Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/67UQ5jXrDoPzgGGK3VKtJFcahk0.roa
File:                     67UQ5jXrDoPzgGGK3VKtJFcahk0.roa (raw, json)
Hash identifier:          USZpuitk3kh8Z3njiTh6RHGNEJaNOwxMwibTnfGhwmw=
Subject key identifier:   EB:B5:10:E6:35:EB:0E:83:F3:80:61:8A:DD:52:AD:24:57:1A:86:4D
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       69
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/67UQ5jXrDoPzgGGK3VKtJFcahk0.roa
Signing time:             Mon 05 Jun 2023 04:47:02 +0000
ROA not before:           Mon 05 Jun 2023 04:47:02 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jun  5 04:47:02 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EBB510E635EB0E83F380618ADD52AD24571A864D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:84:8b:af:4d:a7:39:b5:e1:37:8e:aa:d7:
                    5b:c6:e0:e6:e8:7c:98:5e:a4:b4:cc:60:b6:75:04:
                    b0:f7:41:c7:87:8b:a7:85:d8:52:cf:b7:b3:ea:e9:
                    76:28:bd:24:b0:de:6b:61:16:5a:63:c6:c4:6b:26:
                    4f:f2:07:4d:e0:cc:c6:aa:82:cd:a6:b3:04:22:36:
                    9c:f0:5f:b1:da:8d:58:92:ed:0f:08:93:21:16:ab:
                    86:be:a1:62:48:8e:9b:9a:a4:c1:1b:1b:8a:9a:df:
                    a8:1b:c4:f3:fc:b5:b8:eb:8c:da:98:96:e3:ec:67:
                    90:e7:e3:3f:2d:f0:31:e7:02:7f:c1:8e:13:3a:2f:
                    26:bf:ac:13:eb:f6:c9:5c:ca:46:51:ef:99:7a:11:
                    10:39:77:74:20:bd:2b:b4:79:2c:98:17:1c:c1:75:
                    f8:88:14:21:db:e0:06:c7:70:33:24:3b:41:b9:f3:
                    29:4d:20:b5:2a:2c:98:a2:01:b7:7b:87:2b:f5:fe:
                    80:5c:8f:64:c3:a2:76:bc:93:61:4f:4b:f9:47:ad:
                    04:9c:13:7c:b9:8a:0a:dd:e8:09:6e:72:b4:3d:12:
                    cc:12:a7:9c:37:c5:f5:4a:7d:e5:09:6c:ef:9b:02:
                    9e:6d:4f:67:26:9d:19:76:4a:b0:52:28:2f:28:2d:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B5:10:E6:35:EB:0E:83:F3:80:61:8A:DD:52:AD:24:57:1A:86:4D
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/67UQ5jXrDoPzgGGK3VKtJFcahk0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:0c:46:45:79:de:d6:6e:36:db:b3:1b:d8:40:2c:71:ce:
         7d:a0:44:70:18:74:ba:e2:4b:d2:64:2a:ab:49:f1:5f:78:4a:
         14:53:b1:b3:5b:49:c3:78:e8:ba:f4:df:ab:15:f7:dd:3a:29:
         97:ea:42:ac:a8:4f:f2:2d:12:af:1f:d6:fc:38:26:94:84:43:
         e5:e2:ef:2d:be:e4:6b:d1:6d:a4:a0:8b:07:be:99:0a:3e:05:
         b3:aa:1d:28:44:2f:2f:e1:7d:43:91:91:98:b5:ea:c3:e7:01:
         a9:19:cb:0c:76:e8:94:e3:1d:9c:d5:25:04:ec:b6:4f:e4:46:
         85:84:ea:02:cb:ff:bb:60:4c:6f:68:86:91:ea:8d:26:a1:da:
         a2:9b:75:33:ba:b9:ef:e1:7e:c0:2d:01:ac:de:bb:a3:c8:a0:
         cf:b3:bf:19:20:c8:4d:d3:25:2d:e4:9f:7f:d0:7e:fe:75:ba:
         ed:00:66:ac:f9:9b:69:17:27:cf:f0:15:7b:ea:d8:ab:8e:ee:
         cb:5a:5d:95:77:a9:1e:af:e6:67:33:e1:74:11:22:df:a8:8f:
         04:1f:ec:c6:bd:17:25:30:0a:1b:3c:1a:24:2f:a3:21:1a:50:
         f5:7f:dc:57:c1:a0:bc:11:da:07:f8:32:40:da:4f:8e:4a:23:
         ff:a5:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org