Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/aVB_ONQX0aBQ5PNhM-_8dOPXAj4.roa
File:                     aVB_ONQX0aBQ5PNhM-_8dOPXAj4.roa (raw, json)
Hash identifier:          zybunCKMv7W4sXZgTm6AIMyxKOhTQSYRUSsRQQt+SgQ=
Subject key identifier:   69:50:7F:38:D4:17:D1:A0:50:E4:F3:61:33:EF:FC:74:E3:D7:02:3E
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A9
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aVB_ONQX0aBQ5PNhM-_8dOPXAj4.roa
Signing time:             Tue 01 Nov 2022 01:28:08 +0000
ROA not before:           Tue 01 Nov 2022 01:28:08 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        110.50.76.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:08 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=69507F38D417D1A050E4F36133EFFC74E3D7023E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:e8:2a:3b:83:3f:45:73:b5:ba:81:27:13:
                    b4:5b:34:40:3b:c2:83:65:29:9a:bf:bd:c9:c9:19:
                    f0:12:4c:4a:5d:14:4b:5a:2d:23:3d:cd:da:5f:eb:
                    3c:06:81:80:f8:ac:e6:f2:9b:dd:f9:ae:23:18:57:
                    53:0b:ae:7f:55:bb:07:61:ad:bd:9c:31:27:8c:3b:
                    cd:d9:4a:29:6c:75:bc:2c:72:f1:da:6f:2f:46:d8:
                    3b:54:9a:92:e2:cf:c9:27:6f:f8:f8:60:9d:eb:f1:
                    e6:e8:c1:94:24:58:f9:b6:29:06:5e:ee:ba:65:e7:
                    88:86:b5:92:ba:2c:6a:e7:0b:06:f8:cb:66:81:45:
                    d9:27:46:65:76:be:04:9d:ba:d8:2a:eb:27:a5:5e:
                    14:0d:97:2a:25:32:19:b9:3e:51:52:ec:ad:e3:54:
                    9c:80:ad:06:12:80:cf:34:67:2f:fd:53:b8:7b:9d:
                    6d:2a:84:a4:f3:c6:b1:71:45:9c:b9:8f:61:a7:7a:
                    89:89:d1:3b:9c:a9:bc:4b:0e:55:37:c3:65:0f:91:
                    45:d2:04:5d:d6:23:dc:dc:c7:f0:29:d1:a9:a3:02:
                    ba:f4:52:d2:08:53:a6:eb:19:33:b5:73:62:6e:12:
                    76:c9:33:f7:06:fb:3f:37:70:7f:84:e4:e8:36:50:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:7F:38:D4:17:D1:A0:50:E4:F3:61:33:EF:FC:74:E3:D7:02:3E
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aVB_ONQX0aBQ5PNhM-_8dOPXAj4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:d0:fb:e0:0c:2a:7c:8c:b2:3c:e4:d3:cd:67:b5:f5:58:2e:
         95:f8:4e:ef:8f:29:5f:14:4c:f6:90:43:c5:21:7b:2b:82:8b:
         2b:37:3a:8f:93:95:0c:3f:01:a5:e7:28:2a:9b:8a:0c:e5:0a:
         61:19:43:e3:c2:23:0f:65:b1:5f:97:ae:8c:c2:b5:da:63:39:
         20:a6:80:22:f6:08:d6:78:e3:e0:5c:1c:0a:62:46:a2:8f:99:
         d9:85:bf:9c:a8:19:6a:93:26:b6:9a:da:5c:02:59:1a:91:b0:
         47:6a:33:7d:9d:41:83:df:84:24:56:6b:64:fc:52:bb:23:3f:
         fc:61:a0:92:fa:9a:97:6c:5a:21:ed:da:2e:55:f6:a0:44:6b:
         e7:2c:a4:e7:f7:89:57:e8:44:af:2b:26:1c:ab:9e:51:c8:9c:
         3c:35:a2:cb:fa:22:18:f5:b0:86:fd:b6:8f:af:a4:a3:e0:08:
         bf:c6:55:48:23:62:1b:3b:b7:52:43:ff:38:90:85:14:07:da:
         b0:00:65:82:d7:05:21:4b:d3:0b:d1:aa:53:cd:2c:fd:77:34:
         53:4a:1f:de:fc:99:5f:d0:18:e4:2d:99:e4:ce:13:e9:c8:2a:
         56:07:44:5b:9f:11:4e:db:da:ac:4d:c4:9d:b8:c9:a0:ec:cb:
         db:8b:e3:0d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMjExMDEw
MTI4MDhaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY5NTA3RjM4RDQxN0Qx
QTA1MEU0RjM2MTMzRUZGQzc0RTNENzAyM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCthugqO4M/RXO1uoEnE7RbNEA7woNlKZq/vcnJGfASTEpdFEta
LSM9zdpf6zwGgYD4rObym935riMYV1MLrn9Vuwdhrb2cMSeMO83ZSilsdbwscvHa
by9G2DtUmpLiz8knb/j4YJ3r8ebowZQkWPm2KQZe7rpl54iGtZK6LGrnCwb4y2aB
RdknRmV2vgSdutgq6yelXhQNlyolMhm5PlFS7K3jVJyArQYSgM80Zy/9U7h7nW0q
hKTzxrFxRZy5j2GneomJ0TucqbxLDlU3w2UPkUXSBF3WI9zcx/Ap0amjArr0UtII
U6brGTO1c2JuEnbJM/cG+z83cH+E5Og2UKi5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUaVB/ONQX0aBQ5PNhM+/8dOPXAj4wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L2FWQl9PTlFYMGFCUTVQTmhNLV84ZE9QWEFqNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuMkwwDQYJKoZIhvcNAQELBQADggEBALvQ++AMKnyMsjzk081ntfVYLpX4
Tu+PKV8UTPaQQ8UheyuCiys3Oo+TlQw/AaXnKCqbigzlCmEZQ+PCIw9lsV+XrozC
tdpjOSCmgCL2CNZ44+BcHApiRqKPmdmFv5yoGWqTJraa2lwCWRqRsEdqM32dQYPf
hCRWa2T8UrsjP/xhoJL6mpdsWiHt2i5V9qBEa+cspOf3iVfoRK8rJhyrnlHInDw1
osv6Ihj1sIb9to+vpKPgCL/GVUgjYhs7t1JD/ziQhRQH2rAAZYLXBSFL0wvRqlPN
LP13NFNKH978mV/QGOQtmeTOE+nIKlYHRFufEU7b2qxNxJ24yaDsy9uL4w0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org