Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/Rz4DGk5tLo9NgZISPrdJgiC-WxI.roa
File:                     Rz4DGk5tLo9NgZISPrdJgiC-WxI.roa (raw, json)
Hash identifier:          jyDz151MSgOFc8U1QeAqb6xmXjgWGaru+c+XFi53IpI=
Subject key identifier:   47:3E:03:1A:4E:6D:2E:8F:4D:81:92:12:3E:B7:49:82:20:BE:5B:12
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       43
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/Rz4DGk5tLo9NgZISPrdJgiC-WxI.roa
Signing time:             Fri 01 Oct 2021 01:28:08 +0000
ROA not before:           Fri 01 Oct 2021 01:28:08 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct  1 01:28:08 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=473E031A4E6D2E8F4D8192123EB7498220BE5B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:ee:8e:1a:fd:75:e7:83:13:d2:c5:31:54:
                    23:44:83:1c:f0:ee:d2:1b:68:0f:52:0d:0f:1c:8e:
                    a0:86:b1:a4:ed:ef:09:af:d5:39:e3:f4:e3:e9:ca:
                    0f:2b:ce:17:6b:b5:8e:ee:1e:5f:1d:c0:ec:5c:43:
                    af:4c:0d:d2:bd:e5:65:fa:9f:d0:76:d7:be:8c:ee:
                    51:ea:33:3b:82:91:5b:fb:87:73:17:82:8f:a7:f3:
                    ea:ec:2a:43:9e:cd:b5:0c:82:4b:97:c9:1f:ac:2a:
                    87:c8:17:f0:96:c8:12:9d:c2:13:21:db:a3:25:92:
                    85:af:92:24:5b:b0:72:f5:db:84:35:29:74:cb:e0:
                    1e:bd:64:ac:1d:92:66:68:9e:94:76:33:36:f1:2a:
                    5c:b4:2e:fd:b4:00:e6:94:56:98:af:b7:53:25:f8:
                    0d:d4:d1:46:08:37:5b:4c:44:bf:76:03:57:7b:cf:
                    da:e4:af:9e:ae:1b:f6:57:59:e1:6a:43:ba:36:c7:
                    ef:30:d7:ff:5a:1d:24:2e:43:ff:e9:4f:43:11:be:
                    3c:3f:11:80:65:e3:14:51:9d:cc:d6:c9:65:e4:50:
                    c8:f2:ea:30:0b:51:b1:ac:c6:7d:a1:74:e9:50:83:
                    d4:19:eb:e1:76:26:f4:80:88:fe:8a:f1:ec:71:c1:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:03:1A:4E:6D:2E:8F:4D:81:92:12:3E:B7:49:82:20:BE:5B:12
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/Rz4DGk5tLo9NgZISPrdJgiC-WxI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:f2:8d:a3:f4:d1:2b:a5:5d:9f:68:ad:14:47:e8:a1:73:
         ae:c9:e0:de:4a:2b:c7:a1:bc:f3:73:75:2f:9e:1f:da:38:76:
         b4:ec:f4:f5:48:de:dd:36:9b:ab:61:09:18:a7:95:18:a5:e8:
         eb:8d:9a:63:30:c4:ca:0b:f8:f7:fb:f8:7b:d5:23:6b:0f:11:
         3b:85:c5:c5:3f:85:3b:dd:fd:18:b0:fa:a5:2b:52:18:2a:17:
         8b:cd:9f:f5:89:0b:4b:cd:af:e1:74:da:c1:f4:dc:42:41:cc:
         dd:93:36:c7:e7:81:3e:5f:d5:56:a7:aa:3d:e5:c7:e7:65:47:
         c2:5a:8a:16:f0:d2:48:72:63:8e:5a:ca:6d:fc:0f:5f:f8:d7:
         75:93:c3:57:0d:99:0c:38:0d:d8:1d:0e:96:84:cb:bf:b1:8f:
         d4:19:3b:7e:17:67:91:bb:89:50:79:99:09:4d:f1:90:4e:b6:
         f9:d7:b5:4a:bf:5c:f1:f5:f1:71:ba:c8:5a:77:03:25:4a:d9:
         86:d3:d8:cf:a6:d0:f7:68:d9:43:61:c9:8f:5b:3e:9e:6e:36:
         46:f4:d3:7e:bc:f7:53:bb:7e:30:fd:cb:07:5a:97:08:6f:87:
         5e:e3:2a:92:dd:0c:58:8a:b4:4a:de:e6:1e:40:14:8b:89:07:
         ab:ee:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org