Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/k3OrAGoO5vnbvVG70kzdgzXppzM.roa
File:                     k3OrAGoO5vnbvVG70kzdgzXppzM.roa (raw, json)
Hash identifier:          /UwH4cz8t3muTSku+ja17zFIJFe8CEL7iizZd8aq9M4=
Subject key identifier:   93:73:AB:00:6A:0E:E6:F9:DB:BD:51:BB:D2:4C:DD:83:35:E9:A7:33
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       82
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/k3OrAGoO5vnbvVG70kzdgzXppzM.roa
Signing time:             Tue 01 Feb 2022 01:31:00 +0000
ROA not before:           Tue 01 Feb 2022 01:31:00 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        110.50.64.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:31:00 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=9373AB006A0EE6F9DBBD51BBD24CDD8335E9A733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:70:91:90:89:39:f2:6c:6b:71:e2:2e:0a:
                    ae:7b:f8:63:87:b0:02:09:67:73:54:9f:7d:f2:1d:
                    21:4a:fd:11:72:4c:de:aa:78:ed:f2:fc:b2:08:bc:
                    05:8b:37:22:9d:2b:45:de:b5:8e:ee:57:e2:be:ff:
                    86:ec:76:76:d9:79:fa:9b:9c:68:09:78:20:22:8c:
                    ff:b6:94:f0:0a:f1:86:5d:f2:30:96:c8:d4:e7:c9:
                    99:ae:38:41:d5:99:3b:23:dc:1f:98:5e:d4:7c:80:
                    e9:cc:b5:5e:26:0c:98:14:1e:2c:a2:c9:7e:3e:8e:
                    f7:47:cf:ba:eb:0b:1d:da:94:a9:4c:20:64:05:90:
                    32:8c:4c:0b:0c:de:b6:1e:8b:42:0f:51:fa:84:41:
                    12:6a:09:e7:9e:04:37:fa:a6:15:77:c4:cf:58:63:
                    81:bc:88:80:97:8a:bc:df:a0:a8:c3:9f:93:0d:b1:
                    2d:16:f2:cc:12:ae:fa:0b:03:34:49:04:40:96:df:
                    c5:5c:d2:6a:b7:27:4d:65:e2:04:39:d5:df:6f:fe:
                    6f:61:e5:40:10:10:9a:35:d3:26:1b:d0:3c:de:96:
                    d9:3c:f2:0c:ae:1e:e4:7a:0b:6a:11:ef:8f:3d:39:
                    6b:5c:54:e5:bd:fc:58:fa:1d:8e:2c:bf:20:62:aa:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:73:AB:00:6A:0E:E6:F9:DB:BD:51:BB:D2:4C:DD:83:35:E9:A7:33
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/k3OrAGoO5vnbvVG70kzdgzXppzM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:f6:a0:9f:90:ca:6a:d5:0a:84:4c:f4:58:7f:c4:be:b6:
         9b:76:f6:bd:4a:01:ee:44:95:ac:bc:46:a2:4e:d2:a3:9b:02:
         8d:7a:83:1b:75:ef:11:81:0b:ab:94:ae:9f:d5:b6:4b:1c:40:
         ea:08:27:8b:63:90:c2:62:d0:db:7a:67:aa:9a:0d:31:60:81:
         09:c4:f4:89:c8:d9:96:fd:27:75:15:94:ac:12:9a:fa:84:57:
         1e:71:48:9c:f1:80:20:2c:c3:71:11:e9:3a:2d:f6:1d:eb:4e:
         1a:b7:d3:0c:73:5e:6a:af:23:27:3e:79:65:53:b7:47:d0:e6:
         55:fc:b9:e2:c9:7a:56:bf:a6:dc:17:00:80:ae:16:e7:88:fb:
         6d:c3:68:f0:88:d2:44:89:9c:ea:f2:91:3e:e0:08:41:d8:51:
         56:8e:f1:cc:39:ee:2b:31:da:e3:df:89:6b:d1:2f:ec:be:4b:
         7d:9e:e9:8a:75:34:3d:4c:a8:cb:08:82:53:a1:5a:1f:5f:51:
         c6:d0:54:04:06:01:ab:5a:17:37:03:75:57:1a:a3:01:cf:2f:
         b9:74:10:d5:28:df:c2:3e:2c:7f:ed:98:1d:95:02:23:77:ff:
         bb:e0:90:af:1e:57:48:d0:9b:64:17:e7:0c:91:8b:a2:e5:00:
         e9:58:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org