Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/lnKanyIQ7L0RFIfSa26NaR8XkgA.roa
File:                     lnKanyIQ7L0RFIfSa26NaR8XkgA.roa (raw, json)
Hash identifier:          CE5SpdjQyIS9WFBKPEHOJPlvLssZet09OFydaqaxhZs=
Subject key identifier:   96:72:9A:9F:22:10:EC:BD:11:14:87:D2:6B:6E:8D:69:1F:17:92:00
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       12
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/lnKanyIQ7L0RFIfSa26NaR8XkgA.roa
Signing time:             Tue 30 Mar 2021 01:13:23 +0000
ROA not before:           Tue 30 Mar 2021 01:13:23 +0000
ROA not after:            Tue 15 Mar 2022 01:30:01 +0000
asID:                     10011
IP address blocks:        219.106.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Mar 30 01:13:23 2021 GMT
            Not After : Mar 15 01:30:01 2022 GMT
        Subject: CN=96729A9F2210ECBD111487D26B6E8D691F179200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:b3:8c:0c:58:c1:1c:6a:b0:b4:ae:44:ca:
                    d8:57:33:fa:af:cf:a5:77:5b:2c:8a:9f:b8:87:7b:
                    41:45:ed:ba:d4:5b:a7:b7:19:54:95:13:2b:bc:73:
                    1f:70:05:66:0f:31:c2:fe:6d:6f:e9:b4:19:8a:72:
                    b9:c8:f5:43:64:1e:60:88:5f:07:02:77:59:ef:91:
                    4f:fd:49:fc:f2:b9:ea:a6:19:f7:01:89:ba:2d:99:
                    97:44:94:e5:08:c1:d6:c8:6d:2b:5d:8d:0f:dd:f4:
                    66:b7:07:1c:eb:bc:51:4d:2d:4e:f2:fc:4b:f7:dd:
                    00:cf:a8:1e:88:65:07:d3:17:2b:53:12:26:d0:6d:
                    da:89:7f:c2:97:c5:16:58:fe:d1:df:d7:ba:52:5b:
                    29:0d:6b:be:26:dc:9a:30:36:2f:b9:e6:72:9c:ef:
                    b0:06:6e:d5:fc:8e:07:3c:79:7b:b0:fe:40:91:ad:
                    4e:da:66:f2:fb:d7:f5:99:c8:10:e6:91:92:e6:b8:
                    ce:0e:b9:a6:65:1d:b5:fb:4c:0d:43:e5:70:95:cc:
                    3a:51:e3:71:be:1c:b3:fc:76:af:cd:81:fb:2a:00:
                    ba:22:d9:07:ea:5b:87:01:1d:e8:ef:b8:10:e7:bf:
                    41:3b:0b:c7:d9:e8:ad:d7:b2:f6:e8:08:07:7f:f5:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:72:9A:9F:22:10:EC:BD:11:14:87:D2:6B:6E:8D:69:1F:17:92:00
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/lnKanyIQ7L0RFIfSa26NaR8XkgA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:ba:5b:a4:9a:e0:80:5e:8f:43:56:46:43:b6:0d:bb:3d:
         31:a6:6d:0b:9a:1a:f5:be:7c:97:c2:c7:dc:97:f3:1a:eb:ee:
         78:4a:93:a8:33:02:22:7a:b5:1a:45:d2:52:d9:d7:18:81:82:
         3d:f6:96:6f:71:8a:b4:2c:47:6e:d7:2a:18:4f:28:76:f1:68:
         93:68:d2:05:72:56:20:74:7a:c9:69:4a:37:26:d3:ec:60:6c:
         95:94:90:b4:62:d7:b0:24:3b:75:ac:ef:3c:43:58:f0:b0:4d:
         f8:b0:09:48:59:08:2c:cd:d5:6c:9a:27:26:05:87:69:5e:63:
         b0:52:44:56:ac:b8:4f:ff:72:a9:f0:4b:76:da:3b:37:b8:70:
         1c:65:0d:ec:29:72:6b:4c:f7:89:67:16:8b:e4:bf:62:9a:00:
         f6:32:cc:6c:eb:ef:34:a0:b4:4c:a5:2e:2b:ae:e6:9a:81:74:
         e3:c0:18:70:1b:e9:f7:70:29:63:9a:a7:0e:3d:c2:64:97:cf:
         cd:85:00:4b:89:38:e3:26:5e:c6:b0:52:9c:10:bb:ac:f0:08:
         d7:25:59:c6:cb:2a:06:db:b1:b5:54:03:18:56:85:f6:e7:cd:
         09:8d:97:dc:95:d6:ee:a9:63:a6:9e:e6:f5:b8:b6:a2:d7:b2:
         98:00:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org