Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/0p9FYiCg7kjseiKEBlfB_vFfqMs.roa
File:                     0p9FYiCg7kjseiKEBlfB_vFfqMs.roa (raw, json)
Hash identifier:          rVQkoLndxSWwzIOQUHePGQdaiuAT4IEim6YNerrfCQU=
Subject key identifier:   D2:9F:45:62:20:A0:EE:48:EC:7A:22:84:06:57:C1:FE:F1:5F:A8:CB
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       B2
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0p9FYiCg7kjseiKEBlfB_vFfqMs.roa
Signing time:             Tue 01 Nov 2022 01:28:12 +0000
ROA not before:           Tue 01 Nov 2022 01:28:12 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     8220
IP address blocks:        202.7.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:12 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D29F456220A0EE48EC7A22840657C1FEF15FA8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:25:ad:97:99:6f:37:04:bd:67:24:cd:a0:
                    40:58:df:17:59:01:40:7e:86:0c:6d:fc:2f:55:54:
                    0f:cd:a1:dc:41:8c:8a:1d:7a:c1:73:f4:99:d2:0d:
                    20:d2:28:cb:43:88:ba:77:88:a6:ee:9f:c7:31:fd:
                    e5:6b:a4:04:47:e2:1e:8c:0b:26:52:22:87:a9:28:
                    02:83:23:46:ad:96:0a:62:07:c4:9f:0f:9a:fc:e0:
                    9b:b3:c8:94:0f:fa:08:10:7d:82:f0:b4:51:69:d6:
                    6e:82:f2:ed:bf:bc:9d:4e:c6:79:92:35:6e:72:c9:
                    f1:be:5c:5e:e4:f3:80:82:03:60:6c:bb:83:fe:fc:
                    e8:8d:64:2d:10:e3:48:42:32:75:be:65:c1:65:ab:
                    70:ba:d0:e2:9c:81:3a:86:01:61:9d:4b:3c:dd:a0:
                    4e:1a:8e:24:e2:84:cb:60:bd:ba:76:b2:eb:9a:63:
                    27:29:13:6d:ce:13:59:e0:cb:3e:e5:17:b3:78:19:
                    9a:3d:2c:c6:8c:37:12:cb:02:a3:7e:3b:7a:7a:72:
                    17:c3:83:f7:86:5e:4f:f1:1f:a4:fd:b3:24:db:8a:
                    70:08:fa:08:5e:0b:32:07:75:54:f3:a7:6c:dd:6a:
                    9a:cd:3e:cb:09:fa:06:e4:fa:25:6e:76:ed:83:32:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:45:62:20:A0:EE:48:EC:7A:22:84:06:57:C1:FE:F1:5F:A8:CB
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0p9FYiCg7kjseiKEBlfB_vFfqMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:80:d7:2d:ee:bc:0a:bc:f7:c0:f6:3e:97:3f:ff:ae:db:
         5a:c4:2f:ee:bd:9c:67:29:0b:be:f8:fe:a9:38:f1:da:92:86:
         f8:85:ba:2b:c5:a9:04:3e:3f:f9:8d:25:70:bb:ed:23:9e:d9:
         1d:df:b5:dd:26:e8:7f:42:5e:d3:8e:47:09:da:5d:55:ab:1a:
         c2:95:52:b8:35:bb:d6:d9:86:07:0e:b9:31:6c:7f:65:d0:b4:
         0a:5f:fa:d5:2d:0c:91:92:fd:c5:2e:79:ce:6f:a0:f5:db:1b:
         f8:b0:a5:e3:07:c8:b0:63:4d:8e:fb:e2:27:00:21:35:de:f6:
         04:c5:21:b0:1d:0b:d3:a0:be:c1:81:64:16:f5:c6:40:64:cc:
         d0:7b:67:ed:bc:df:11:ba:18:2b:d3:85:ca:3c:cf:df:f6:b0:
         9d:5e:9c:10:b2:56:1d:6d:31:c9:e2:e9:78:2f:0b:ef:87:76:
         94:3a:e5:14:0d:89:d9:27:5c:35:7f:0e:3d:3f:85:29:12:f1:
         8e:de:ca:49:7e:50:2b:02:d9:1a:37:f9:21:2a:73:4b:87:15:
         2d:ab:94:34:0e:2f:d9:7b:2d:07:4c:52:cf:b5:8a:16:28:86:
         98:14:3f:1d:5b:f6:59:df:87:b7:dd:d4:8e:9c:64:55:5b:14:
         20:9b:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org