Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/K9L4HfQlVNg6HHJtZCVFPgt-6jA.roa
File:                     K9L4HfQlVNg6HHJtZCVFPgt-6jA.roa (raw, json)
Hash identifier:          8Q1yFgACKCY9BUO2d1BrbVybZYDkm54T9/eFMf2XVZo=
Subject key identifier:   2B:D2:F8:1D:F4:25:54:D8:3A:1C:72:6D:64:25:45:3E:0B:7E:EA:30
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       AF
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/K9L4HfQlVNg6HHJtZCVFPgt-6jA.roa
Signing time:             Tue 01 Nov 2022 01:28:11 +0000
ROA not before:           Tue 01 Nov 2022 01:28:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     8220
IP address blocks:        27.110.20.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2BD2F81DF42554D83A1C726D6425453E0B7EEA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:1a:e1:e4:1e:f7:40:0b:aa:94:0a:07:b2:
                    46:90:d0:ae:2e:15:94:6c:5a:bf:da:a3:c9:c5:52:
                    d8:60:c9:61:82:a8:4e:3a:03:cd:6e:55:78:1c:77:
                    7d:2a:79:79:9a:a4:d4:a5:4a:df:09:c0:47:ab:97:
                    57:b9:27:a9:2d:80:f1:8f:b3:b3:28:fa:69:d3:59:
                    f6:f6:91:13:53:cb:ac:2f:94:2a:cb:31:09:e0:3a:
                    20:29:64:74:cf:84:51:1f:34:83:2b:94:11:9a:9c:
                    f1:a5:8d:00:22:04:ac:e9:3b:05:92:03:6d:10:87:
                    f9:c8:f4:65:31:47:93:d0:9b:83:c7:f4:65:e3:08:
                    fc:79:e6:9d:d3:ba:1b:41:2b:1b:28:26:42:bc:01:
                    29:76:b0:c2:ac:1b:87:76:07:5c:c3:74:f6:75:38:
                    c9:b2:b5:58:66:ef:d9:9d:28:7c:b0:7e:cf:96:f1:
                    fc:87:eb:84:61:83:fd:31:55:fc:7f:6e:f2:63:33:
                    77:f4:8a:00:a3:55:02:61:53:18:21:6e:7d:5e:81:
                    d8:32:16:88:e2:8f:89:96:fd:b6:0d:2e:0a:b4:84:
                    86:e7:88:e6:f4:67:f3:d0:f8:04:38:d2:20:11:15:
                    67:c1:42:76:da:ac:a6:c8:e9:db:f1:0e:bd:fa:ab:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D2:F8:1D:F4:25:54:D8:3A:1C:72:6D:64:25:45:3E:0B:7E:EA:30
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/K9L4HfQlVNg6HHJtZCVFPgt-6jA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:99:cc:5b:72:99:92:c9:0b:19:1e:24:81:c8:33:ef:03:56:
         13:5b:25:27:f7:07:81:22:54:fb:5c:43:96:64:c1:b8:ac:41:
         cf:65:67:df:5b:dd:1f:30:90:5a:e3:26:a5:6a:81:6a:0c:9e:
         61:7a:c3:1c:5f:68:ea:15:8e:08:ef:2b:85:06:90:82:85:cd:
         6e:0a:40:8c:76:44:5c:38:c1:e4:85:ba:c7:05:4a:bc:d2:b8:
         80:bb:fc:16:02:99:9d:a6:55:c9:8a:df:06:71:4c:23:f2:e3:
         62:cd:0a:08:8c:92:c0:4c:24:c6:c4:83:0a:b9:10:69:07:45:
         30:77:a8:ae:b8:c6:d1:84:74:47:3d:78:fa:7e:17:64:9c:18:
         8a:f0:31:c8:7d:02:7d:72:0a:c9:37:c1:1c:e5:b7:1a:9f:7c:
         63:7f:53:f1:3e:ac:60:64:d3:ec:54:91:27:39:ef:47:30:5a:
         0b:26:3a:61:c0:cb:9d:75:67:4c:13:bb:0d:ae:6c:1c:ce:cb:
         98:48:ae:35:a3:ef:0c:f0:91:b5:19:43:54:b8:7d:35:c2:78:
         38:d6:dd:0f:ce:24:03:ec:3d:33:24:12:29:49:38:30:96:ef:
         00:c6:af:32:58:45:25:cc:f6:a4:a0:04:0a:56:dd:03:f6:b9:
         3d:61:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org