Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/w4rdJO7dQdM3DIXvTrNwtMGmJ3Q.roa
File:                     w4rdJO7dQdM3DIXvTrNwtMGmJ3Q.roa (raw, json)
Hash identifier:          KEN6tx5gXQpDJrGIXLfor7iMfFdGXCEdL1gJjRP6kEc=
Subject key identifier:   C3:8A:DD:24:EE:DD:41:D3:37:0C:85:EF:4E:B3:70:B4:C1:A6:27:74
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       38
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/w4rdJO7dQdM3DIXvTrNwtMGmJ3Q.roa
Signing time:             Wed 01 Feb 2023 01:29:36 +0000
ROA not before:           Wed 01 Feb 2023 01:29:36 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        219.106.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Feb  1 01:29:36 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=C38ADD24EEDD41D3370C85EF4EB370B4C1A62774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:cf:95:97:08:46:eb:f9:94:58:a2:86:d0:
                    e1:81:8d:39:1f:c4:e4:99:1b:13:6f:1a:40:db:2c:
                    9a:d8:80:f9:28:4b:a3:4f:e6:70:fb:29:0d:34:13:
                    ca:de:d0:44:d0:07:7e:35:6d:9b:1f:37:7c:77:f3:
                    9e:5b:c2:8c:2f:32:20:c2:a0:a8:c2:c9:3a:7f:f6:
                    e1:9a:13:ec:53:57:49:9f:cc:78:8a:58:15:42:2b:
                    08:6e:40:19:29:7e:b5:1a:88:12:93:a1:aa:80:a9:
                    29:f8:89:15:26:22:e4:39:59:e8:09:82:33:13:25:
                    00:46:78:c8:02:1d:5a:cc:3f:77:7f:9f:b5:9a:08:
                    ca:5b:be:95:dc:12:b7:49:6a:b5:eb:b6:a4:12:b4:
                    ec:df:fd:f5:bc:3d:65:c5:33:bb:af:9a:bc:02:1a:
                    bd:c2:b1:52:78:b1:06:7a:2b:bc:64:fa:6b:e3:b4:
                    d4:de:52:79:a0:7d:35:b1:c5:16:b7:d0:f8:e7:40:
                    6f:89:2e:df:95:88:69:c0:cb:8e:74:ae:88:d8:25:
                    25:a8:41:20:62:b8:dc:13:48:74:cd:6a:0a:47:fd:
                    dd:7d:db:82:df:d7:10:86:83:64:0a:ea:b7:b9:4d:
                    7a:d1:2b:db:56:7f:cd:ba:59:92:72:9c:63:90:bc:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:DD:24:EE:DD:41:D3:37:0C:85:EF:4E:B3:70:B4:C1:A6:27:74
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/w4rdJO7dQdM3DIXvTrNwtMGmJ3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:14:27:6a:ef:19:b9:8e:de:cc:e8:6c:2e:b3:89:44:ba:
         ff:c4:72:4d:09:22:93:8b:4a:26:ee:57:10:c1:e5:3f:b6:60:
         16:fd:1f:66:93:14:53:81:b0:4f:5d:9f:09:0e:e7:70:84:c2:
         33:17:c2:ea:64:68:c6:7f:27:29:59:7c:e0:73:57:e5:38:7c:
         5e:e5:f4:8f:2b:c9:72:e3:b1:18:13:a0:88:5a:82:69:44:ed:
         20:f4:68:1f:26:5d:c6:a5:9f:40:ef:ee:3b:24:ca:d6:e6:df:
         e5:19:cc:c8:e4:ec:94:50:4b:5d:f0:03:3b:32:74:f6:61:aa:
         fa:23:a3:5b:47:34:b2:81:4a:36:3a:81:b9:65:63:1e:a6:73:
         61:f3:b6:81:5f:f2:7b:ce:ca:f6:ad:13:9e:ae:20:af:8c:e7:
         22:a4:a5:a7:ae:c3:f0:91:3e:f4:dd:23:10:0c:5e:48:bd:48:
         20:a1:cd:a2:86:b0:60:24:1f:6f:70:42:77:d0:e6:fc:11:fa:
         ac:78:52:32:46:e2:74:cc:02:c1:f2:71:86:fe:d3:b6:42:c8:
         37:e9:c0:ea:92:e4:03:cc:30:81:2c:52:50:54:ac:ef:03:63:
         7e:74:cd:6e:69:05:8a:a7:15:2c:00:0d:4f:f2:9c:45:00:cb:
         45:04:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org