Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/fLmuiRhGRP-U_gOScHk2UApYdKY.roa
File:                     fLmuiRhGRP-U_gOScHk2UApYdKY.roa (raw, json)
Hash identifier:          YuMsFxunCjRVyqSzYBmrEcWoPEXG+1wLRMeYoEY4+Cc=
Subject key identifier:   7C:B9:AE:89:18:46:44:FF:94:FE:03:92:70:79:36:50:0A:58:74:A6
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A6
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/fLmuiRhGRP-U_gOScHk2UApYdKY.roa
Signing time:             Tue 01 Nov 2022 01:28:07 +0000
ROA not before:           Tue 01 Nov 2022 01:28:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.60.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7CB9AE89184644FF94FE0392707936500A5874A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:54:9a:6b:df:15:be:7b:ea:c6:3d:7b:74:
                    a9:ef:61:2c:f7:29:a3:25:8c:bf:35:7c:a1:0e:ef:
                    7f:57:c0:99:5c:01:ae:60:17:ca:7f:d5:dc:33:12:
                    38:a2:02:35:a9:ba:95:63:80:6a:55:e2:54:20:88:
                    e1:c1:62:0e:9b:4f:7f:f9:8f:d8:a8:a9:e7:f8:7d:
                    72:1e:84:d3:b1:ce:7e:32:fa:e2:60:f4:1f:cc:73:
                    bf:eb:4c:7f:19:28:0e:9e:04:b9:9a:b3:65:6f:01:
                    f4:84:c5:4e:e9:69:74:7e:e1:85:cd:74:5a:74:e2:
                    e6:6c:ec:f7:27:bd:d2:8c:5f:59:70:91:f8:24:aa:
                    1c:45:cb:98:dc:42:cb:09:df:46:15:aa:74:51:e8:
                    61:23:90:f9:85:7f:23:b9:59:9e:82:bb:b2:f0:77:
                    df:06:1d:10:f5:2a:e5:d4:27:ba:e0:2a:12:cc:1a:
                    84:29:5a:5e:32:13:bb:4c:50:44:ce:92:ed:c0:ac:
                    13:58:64:cd:21:c4:bb:51:3f:51:75:e9:20:32:3e:
                    24:4b:fc:65:30:c0:f2:df:dd:12:ae:bb:b9:56:08:
                    fe:e6:40:04:6f:fa:c5:c7:03:80:11:97:4d:cd:52:
                    e2:75:f6:5c:f6:28:0b:4b:05:28:d0:5e:db:97:48:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:AE:89:18:46:44:FF:94:FE:03:92:70:79:36:50:0A:58:74:A6
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/fLmuiRhGRP-U_gOScHk2UApYdKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:61:a9:5f:4a:1f:c5:77:72:b7:fb:5e:60:a0:58:ea:eb:1c:
         f0:cc:f2:7b:61:75:bd:73:6e:1b:ca:fc:dd:d9:ea:0c:f3:64:
         f3:f5:98:be:55:f9:38:8c:d1:90:ab:e6:72:40:76:ae:ec:2b:
         22:6a:e1:2a:dc:21:db:1e:ee:81:5e:f8:eb:94:85:f7:6e:c5:
         6c:76:26:26:a3:ac:38:1e:2f:5e:4d:c2:1e:5f:0d:38:44:84:
         a6:fe:a8:70:5a:83:ae:94:35:05:73:d7:94:f9:5d:44:fe:70:
         8b:ba:8f:48:26:b8:1b:67:56:42:58:3d:aa:20:dc:11:94:dc:
         9d:e1:10:ee:7b:19:f3:03:f1:a4:c7:ca:cf:86:09:df:83:2e:
         cc:ca:df:ea:44:c5:49:a0:e7:1d:fd:a3:03:b4:b7:89:6e:a8:
         30:3d:47:74:20:cb:61:83:40:af:94:d3:8c:d0:72:89:f6:43:
         ca:96:06:16:99:8f:2a:d7:e7:e6:1f:99:ab:b0:c0:78:42:cc:
         7c:00:91:35:8a:86:12:3d:b4:ee:08:68:6a:b9:50:0d:2d:cf:
         15:e2:6e:ea:64:a6:63:8a:9c:22:29:8b:9c:e5:62:32:16:fb:
         f5:8f:04:03:d2:53:d4:ed:c0:50:37:eb:32:27:ea:01:8c:ef:
         6e:d7:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org