Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BnuNuS39EF10Ht5KG-ooH8FkiSw.roa
File:                     BnuNuS39EF10Ht5KG-ooH8FkiSw.roa (raw, json)
Hash identifier:          FITpBNK/Lgx6KchPlYTNEhjG3pGyyTMuY0O8IjhToCc=
Subject key identifier:   06:7B:8D:B9:2D:FD:10:5D:74:1E:DE:4A:1B:EA:28:1F:C1:64:89:2C
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       39
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BnuNuS39EF10Ht5KG-ooH8FkiSw.roa
Signing time:             Thu 01 Dec 2022 01:28:21 +0000
ROA not before:           Thu 01 Dec 2022 01:28:21 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        160.27.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Dec  1 01:28:21 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=067B8DB92DFD105D741EDE4A1BEA281FC164892C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:05:61:cd:51:e6:06:a7:27:d4:56:a9:5e:
                    9a:80:90:60:a3:ae:78:0c:16:8d:1d:39:fd:95:70:
                    28:95:71:4a:61:84:68:b5:c7:76:0c:d7:17:ab:d0:
                    0c:4b:8c:f9:2d:da:3d:86:7c:cd:e2:a5:c4:8b:8e:
                    ca:68:66:dd:74:c3:92:db:e2:1d:f7:cc:7d:4b:81:
                    19:10:70:e9:53:22:0e:4a:c9:99:a3:bd:f5:7d:a3:
                    1f:de:ff:2d:af:36:32:06:ec:23:97:70:03:8c:dc:
                    81:2e:91:48:cb:39:fa:44:ec:4d:65:45:59:e8:47:
                    46:34:c7:05:6d:dc:2c:3b:c1:57:5f:87:8e:c8:ba:
                    80:63:f9:e0:d1:48:52:ce:ad:e0:b7:8a:00:48:ee:
                    35:c2:e5:61:0d:00:d4:f9:db:fb:74:f7:e0:e5:2d:
                    bf:73:da:cc:5c:c0:cd:5e:94:2e:bc:50:b9:af:21:
                    85:9e:ae:3c:30:93:99:2a:d1:b7:87:62:d5:e8:48:
                    8b:4e:80:d1:20:f5:0f:c3:0c:44:ed:fe:01:36:48:
                    f0:73:1e:57:c7:b8:66:7e:68:03:51:cc:25:1e:76:
                    80:f1:bb:ea:f3:1e:63:e4:54:e1:36:ef:47:95:59:
                    3f:cc:2a:5a:6a:ec:1b:ae:00:a6:50:04:d3:6f:55:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:8D:B9:2D:FD:10:5D:74:1E:DE:4A:1B:EA:28:1F:C1:64:89:2C
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BnuNuS39EF10Ht5KG-ooH8FkiSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:ec:d3:f4:4c:46:22:03:50:03:ed:35:42:3e:3b:3d:11:
         a7:03:50:84:49:54:a5:76:0c:2b:89:28:2c:9d:2b:64:50:05:
         fd:aa:83:38:2a:78:ca:71:2c:08:de:b0:cb:4a:39:dc:8b:82:
         30:42:e4:5d:6c:ec:3e:ae:08:ee:28:4d:9c:63:5c:45:b5:29:
         8a:3a:42:84:5e:28:9f:25:fc:a9:8e:1e:a4:b0:09:ab:25:7d:
         09:7e:72:11:80:2e:8e:af:3b:29:17:55:c8:3f:ec:2c:42:c1:
         5f:2a:87:b9:29:11:c7:8c:78:9f:d5:08:3b:81:41:5e:d6:64:
         fc:6e:aa:53:eb:4a:81:fd:97:5d:fe:a9:09:ce:ca:17:82:aa:
         ee:3e:36:c8:40:f3:64:8a:ac:b5:82:2a:26:8e:34:87:7b:89:
         db:5c:81:f7:91:d3:5e:e6:5b:83:e3:d1:e9:35:66:b3:7c:93:
         b2:19:04:1b:94:40:a6:e0:a4:31:23:92:8c:54:1c:52:33:16:
         dc:1e:c8:c8:5a:85:77:01:ad:dd:35:24:31:88:8e:d0:f7:7a:
         6a:79:8b:b7:46:99:ca:12:ca:fc:70:0f:69:6d:08:f3:3b:8a:
         45:f4:95:8e:c6:01:c4:cd:78:5f:89:17:3b:3b:41:b3:e0:73:
         5f:8c:6e:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org