d2:97:c6:66:45:9c:0f:6e:6c:5d:e7:48:
         ea:13:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org