Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/PtHGiNcVv6Ynob3tUc1kQQSobdc.roa
File:                     PtHGiNcVv6Ynob3tUc1kQQSobdc.roa (raw, json)
Hash identifier:          tohW1viJWkJBxyun62JYH1Y+4/COHuEG2WO9CBIfpk8=
Subject key identifier:   3E:D1:C6:88:D7:15:BF:A6:27:A1:BD:ED:51:CD:64:41:04:A8:6D:D7
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       C7
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/PtHGiNcVv6Ynob3tUc1kQQSobdc.roa
Signing time:             Sun 01 Jan 2023 01:29:17 +0000
ROA not before:           Sun 01 Jan 2023 01:29:17 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        203.167.48.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jan  1 01:29:17 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=3ED1C688D715BFA627A1BDED51CD644104A86DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:40:b6:3f:a5:c3:68:63:74:67:c9:ce:87:
                    9a:e0:35:67:3d:ed:33:a2:7f:e2:15:da:e4:2b:70:
                    47:f6:cd:79:0e:3e:58:38:01:df:51:e5:d1:cf:2d:
                    68:08:89:f2:92:8b:98:16:b7:f7:af:0d:66:27:8a:
                    26:9c:8e:6b:98:95:98:eb:16:50:bb:27:27:a0:e3:
                    c9:2e:3a:a8:c8:87:b0:a2:19:29:2f:d0:9f:12:13:
                    f9:d5:a4:84:e3:25:24:09:d8:94:c2:db:97:f9:7a:
                    71:dd:f3:10:fd:f9:57:bc:51:b3:66:77:4a:55:6d:
                    04:a9:01:19:33:1e:02:df:6a:23:ee:da:ce:3e:ec:
                    7e:4b:9a:59:5b:c1:f5:24:18:e9:71:b1:e6:1a:8f:
                    ee:fb:b4:db:8b:5f:1a:17:26:af:8c:c5:5b:8c:1f:
                    ab:c1:39:85:d7:b2:e1:57:9c:24:9b:18:30:40:5a:
                    eb:67:05:54:bf:c1:d8:07:9b:fc:d0:0c:96:23:c5:
                    2c:8c:c8:ec:6e:61:f8:ab:ac:84:a0:b5:1b:46:de:
                    a6:c3:8e:f8:50:95:f5:6d:b5:e7:ca:48:67:e2:59:
                    60:45:c5:08:9d:f4:aa:8a:98:7c:58:71:f0:0d:88:
                    b2:12:a8:c7:14:d8:01:97:6f:78:78:71:e6:2b:47:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D1:C6:88:D7:15:BF:A6:27:A1:BD:ED:51:CD:64:41:04:A8:6D:D7
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/PtHGiNcVv6Ynob3tUc1kQQSobdc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:dd:f0:dd:4c:3f:a6:ab:17:dd:11:4e:32:b7:8b:88:e8:ef:
         1e:6d:9b:77:70:9d:da:16:e1:21:ca:a8:62:84:53:e2:c9:b6:
         cc:36:2c:a2:42:54:28:b5:64:88:89:5c:a6:38:ea:56:58:c4:
         89:77:80:f5:b9:86:4c:03:7b:46:a5:49:48:74:8f:71:d2:9b:
         b9:45:a0:11:c3:cc:87:e5:6f:bd:be:b9:05:51:1a:a2:f7:0f:
         0a:83:bf:e5:fa:19:8e:81:3d:cf:e5:43:d3:b5:0c:21:52:e0:
         8f:73:8d:65:33:45:3d:b8:e9:27:8c:29:bd:10:92:a2:0d:05:
         04:c4:ac:a6:73:5b:f5:c8:79:3d:b7:e6:cb:b6:72:9f:a2:ba:
         e2:47:04:80:7c:e9:e7:d5:fb:35:f4:08:08:4d:7d:2d:07:54:
         bd:33:7f:15:0b:fe:b4:42:67:2a:92:cc:37:0b:7e:ea:6e:87:
         8c:9b:33:18:f1:3d:ff:f2:a3:ac:b9:6a:cd:de:ee:e9:6a:50:
         c1:9e:9a:25:4b:bf:57:ce:47:4e:2d:b0:5d:8c:d1:33:1c:ed:
         65:cb:55:39:cc:38:d2:52:3b:0f:75:5c:81:37:e7:d1:98:e2:
         a3:af:7d:1e:a7:7e:33:9d:2c:f4:b7:33:6b:52:d3:82:48:92:
         ee:fd:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org