Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/4uTs68PJXj17pVVV0ySu2uIl1tw.roa
File:                     4uTs68PJXj17pVVV0ySu2uIl1tw.roa (raw, json)
Hash identifier:          LTM/E9TC+As0uY1B5bYGuGgLHXDjH4VE8XMES4+mEbI=
Subject key identifier:   E2:E4:EC:EB:C3:C9:5E:3D:7B:A5:55:55:D3:24:AE:DA:E2:25:D6:DC
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A4
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4uTs68PJXj17pVVV0ySu2uIl1tw.roa
Signing time:             Tue 01 Nov 2022 01:28:06 +0000
ROA not before:           Tue 01 Nov 2022 01:28:06 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.56.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:06 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E2E4ECEBC3C95E3D7BA55555D324AEDAE225D6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:16:4a:cc:0a:ad:71:95:13:37:3d:84:22:
                    f9:a1:1f:99:eb:15:a0:00:71:db:d3:24:34:81:0b:
                    c0:87:bb:07:57:62:11:20:b8:de:19:a0:73:5e:46:
                    46:96:73:c7:92:4f:c5:18:b3:a7:ad:04:61:1e:8e:
                    44:4f:3b:16:73:ca:23:91:5a:1b:07:3f:b5:8e:fd:
                    45:7e:13:a8:db:98:b3:68:18:8e:bf:5d:a8:29:b7:
                    a7:f3:53:d1:4c:7f:ba:6d:f1:dc:40:21:5f:d4:5e:
                    78:af:49:f6:b2:a8:4b:b1:4c:fd:67:91:3f:46:38:
                    46:9b:eb:4c:d6:e9:52:39:46:e6:bd:2e:bb:44:d8:
                    95:b1:09:73:b1:27:40:c9:10:bb:e8:42:48:dd:4e:
                    d6:62:19:ec:60:2f:e7:c4:a9:86:3d:38:ec:63:09:
                    c4:57:52:15:c2:42:19:c1:dc:f2:c6:73:75:1c:50:
                    f7:9c:7b:11:0d:49:d8:99:a5:2f:83:66:e2:9d:76:
                    69:74:0b:2f:86:0c:06:27:6c:4a:b9:f9:7c:12:5b:
                    da:ef:b7:1f:f0:07:77:d5:87:2c:90:49:c9:6f:c9:
                    e5:db:4c:f9:8f:97:85:ce:a4:37:48:84:5b:39:61:
                    de:97:6a:9e:d4:8e:ab:a5:be:3a:05:6f:8a:da:db:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E4:EC:EB:C3:C9:5E:3D:7B:A5:55:55:D3:24:AE:DA:E2:25:D6:DC
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4uTs68PJXj17pVVV0ySu2uIl1tw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:a4:b8:f9:99:e1:eb:e0:c5:af:6a:a4:aa:51:74:2f:0a:2a:
         66:e5:b4:65:62:f4:af:21:47:a0:ea:46:66:4c:2b:08:55:c9:
         9c:fb:02:2d:d2:f2:f7:ab:d2:41:60:c8:77:8e:b2:c4:47:9b:
         6c:4a:04:de:58:62:d9:58:3d:b7:5d:ec:75:b9:49:c9:ff:f2:
         44:3c:25:e3:8a:98:fe:40:fe:5c:6a:4a:a1:f6:09:92:77:10:
         31:4b:d6:12:23:dd:55:16:cd:56:2e:c3:92:74:55:56:fc:a7:
         20:c7:e8:22:22:54:9f:e0:a9:1e:21:7c:2c:a8:99:bd:d6:f7:
         5f:7b:5c:4b:5d:93:ee:4d:8e:ff:b2:a3:08:b6:cf:e0:cf:79:
         7c:3f:2a:59:e3:11:aa:ce:e0:40:d9:44:bc:81:03:2a:b2:8c:
         89:45:53:bb:2a:27:64:c4:03:80:df:54:40:eb:00:6e:36:d6:
         13:85:cb:f8:c9:b8:9a:5e:ee:eb:67:5b:dd:d5:a8:37:f5:72:
         e5:38:bb:3e:e0:36:63:68:cd:09:9f:e3:33:ed:8c:51:55:80:
         2d:71:c5:ed:af:60:35:d9:e7:58:e9:6b:76:8a:c3:72:8c:7f:
         c6:c6:79:d8:a3:b2:56:64:4f:66:d4:53:37:c5:37:e8:2b:66:
         9b:3e:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org