Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/eW7iJbriLljy52uUp5fws-5sYDQ.roa
File:                     eW7iJbriLljy52uUp5fws-5sYDQ.roa (raw, json)
Hash identifier:          RoongQlxGkwZG8R2HEthe+yjj+EVgnUO6oAwy0YOCok=
Subject key identifier:   79:6E:E2:25:BA:E2:2E:58:F2:E7:6B:94:A7:97:F0:B3:EE:6C:60:34
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       6A
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/eW7iJbriLljy52uUp5fws-5sYDQ.roa
Signing time:             Mon 05 Jun 2023 04:49:06 +0000
ROA not before:           Mon 05 Jun 2023 04:49:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jun  5 04:49:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=796EE225BAE22E58F2E76B94A797F0B3EE6C6034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:ac:43:c6:e6:c9:91:8d:a8:05:eb:66:7d:
                    52:d3:f0:6a:88:59:18:4d:bc:e4:49:02:43:a0:ef:
                    a3:48:07:99:ee:18:6c:d5:08:4e:3d:e4:e7:3e:63:
                    50:89:ab:6d:38:ea:a6:cc:3e:11:41:b2:3c:28:af:
                    54:2b:ea:ce:48:4e:0a:16:a2:cc:99:10:38:c7:73:
                    c4:44:8a:10:74:f2:79:19:15:3f:3e:10:70:bf:44:
                    02:25:29:20:01:7e:cd:e7:21:5e:cb:fd:6f:8c:0c:
                    19:c4:26:ac:a4:8d:68:08:23:76:19:30:d2:43:49:
                    35:20:15:bf:21:02:72:54:18:98:90:df:c6:7e:49:
                    3a:7c:cc:44:67:00:01:eb:ff:51:68:f1:55:f3:5b:
                    c8:6c:fc:95:f7:df:4b:c5:d5:68:41:c4:2c:0f:bf:
                    81:33:ff:95:37:67:4f:a7:5f:40:ab:fd:bc:2f:36:
                    7e:36:68:08:96:1c:94:37:b5:a2:82:e3:7d:97:2e:
                    66:fd:e8:09:c9:29:72:b4:40:0f:4f:a5:46:00:3c:
                    dd:69:98:c2:94:a5:98:97:92:f5:53:f7:d2:07:a0:
                    14:a4:bf:d5:f9:c7:5d:aa:68:96:5b:10:c8:4a:69:
                    3c:e9:02:c3:76:9a:d4:98:73:38:4d:8d:f3:e6:2e:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:E2:25:BA:E2:2E:58:F2:E7:6B:94:A7:97:F0:B3:EE:6C:60:34
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/eW7iJbriLljy52uUp5fws-5sYDQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:5c:a0:80:d4:13:bc:be:eb:22:fb:52:e6:c0:c2:4f:1b:
         9a:61:23:7b:55:8c:83:1f:d9:55:b4:ab:11:83:8f:e6:d4:69:
         70:a5:10:b2:9a:5a:74:03:3d:36:6b:2a:eb:a8:50:76:3a:09:
         3c:21:6c:81:91:ab:8a:fa:58:d6:30:ff:20:bc:06:b8:4d:ec:
         d6:cb:3b:11:76:8e:0e:2f:e5:fb:60:8b:8b:38:17:6e:2b:69:
         19:9b:bd:98:62:6c:d8:ed:e8:cf:b4:18:2c:37:6a:c1:37:3f:
         19:fb:a4:8a:59:58:d9:9a:4f:63:22:b4:de:c4:57:21:ee:4a:
         1f:1a:c3:ac:47:6e:06:50:95:50:3a:92:2e:96:4f:b4:b6:39:
         4f:77:85:6f:60:2d:46:56:5d:51:a8:60:61:ae:9a:33:5f:21:
         f9:81:0c:93:f4:43:72:c4:b5:fe:a1:c4:64:0b:a0:b6:79:22:
         3b:21:a2:88:7b:78:04:98:42:6a:35:df:0c:9d:fc:1a:fe:e8:
         78:6c:1c:e2:e1:8b:ae:5f:f4:de:d6:fc:a3:29:35:01:a2:95:
         96:fa:85:ac:03:1e:11:2a:8d:c7:c4:2f:9b:6c:d5:46:cc:47:
         e8:e0:90:ec:8e:77:bb:90:b8:a0:67:3b:25:ed:e7:56:20:6b:
         77:1a:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org