Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/2ICyknM8mBdyFVbiPvlRaFeqO_Q.roa
File:                     2ICyknM8mBdyFVbiPvlRaFeqO_Q.roa (raw, json)
Hash identifier:          w+wnA/ZMVs8eYFs75ofPIhYife1oON1dziqMKQkxOHQ=
Subject key identifier:   D8:80:B2:92:73:3C:98:17:72:15:56:E2:3E:F9:51:68:57:AA:3B:F4
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       42
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/2ICyknM8mBdyFVbiPvlRaFeqO_Q.roa
Signing time:             Tue 02 Mar 2021 08:21:34 +0000
ROA not before:           Tue 02 Mar 2021 08:21:34 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     10021
IP address blocks:        110.50.64.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar  2 08:21:34 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=D880B292733C9817721556E23EF9516857AA3BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:93:61:eb:9d:61:9b:61:5c:d2:54:e4:ac:
                    95:af:77:50:23:68:71:f5:17:10:e8:e3:ee:32:6c:
                    74:89:6b:5f:16:30:23:4e:24:fb:80:f1:e7:3e:45:
                    3a:97:5e:3a:6b:ee:5f:f8:b1:3c:69:bd:86:07:0f:
                    30:df:05:bb:c0:af:2c:fd:bf:a4:a4:e7:ea:c4:7e:
                    49:43:fa:4e:54:4b:19:40:03:8b:e9:10:43:b1:aa:
                    c3:8a:27:e7:47:4a:72:bb:eb:fb:08:32:11:7b:11:
                    6d:2d:35:2a:5a:16:be:7b:82:7a:e3:8d:02:95:c6:
                    df:07:00:8e:3e:b8:f0:9a:3b:ad:5a:17:dd:b8:67:
                    0f:45:a0:01:88:57:2d:b8:e6:5c:00:a3:55:21:53:
                    e2:86:b6:f5:28:db:da:58:27:94:9d:44:89:ff:33:
                    12:fd:b7:08:3b:7a:4a:4a:a8:57:22:ab:09:19:c0:
                    2a:2f:11:35:17:29:62:9f:8a:49:81:42:8a:7c:ac:
                    a5:41:3e:e1:c7:da:b8:95:43:4f:8b:a7:b2:58:8f:
                    ff:32:c0:41:49:fc:5b:ff:02:01:49:3a:ad:68:b4:
                    04:61:f6:73:23:57:4b:7e:c9:9a:e3:ad:54:1f:09:
                    76:71:95:0c:3f:56:04:52:96:00:0b:b9:f2:de:a9:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:80:B2:92:73:3C:98:17:72:15:56:E2:3E:F9:51:68:57:AA:3B:F4
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/2ICyknM8mBdyFVbiPvlRaFeqO_Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:11:35:28:fe:7f:7c:dc:df:ac:32:05:e1:4b:86:29:95:
         fe:d9:dd:75:df:0a:e5:d6:c4:1a:0a:fb:b7:39:a1:82:82:a0:
         63:0a:ef:d5:cb:12:98:29:05:a0:28:c5:ae:04:2e:7b:43:0c:
         55:bf:b0:62:0c:c2:a5:0e:60:ac:34:2c:7a:97:81:4a:bd:57:
         26:40:2b:1c:6b:04:49:0c:dd:ad:f8:bd:40:83:3b:ff:f2:14:
         03:6c:c2:3c:f9:07:b9:60:5b:fa:18:3e:79:e0:c1:37:53:8f:
         86:38:bc:f6:d8:6e:1c:34:54:6e:ed:22:c3:5f:44:72:fc:ab:
         46:84:98:f0:81:a7:55:43:6c:a4:a4:77:91:a0:7c:ff:a7:cc:
         9b:c2:0a:14:30:d7:f0:78:7a:2b:5e:8c:cc:02:3f:9e:e3:51:
         f4:24:7d:77:9b:a0:b8:8b:3b:ad:a1:ee:42:7c:7e:85:31:54:
         21:a3:09:b8:30:7b:24:c2:d1:75:3d:7b:42:2e:24:00:6f:e7:
         0e:40:a2:92:43:11:9d:50:61:39:8b:93:e8:2f:14:f5:ff:9d:
         8b:ec:3b:a1:6e:2b:85:61:e9:19:9b:dd:36:fa:fc:c1:7e:3c:
         a2:48:b3:b3:96:ba:69:f9:29:18:dc:7a:6d:b6:22:96:be:d1:
         0d:5b:c4:87
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MDYx
MERBNjhFOTNFRDUzOEE0OEE0NkM1MjE0MDI0RUQ1NEQwN0Y2MB4XDTIxMDMwMjA4
MjEzNFoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoRDg4MEIyOTI3MzNDOTgx
NzcyMTU1NkUyM0VGOTUxNjg1N0FBM0JGNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAObok2HrnWGbYVzSVOSsla93UCNocfUXEOjj7jJsdIlrXxYwI04k
+4Dx5z5FOpdeOmvuX/ixPGm9hgcPMN8Fu8CvLP2/pKTn6sR+SUP6TlRLGUADi+kQ
Q7Gqw4on50dKcrvr+wgyEXsRbS01KloWvnuCeuONApXG3wcAjj648Jo7rVoX3bhn
D0WgAYhXLbjmXACjVSFT4oa29Sjb2lgnlJ1Eif8zEv23CDt6SkqoVyKrCRnAKi8R
NRcpYp+KSYFCinyspUE+4cfauJVDT4unsliP/zLAQUn8W/8CAUk6rWi0BGH2cyNX
S37JmuOtVB8JdnGVDD9WBFKWAAu58t6puJMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTYgLKSczyYF3IVVuI++VFoV6o79DAfBgNVHSMEGDAWgBRAYQ2mjpPtU4pIpGxS
FAJO1U0H9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY5L1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRWTkJfWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRW
TkJfWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NjkvMklDeWtuTThtQmR5RlZiaVB2bFJhRmVxT19RLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA24yQDANBgkqhkiG9w0BAQsFAAOCAQEA
Z/ARNSj+f3zc36wyBeFLhimV/tnddd8K5dbEGgr7tzmhgoKgYwrv1csSmCkFoCjF
rgQue0MMVb+wYgzCpQ5grDQsepeBSr1XJkArHGsESQzdrfi9QIM7//IUA2zCPPkH
uWBb+hg+eeDBN1OPhji89thuHDRUbu0iw19EcvyrRoSY8IGnVUNspKR3kaB8/6fM
m8IKFDDX8Hh6K16MzAI/nuNR9CR9d5uguIs7raHuQnx+hTFUIaMJuDB7JMLRdT17
Qi4kAG/nDkCikkMRnVBhOYuT6C8U9f+di+w7oW4rhWHpGZvdNvr8wX48okizs5a6
afkpGNx6bbYilr7RDVvEhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org