Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/_iMpjL5unPvL_lUkcddVoHqjamI.roa
File:                     _iMpjL5unPvL_lUkcddVoHqjamI.roa (raw, json)
Hash identifier:          zoVvBIaUvr7a9cWL5xBGFe0IzsODldio7kv178PcIGc=
Subject key identifier:   FE:23:29:8C:BE:6E:9C:FB:CB:FE:55:24:71:D7:55:A0:7A:A3:6A:62
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       6B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_iMpjL5unPvL_lUkcddVoHqjamI.roa
Signing time:             Wed 01 Dec 2021 05:34:21 +0000
ROA not before:           Wed 01 Dec 2021 05:34:21 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     10021
IP address blocks:        202.7.105.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 05:34:21 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=FE23298CBE6E9CFBCBFE552471D755A07AA36A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a8:11:90:a3:be:4a:9b:33:2b:df:38:ff:cc:
                    4a:a1:98:2f:f9:ba:2d:ed:41:9b:7d:87:e5:63:68:
                    a4:fb:ac:44:db:a0:f6:7c:64:02:aa:8f:ef:9b:07:
                    3c:41:76:4a:a9:e3:d6:e2:68:3f:be:c5:2b:43:88:
                    b9:90:e3:1a:c8:dd:57:cf:0d:ca:7d:9d:ac:fe:a3:
                    99:3f:2e:de:69:bf:78:92:48:22:b8:25:7e:af:6a:
                    b6:85:6f:15:c7:03:5c:9e:21:48:49:0a:02:2a:db:
                    f6:33:35:30:09:66:60:1b:57:49:af:72:ce:07:2b:
                    d4:10:5f:9b:39:9e:bb:c7:fa:3d:ba:90:3f:d8:d2:
                    d7:79:d6:60:46:a8:3f:56:97:39:4c:ae:36:20:7c:
                    17:c0:e8:0f:09:ab:f4:90:6e:57:25:71:91:ff:04:
                    33:84:8d:8b:f2:df:1e:78:52:8c:9a:67:a8:55:8e:
                    a5:91:d9:9b:68:0d:c6:ac:99:1b:93:7a:5a:46:06:
                    2c:f6:b0:05:ea:be:c8:90:7a:76:ae:38:83:47:ef:
                    20:37:a9:bb:c7:51:97:66:c7:d9:c7:5d:5c:9f:e8:
                    85:f2:a2:16:cc:ef:cb:34:cd:95:d3:3e:1f:0d:bc:
                    64:df:c6:1b:4c:0b:17:8b:8e:22:12:b1:54:01:4f:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:23:29:8C:BE:6E:9C:FB:CB:FE:55:24:71:D7:55:A0:7A:A3:6A:62
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_iMpjL5unPvL_lUkcddVoHqjamI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:2a:83:eb:5f:f2:31:d9:86:04:8b:fa:be:73:b4:74:ab:
         34:52:11:2f:ef:94:8d:8a:74:39:5b:fb:8a:af:32:27:c2:65:
         d8:be:a1:fb:3d:5e:60:fe:91:c2:96:29:ac:f6:c2:06:3c:e2:
         8b:8e:b2:50:4e:02:d4:d4:5b:26:12:7e:44:eb:3b:e0:ef:bd:
         72:cd:b2:6a:15:e7:a9:92:5c:19:e3:e8:1d:37:f2:81:20:5e:
         f4:2f:71:c5:58:5b:df:08:18:d0:58:ef:ba:a0:a9:18:79:5e:
         bf:64:32:5b:69:e7:58:b5:a1:64:a5:26:b3:7c:8c:a2:14:1b:
         fa:f5:bf:d6:6a:d0:30:d3:bd:9c:15:b4:f3:34:40:bd:22:00:
         4a:75:fc:8a:80:71:e3:3d:1c:73:4a:60:a6:c6:75:ec:6c:71:
         51:d0:a2:eb:a6:99:d0:8c:a4:c9:cf:29:7d:4e:b0:bb:66:e7:
         1f:dc:85:a5:2e:7b:1a:e3:3d:c1:0b:20:b1:2a:3c:1c:b6:09:
         c2:59:62:a2:36:8b:10:d3:e7:42:eb:ee:33:0a:c3:bf:23:4e:
         8e:1e:02:c6:15:75:3c:6f:a4:97:46:45:c9:35:ad:19:ab:71:
         b5:01:a3:76:ab:de:0b:10:8f:0f:cc:c4:a0:92:1f:72:6b:a1:
         38:25:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org