Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/LU6zmJkwjxAHbIfhZOFskdMyiQM.roa
File:                     LU6zmJkwjxAHbIfhZOFskdMyiQM.roa (raw, json)
Hash identifier:          lln9E5IgND13cMFfSCUpKsYIECsccRKc4pVmwmjPZN4=
Subject key identifier:   2D:4E:B3:98:99:30:8F:10:07:6C:87:E1:64:E1:6C:91:D3:32:89:03
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       42
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LU6zmJkwjxAHbIfhZOFskdMyiQM.roa
Signing time:             Fri 01 Oct 2021 01:28:07 +0000
ROA not before:           Fri 01 Oct 2021 01:28:07 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct  1 01:28:07 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=2D4EB39899308F10076C87E164E16C91D3328903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:44:be:ae:e7:ff:57:36:9c:7e:28:46:bf:
                    ed:c7:2b:02:19:48:65:32:71:2e:d9:b6:1b:3f:11:
                    a4:a6:6f:ac:8e:a7:4b:36:60:63:ff:01:d7:60:88:
                    42:c0:3e:50:4b:54:7e:78:17:c5:a3:93:4f:59:28:
                    3e:9a:c5:72:d2:4d:40:0c:3c:3d:e8:2f:db:49:0c:
                    83:ab:c9:a0:74:8f:fa:c4:9e:a2:b6:aa:cb:bf:ba:
                    2a:80:4a:f7:8c:bc:b4:b6:ec:9f:c1:9a:ff:3c:50:
                    4f:36:6c:23:7f:41:e8:e0:c0:28:28:70:63:67:07:
                    c8:1f:a2:62:ae:69:26:9b:33:8d:dc:44:20:b7:9e:
                    3d:8f:ce:ba:25:22:17:b3:72:f2:00:cd:24:4f:68:
                    da:b3:46:e7:45:2c:a8:82:b4:3e:4c:cb:0e:fb:52:
                    2b:89:03:a8:de:99:36:cc:39:9f:34:da:d9:44:34:
                    d3:15:c7:58:70:36:56:89:51:a0:ef:0c:f3:1c:5c:
                    b0:38:1f:2a:f8:c1:c6:62:59:4b:d7:b1:ca:76:71:
                    f0:8b:c5:9c:bc:86:79:b1:aa:8a:5f:5d:c5:bd:06:
                    e8:17:84:06:af:cf:01:de:39:95:ba:42:31:3d:46:
                    0a:53:23:cc:9a:a3:c2:c6:63:cc:c6:ad:2c:95:ef:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:B3:98:99:30:8F:10:07:6C:87:E1:64:E1:6C:91:D3:32:89:03
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LU6zmJkwjxAHbIfhZOFskdMyiQM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:30:d4:e9:82:94:e5:a8:4a:86:4a:6e:2e:6f:8a:12:0f:
         68:d5:3a:6c:4c:f7:cd:df:a7:8f:bb:24:21:cf:62:b5:50:d9:
         da:8c:25:51:95:ed:47:8f:31:de:d2:24:43:4b:74:8e:cf:59:
         1f:83:d6:94:00:0e:09:97:ed:a2:43:fa:4c:53:81:89:b2:e5:
         3b:c9:5e:77:f9:db:42:d2:f5:7c:19:97:85:d0:25:01:e5:5f:
         4d:01:d2:f2:96:0a:2b:7e:d4:a9:8d:5b:d8:bb:ae:b4:65:ce:
         2e:07:d9:78:5e:0b:cb:aa:a8:19:44:d8:d7:6e:6d:87:f1:9f:
         88:ff:70:3a:98:60:26:95:63:0c:b5:26:c4:47:65:22:d8:0b:
         fe:69:d6:89:e2:d5:4c:6e:09:ac:5f:c9:7d:b3:08:43:7f:35:
         38:6c:90:09:b0:23:ab:c6:01:5d:3e:d4:7b:3a:bc:de:18:82:
         5d:17:4c:b8:88:f7:6a:f8:a8:85:95:16:c5:ec:6c:be:98:07:
         93:ad:8b:1b:be:01:f5:a2:43:81:71:d2:4b:46:b4:dc:cd:c6:
         28:85:2b:f4:d8:26:8b:b7:c4:9d:3f:b1:03:61:25:4b:1d:45:
         e2:4e:76:a4:cc:87:89:05:08:20:29:e9:93:18:d1:65:d4:3c:
         9c:52:a3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:12 2023 by rpki-client on console-ams.rpki-client.org