Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/4QrUVtdW8DivpUeeeLgiqPP67J0.roa
File:                     4QrUVtdW8DivpUeeeLgiqPP67J0.roa (raw, json)
Hash identifier:          YGFUqgFgK6nF5mim+4k3b1ooA6yzsbYrGTiTVifx30w=
Subject key identifier:   E1:0A:D4:56:D7:56:F0:38:AF:A5:47:9E:78:B8:22:A8:F3:FA:EC:9D
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       66
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4QrUVtdW8DivpUeeeLgiqPP67J0.roa
Signing time:             Wed 01 Dec 2021 05:29:18 +0000
ROA not before:           Wed 01 Dec 2021 05:29:18 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     10021
IP address blocks:        27.110.48.0/21 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 05:29:18 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=E10AD456D756F038AFA5479E78B822A8F3FAEC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:9a:e3:40:b4:4e:a6:65:fe:1d:be:84:53:
                    a8:ba:9e:8c:16:a7:47:f0:15:65:11:31:78:a3:ea:
                    ee:2d:5f:e1:15:3f:5b:87:57:a3:2e:56:cd:e1:c8:
                    f2:d1:02:dc:21:11:13:05:d1:79:ff:c5:ff:35:0a:
                    5c:ad:21:4a:32:02:3a:b0:69:58:17:8e:8f:c1:26:
                    a8:57:c1:be:45:74:08:f0:1b:fc:88:89:1a:9e:28:
                    03:7a:9f:ee:ac:ac:5d:6c:ba:af:7f:45:46:81:c6:
                    b5:ba:cc:6d:f1:87:08:64:34:9f:8b:c5:5f:61:7f:
                    b9:bf:14:8f:bb:49:ff:81:7e:f8:8e:9e:d5:25:b1:
                    4d:b1:3c:bb:23:a5:00:2c:b9:27:fd:0d:5a:cf:20:
                    8d:d8:3f:0d:5d:25:38:b1:32:21:70:c5:c3:e4:bd:
                    e7:7a:a9:7e:f4:76:2c:f4:76:91:ce:ce:22:91:fd:
                    cb:89:4b:5f:73:c6:47:b8:85:1d:3c:4b:6f:f5:d1:
                    7e:40:ac:77:2e:90:e4:28:5a:7c:2b:e3:f6:80:bf:
                    76:77:26:ee:1e:5f:df:02:51:63:ff:00:47:e6:41:
                    5d:f6:f3:e7:a5:4e:72:4c:9b:f7:b4:40:b6:c6:db:
                    9d:f6:14:97:4d:09:a1:fd:be:7b:79:0f:6a:25:2c:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0A:D4:56:D7:56:F0:38:AF:A5:47:9E:78:B8:22:A8:F3:FA:EC:9D
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4QrUVtdW8DivpUeeeLgiqPP67J0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:4e:0d:1a:ef:d1:a7:a7:01:bd:86:6d:2d:1e:12:76:6d:
         64:95:4a:93:8a:11:c7:04:5b:ce:b5:56:bc:2a:d7:02:e2:e6:
         43:ad:56:d1:8a:d7:1d:e4:89:65:05:8a:cb:18:d6:51:a6:6a:
         46:ad:a6:16:e8:0d:46:68:30:d2:53:d6:c1:33:ba:78:fd:8d:
         e8:31:6c:26:4d:27:36:d3:dd:00:c0:99:27:96:4b:06:87:86:
         98:88:28:4f:d7:01:ee:c2:ed:1b:48:63:a4:21:36:88:90:c0:
         8b:60:b5:a7:22:8d:de:79:ba:dc:4a:24:b0:d1:76:27:ac:1e:
         a6:e3:4a:91:b7:83:6f:1a:96:ef:30:64:60:16:22:d1:38:bc:
         f1:6d:ce:08:52:2e:41:a4:1e:e9:64:5e:aa:5c:2f:6c:81:ec:
         3b:67:86:29:e4:1f:35:1d:2f:d3:e7:37:3c:41:3d:a0:2d:88:
         de:d5:ca:7d:44:25:44:75:71:7d:d4:8d:7c:ff:0b:17:31:fd:
         d5:d2:d1:9d:ee:bb:e1:63:4d:6f:8a:65:a8:d2:cb:1f:b7:bc:
         41:65:ff:86:1a:79:27:7e:71:e9:2c:f8:33:74:67:c8:ac:96:
         04:f1:a7:97:84:c5:45:3a:49:37:21:39:20:83:4d:49:23:66:
         13:b8:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:37 2025 by rpki-client