Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/QLEshk0uvTrv340GbHLAx7XYggs.roa
File:                     QLEshk0uvTrv340GbHLAx7XYggs.roa (raw, json)
Hash identifier:          eF0uDgfzpKam3ihE47PWM7jPOLdkAhw1WtTgLBU3kIQ=
Subject key identifier:   40:B1:2C:86:4D:2E:BD:3A:EF:DF:8D:06:6C:72:C0:C7:B5:D8:82:0B
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       46
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/QLEshk0uvTrv340GbHLAx7XYggs.roa
Signing time:             Mon 01 Aug 2022 01:29:00 +0000
ROA not before:           Mon 01 Aug 2022 01:29:00 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9621
IP address blocks:        203.209.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Aug  1 01:29:00 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=40B12C864D2EBD3AEFDF8D066C72C0C7B5D8820B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:f4:6b:31:74:9d:0e:39:a4:42:bf:e1:34:
                    1f:b4:53:00:ce:da:78:37:57:78:ad:b3:cd:78:d0:
                    25:16:6c:f9:3b:69:b6:cb:17:d9:2a:82:cf:44:d0:
                    ea:b1:96:70:f7:bb:20:01:84:4a:e8:76:f7:33:88:
                    87:cd:99:02:98:c6:02:6e:45:8c:5f:4e:ee:98:10:
                    e7:88:e9:b9:cf:0d:39:9a:82:d0:21:fb:a6:0a:dd:
                    30:d1:3b:a1:73:d2:34:97:13:ef:e0:6e:2f:fb:77:
                    21:e5:7f:95:fd:91:04:28:12:cd:49:4f:8c:73:9b:
                    99:e2:0a:86:cd:08:ba:39:6e:81:13:16:85:ae:98:
                    0e:e3:1c:bc:85:63:3d:e5:91:2c:f8:34:e2:4c:d7:
                    e0:e9:ab:f6:c2:48:f3:e4:93:80:d2:68:23:10:e3:
                    53:db:76:b1:a0:0a:b8:ed:3b:61:3b:eb:66:b4:86:
                    5a:ea:95:bc:1c:c6:87:60:b4:7d:fa:61:5d:66:4b:
                    e4:60:d3:f3:b6:bd:d9:c0:49:d5:c0:b5:10:bf:c7:
                    27:5d:79:9f:65:0a:30:b4:a4:db:f1:17:1a:4a:72:
                    49:68:dc:1a:ff:08:fc:f1:ff:6f:b0:d6:99:ca:d0:
                    f0:40:5a:e8:07:2c:58:a5:7f:83:db:6d:9d:9e:d4:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B1:2C:86:4D:2E:BD:3A:EF:DF:8D:06:6C:72:C0:C7:B5:D8:82:0B
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/QLEshk0uvTrv340GbHLAx7XYggs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:1c:fb:e0:13:4e:ee:cb:10:95:d8:a3:15:8a:0b:e4:99:4d:
         ac:06:0b:8e:ef:2e:3d:92:62:4a:be:63:70:56:67:9a:77:32:
         5a:0a:6b:f2:89:5e:61:fc:25:ae:dc:14:ca:46:e5:53:65:5e:
         55:ce:84:b8:17:77:4c:5b:5c:cf:76:ec:27:a9:b2:fb:07:a4:
         db:bc:d3:7e:a2:97:6d:61:24:98:66:dd:76:45:74:8c:a9:7a:
         ce:2f:14:9a:60:4c:66:a4:f4:45:25:12:c6:7e:f9:64:99:01:
         97:a3:c7:a6:7f:47:3a:17:c0:a1:3b:ea:21:af:db:4f:8c:27:
         28:91:7a:6e:59:be:68:a6:7e:17:c8:7b:88:47:ba:e6:7d:98:
         81:88:43:27:80:43:ad:29:3a:f0:a7:89:68:8f:be:27:be:8b:
         b3:77:e3:39:fd:29:76:d6:68:8b:e5:af:3f:e8:18:ac:41:d5:
         ab:d0:b7:0e:10:d1:f5:ac:76:9b:b5:8c:63:fa:fb:ca:63:c8:
         16:3e:c1:68:da:61:42:df:b6:5e:a4:5e:e0:49:4b:b7:81:2a:
         6c:fd:8f:d3:e5:bd:5a:e7:4b:47:54:3b:23:a3:27:74:c2:81:
         2d:9f:47:2c:e5:7a:c7:ff:bb:2f:76:20:68:88:ad:f4:e7:a2:
         32:4b:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org