Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/39ZgpCU8qRx15RYnvSRab6uHLfQ.roa
File:                     39ZgpCU8qRx15RYnvSRab6uHLfQ.roa (raw, json)
Hash identifier:          uWpbY0acUBdbDudvhklV09C4sM2jBK9SY4pkiJ8d474=
Subject key identifier:   DF:D6:60:A4:25:3C:A9:1C:75:E5:16:27:BD:24:5A:6F:AB:87:2D:F4
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       6C
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/39ZgpCU8qRx15RYnvSRab6uHLfQ.roa
Signing time:             Mon 05 Jun 2023 04:51:04 +0000
ROA not before:           Mon 05 Jun 2023 04:51:04 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jun  5 04:51:04 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DFD660A4253CA91C75E51627BD245A6FAB872DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:1e:b2:bc:ea:a5:09:ce:bc:23:0b:af:5e:
                    e0:49:d2:b9:e7:16:cd:20:22:63:c5:c1:24:b9:00:
                    03:17:3e:1b:e4:3b:50:b7:99:45:fa:6c:d3:b8:05:
                    fb:0e:12:d9:0e:cb:b3:5f:87:ee:e5:b4:bc:45:f9:
                    94:1a:33:05:f0:e3:6c:70:44:a1:26:bb:98:e2:3f:
                    85:9d:b9:3f:d0:ac:2d:bb:44:85:36:83:65:84:b7:
                    49:52:25:0e:58:06:6f:47:8b:ed:57:c8:f5:31:ac:
                    6f:75:06:8f:d4:43:d7:6d:97:dc:54:23:2c:ae:9a:
                    e0:bf:e2:ed:b9:a9:01:f1:12:0d:69:0f:d5:a5:37:
                    d6:88:58:64:c0:2b:87:6a:85:64:89:c6:58:e5:0c:
                    45:24:38:a8:cb:6f:70:2e:ef:ba:af:9c:c8:3b:6c:
                    47:29:6a:7f:82:c1:c2:83:24:10:f6:d7:5c:1e:43:
                    a8:3c:74:1f:86:46:3f:89:6c:1c:ce:73:12:fe:f5:
                    e3:29:10:dc:ad:6d:13:8e:99:18:a2:4d:3d:fe:5d:
                    ec:6e:e3:84:cc:51:38:6e:ae:96:a5:a0:33:f4:46:
                    2b:65:1b:df:c4:5c:3b:9d:d6:35:72:df:97:bf:58:
                    77:30:17:4c:32:e0:c5:bc:11:1b:d9:3a:3a:99:d8:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:60:A4:25:3C:A9:1C:75:E5:16:27:BD:24:5A:6F:AB:87:2D:F4
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/39ZgpCU8qRx15RYnvSRab6uHLfQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:d3:19:17:de:a6:8f:3e:42:d9:20:e4:13:49:40:3e:b5:
         4a:35:f4:c1:d4:8c:4f:d2:33:47:60:2f:e0:f6:62:90:29:d9:
         53:5d:bd:d8:49:86:95:5f:03:c0:4d:42:b4:49:34:00:ca:8b:
         c6:4a:3c:fd:59:bd:69:2e:1c:77:72:73:b3:04:29:1c:5d:df:
         c1:61:cd:83:db:d9:b4:00:ee:28:68:14:c6:82:49:38:3b:bd:
         2d:ce:24:5e:2b:6a:ba:9d:38:f7:65:29:27:e6:12:13:36:2f:
         97:26:c6:1c:8d:66:5d:f8:ed:f0:15:8a:f8:3c:a4:53:60:e6:
         39:4f:5d:86:26:a7:8c:9a:57:c3:f7:45:79:7b:7b:df:63:78:
         5e:3a:6c:ed:0c:29:5d:e4:0c:d8:c1:fc:44:25:18:67:43:6a:
         68:c7:8a:7b:3d:c1:43:c5:0f:c1:9c:4e:de:12:40:02:13:94:
         08:7a:f2:7c:6b:c9:65:17:bd:e8:66:91:07:dc:c2:77:a0:37:
         f5:19:f2:e6:c2:60:6d:f3:64:66:99:95:55:39:dc:2f:b6:6d:
         d9:68:71:19:a9:07:4a:e0:48:92:73:ba:49:c6:4f:6c:fb:03:
         25:d9:3f:19:5b:30:4e:cc:b8:c9:d9:2c:cf:f2:a8:65:6d:ce:
         5c:e3:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org