Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/350bXc1MLM3er8Uh5WKsdl0GoqE.roa
File:                     350bXc1MLM3er8Uh5WKsdl0GoqE.roa (raw, json)
Hash identifier:          J2GqLzolF5DufCX1tkagtE0gBZLAMIUayX0GMVoe81w=
Subject key identifier:   DF:9D:1B:5D:CD:4C:2C:CD:DE:AF:C5:21:E5:62:AC:76:5D:06:A2:A1
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A3
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/350bXc1MLM3er8Uh5WKsdl0GoqE.roa
Signing time:             Tue 01 Nov 2022 01:28:06 +0000
ROA not before:           Tue 01 Nov 2022 01:28:06 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     8220
IP address blocks:        110.50.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:06 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=DF9D1B5DCD4C2CCDDEAFC521E562AC765D06A2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:35:ea:a0:2b:7c:69:7e:8d:74:79:ae:b2:
                    ba:dd:f2:a3:fb:85:9a:3e:dc:e3:f6:0c:b7:23:dd:
                    80:d5:cb:f5:46:a8:51:41:3d:48:22:a9:c3:83:8b:
                    29:43:05:b4:5c:98:4d:e6:2d:96:19:43:a2:36:94:
                    d0:fb:b8:8e:c3:12:7a:67:05:84:a5:be:ca:0c:e6:
                    65:ef:2a:37:e3:81:9d:d4:bf:ed:f5:a5:a4:32:54:
                    c9:16:38:ff:6a:89:39:e8:33:f3:a7:51:5e:7e:ea:
                    1a:73:74:51:0b:b4:cb:42:7e:80:a2:ba:10:b8:48:
                    13:d4:a6:99:f5:21:dd:10:61:9c:e8:69:96:ca:fc:
                    5c:5c:6c:e2:e7:02:1b:d8:9d:04:c4:ae:05:34:dc:
                    96:a9:b7:32:af:4e:a0:90:1f:d3:37:4c:56:d3:e2:
                    b6:ba:7c:5f:97:17:d6:73:3f:75:c8:7f:99:d2:99:
                    d9:78:50:6f:ba:8f:60:43:82:14:d0:11:7e:f1:01:
                    9c:fe:a7:84:bd:47:47:c9:0e:90:8f:15:5b:e6:13:
                    c3:b1:0c:c0:81:5a:de:7d:b3:a5:1b:b2:1c:36:20:
                    31:13:3b:fb:d3:4e:72:eb:4e:0c:b3:3d:d6:6d:8c:
                    f6:7f:76:24:52:93:b1:81:56:68:dd:83:e0:0d:06:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9D:1B:5D:CD:4C:2C:CD:DE:AF:C5:21:E5:62:AC:76:5D:06:A2:A1
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/350bXc1MLM3er8Uh5WKsdl0GoqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:11:a6:b0:7f:5b:04:48:8e:bf:50:1d:a1:f0:de:12:d7:f9:
         78:63:71:05:56:90:c6:af:12:9a:29:29:a2:c3:e4:62:44:a2:
         56:06:2b:ce:28:9b:73:7a:3c:f2:6d:c0:21:97:53:f8:36:5b:
         2d:65:6c:cd:81:92:f5:3f:3a:e5:ad:0d:a3:33:ae:d5:a6:c3:
         49:16:58:18:db:60:7d:14:a6:39:2c:05:04:08:72:4f:4f:eb:
         1b:fa:97:d6:76:55:c3:a2:57:b1:fc:cc:22:df:c0:3d:73:6c:
         3f:95:ca:1d:84:f2:e3:4e:12:e4:c8:e2:a8:5e:f1:71:3f:54:
         22:26:b1:ab:8b:e9:6c:03:e4:e7:6d:8d:0d:14:8e:c0:e5:bf:
         2e:77:8c:77:65:7a:f9:e6:28:bf:f3:a2:b5:fa:f7:a2:ba:80:
         55:a2:3d:c0:d6:43:8d:f8:fb:9e:12:01:55:ec:08:06:9c:2f:
         1f:26:59:d9:5b:27:7f:76:90:b1:f1:7e:53:25:88:ea:08:0e:
         37:4d:96:46:53:77:e5:47:2d:b5:d9:a1:bd:70:78:60:e4:d2:
         41:8f:2b:d1:6d:a6:4e:cb:08:0f:a8:2b:ad:fb:6e:0c:59:8e:
         87:db:8d:92:27:0d:87:85:71:d4:cb:14:28:25:00:a1:ec:e2:
         86:8e:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org