Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/sdh3e7N5Ms_-Uk__rix0aRieBmM.roa
File:                     sdh3e7N5Ms_-Uk__rix0aRieBmM.roa (raw, json)
Hash identifier:          HqAHyTB3Tci1sCQJxxOggec01RY92IEMSA2Ac77jhV0=
Subject key identifier:   B1:D8:77:7B:B3:79:32:CF:FE:52:4F:FF:AE:2C:74:69:18:9E:06:63
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       B8
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/sdh3e7N5Ms_-Uk__rix0aRieBmM.roa
Signing time:             Sun 01 Jan 2023 01:29:10 +0000
ROA not before:           Sun 01 Jan 2023 01:29:10 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.32.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jan  1 01:29:10 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=B1D8777BB37932CFFE524FFFAE2C7469189E0663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:78:21:c9:95:7e:7c:f2:cb:32:d8:6f:9c:51:
                    58:c5:3d:b9:cb:af:8a:a2:79:c4:0a:33:eb:f8:11:
                    89:d6:0d:3c:64:5d:4a:17:27:98:5b:9c:d4:7f:70:
                    67:df:e3:ca:65:b9:6d:c6:d7:1d:4a:e9:bf:16:b7:
                    7d:55:4e:b3:64:9e:07:33:e3:48:28:ee:26:12:f9:
                    c7:56:5e:27:cc:52:89:9f:2d:11:b4:3c:bb:75:6b:
                    64:d7:fa:6f:e2:e3:62:5f:27:a9:ee:2b:71:70:1f:
                    24:7d:e8:b3:90:24:b5:75:2a:8e:4c:9e:7c:8f:ff:
                    cc:49:3d:91:1d:e0:39:01:1b:e2:73:76:bd:40:fe:
                    10:a0:6a:b1:1e:02:59:56:de:80:d8:25:be:76:fd:
                    8c:8b:e0:b5:83:d3:26:82:3c:66:61:76:33:56:99:
                    86:af:a7:54:1c:c3:90:83:54:ea:8d:8e:19:da:18:
                    00:26:ad:c2:5b:92:77:d0:f4:31:58:03:d5:d2:8e:
                    57:ff:d6:fe:50:81:33:a0:ce:58:61:61:58:96:a9:
                    11:8c:17:1b:21:33:18:0b:46:bc:ba:25:ed:33:07:
                    88:9b:37:c4:cf:7e:80:02:81:bc:9e:2e:b5:3d:17:
                    68:87:40:5b:9b:de:4e:b6:c6:ab:bd:04:d4:00:5a:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:77:7B:B3:79:32:CF:FE:52:4F:FF:AE:2C:74:69:18:9E:06:63
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/sdh3e7N5Ms_-Uk__rix0aRieBmM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:42:d2:a5:02:a7:33:08:16:8a:50:26:3e:ff:f9:cd:df:
         1c:54:17:1b:31:5b:2e:2a:5b:f8:31:4e:06:d1:aa:31:bd:07:
         71:eb:58:c8:3c:51:1d:da:0e:3d:79:2b:7f:39:39:c1:b6:ea:
         fb:65:b4:6f:f6:6a:ea:68:62:12:4f:d1:50:d4:e7:5a:5b:9a:
         9e:9b:63:42:50:20:77:5d:94:b7:a5:26:be:11:fe:3c:c7:8e:
         66:f3:8e:0f:21:6d:f3:15:d3:a6:6d:91:4c:d2:09:d6:e1:41:
         fa:8f:09:0b:f1:0e:94:f6:78:c1:63:00:6f:09:4f:f6:e7:1a:
         4b:07:b3:e9:b7:cf:d9:22:0d:07:2e:fd:3b:e9:4a:fa:f4:42:
         f6:78:e4:56:35:b7:8d:f3:07:31:e0:ab:7d:e4:b4:09:dc:83:
         e8:07:a4:7f:46:ef:eb:ee:6f:2f:1a:cd:27:98:ad:0f:a9:2c:
         fc:9d:a7:be:10:46:56:7a:af:a0:6e:05:70:cc:31:ee:b0:a1:
         ae:84:c3:12:59:eb:73:dc:b2:38:58:43:e6:b3:4e:ac:3e:84:
         a7:56:64:50:65:2f:57:79:ae:8b:8a:f6:08:77:93:aa:b9:83:
         98:24:49:7f:60:ee:13:7f:96:5f:62:30:54:b8:19:da:89:fe:
         eb:15:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org