Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/G7hsco3VDbiCTTY4wv1G-KcyAnU.roa
File:                     G7hsco3VDbiCTTY4wv1G-KcyAnU.roa (raw, json)
Hash identifier:          6yqzmvRp4N4VaHS89ZGtpAr6dUzl5yoWKxEgdWzan6s=
Subject key identifier:   1B:B8:6C:72:8D:D5:0D:B8:82:4D:36:38:C2:FD:46:F8:A7:32:02:75
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       10
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/G7hsco3VDbiCTTY4wv1G-KcyAnU.roa
Signing time:             Tue 30 Mar 2021 01:13:22 +0000
ROA not before:           Tue 30 Mar 2021 01:13:22 +0000
ROA not after:            Tue 15 Mar 2022 01:30:01 +0000
asID:                     10011
IP address blocks:        124.108.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Mar 30 01:13:22 2021 GMT
            Not After : Mar 15 01:30:01 2022 GMT
        Subject: CN=1BB86C728DD50DB8824D3638C2FD46F8A7320275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f5:14:55:9b:4b:3b:ff:c0:81:90:14:6e:15:
                    84:9a:50:bf:84:5c:64:20:12:df:7d:f2:27:81:f9:
                    a9:25:c4:c9:e0:f7:71:70:fc:b1:62:55:87:e4:49:
                    9a:d9:df:da:b5:ba:b7:17:72:71:8e:77:b8:2d:14:
                    d3:e8:77:57:54:b2:1b:b6:f9:b4:0f:30:d1:26:95:
                    84:b9:e0:d5:b1:92:22:8b:79:7b:46:57:1f:70:d7:
                    5f:6a:1e:bf:8f:92:2b:46:2e:5b:1e:72:af:ef:dc:
                    22:77:78:91:1a:9f:ff:2c:81:23:61:cf:1d:d3:95:
                    ba:37:53:df:0a:d2:d6:ea:5e:59:ef:6b:d2:11:6f:
                    69:bf:65:48:ab:41:0b:fd:96:9f:dd:4b:80:d1:fd:
                    d9:56:bb:63:52:92:71:cf:4c:a0:8f:25:b9:99:0f:
                    89:52:6e:eb:03:5e:69:25:68:5d:b1:71:2c:56:0b:
                    6e:08:9e:7a:00:a2:52:c5:a8:a7:f8:09:2f:79:78:
                    65:2e:29:a9:5a:80:e4:52:a8:0c:ac:bd:e9:40:c4:
                    8e:fb:27:ab:60:47:b1:0f:35:3e:33:3f:5f:09:c1:
                    86:66:01:4a:88:95:68:be:64:9e:eb:04:47:d7:b3:
                    30:52:8a:da:e1:eb:c3:2d:73:06:d2:38:48:35:f4:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:6C:72:8D:D5:0D:B8:82:4D:36:38:C2:FD:46:F8:A7:32:02:75
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/G7hsco3VDbiCTTY4wv1G-KcyAnU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:8a:4a:de:76:42:75:e7:89:34:4a:b0:3b:7e:63:24:28:d0:
         dc:4c:47:8f:c7:e1:3a:de:59:9f:62:f4:55:03:a2:d1:02:bd:
         a8:24:f0:3a:38:d0:a2:0e:43:7a:43:d9:48:43:82:d0:43:fd:
         33:33:c8:f0:d2:70:f5:00:4d:ff:ab:af:be:12:99:a9:ec:62:
         94:bd:30:7e:c3:fd:2e:af:d7:57:9a:f7:8a:e4:4f:4f:15:e5:
         79:ff:ca:f1:93:31:78:e2:33:86:87:3e:9e:2c:cd:36:30:d6:
         ed:b1:32:8a:e6:8d:e4:9a:9d:87:d1:ac:a4:5e:c5:b3:a7:99:
         7c:eb:25:36:cf:12:75:e7:da:99:69:de:de:25:82:ff:14:f6:
         44:8e:13:31:e2:6e:73:1d:d6:f4:a7:c4:15:2e:32:11:ef:1e:
         32:ce:df:7b:33:a5:71:9b:f5:07:bf:92:19:b3:a4:61:6b:05:
         72:55:ab:e2:94:a1:05:9d:94:0d:1a:ca:a3:af:1b:ed:a0:9f:
         4d:7e:e4:65:45:e5:ee:43:05:29:e3:38:5c:bd:e3:25:00:f6:
         10:a0:8b:4b:5e:02:6e:96:13:51:b7:b0:98:ee:9f:37:81:78:
         99:7b:86:81:aa:6b:46:05:63:cd:66:0b:d4:f8:c9:f7:66:ea:
         5c:14:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org