Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/eaefMP36CYn2M5rYeSqNKrQzn6c.roa
File:                     eaefMP36CYn2M5rYeSqNKrQzn6c.roa (raw, json)
Hash identifier:          /oWuuhpC7siIRi+ZYlG8ehl8a3j6t1ywbncw7PXqAhM=
Subject key identifier:   79:A7:9F:30:FD:FA:09:89:F6:33:9A:D8:79:2A:8D:2A:B4:33:9F:A7
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       4D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/eaefMP36CYn2M5rYeSqNKrQzn6c.roa
Signing time:             Tue 02 Mar 2021 08:51:37 +0000
ROA not before:           Tue 02 Mar 2021 08:51:37 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     10021
IP address blocks:        202.95.208.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar  2 08:51:37 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=79A79F30FDFA0989F6339AD8792A8D2AB4339FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:74:60:5b:e4:50:c5:e9:3c:2a:8a:28:80:
                    ed:8e:53:7f:53:19:4e:0b:59:f9:13:c4:7f:40:a8:
                    72:b0:04:45:99:89:64:e9:68:e7:60:d3:96:af:9b:
                    2e:51:ed:ec:f0:5d:92:53:d4:5d:79:cb:5d:3f:b3:
                    bd:0b:8b:da:a9:29:c2:05:23:92:6c:e9:c5:c3:75:
                    ae:34:77:87:36:52:ed:8c:fe:06:0c:7c:0f:91:3c:
                    ae:41:4b:cd:fa:e8:3b:8b:ad:ab:9f:5f:c6:f5:de:
                    93:f2:d4:f3:43:fe:f6:2e:86:74:4a:8a:b1:1e:04:
                    9d:74:4e:ff:b6:af:3f:9c:70:fe:5b:3f:64:f4:d2:
                    3c:31:1f:78:46:40:c1:b1:af:92:75:de:9c:94:b0:
                    1d:73:71:cb:1e:4e:55:6d:a6:47:58:cf:8e:cd:cc:
                    14:da:7a:6c:f6:40:73:20:c8:86:6e:9a:4c:66:2d:
                    4f:31:3f:4e:91:ce:b4:b8:6d:9e:e4:0b:3f:f6:eb:
                    66:78:3b:9a:43:44:b4:5c:45:1e:6a:d2:8e:0a:32:
                    fd:6f:16:12:ea:a7:3d:f3:5c:8d:4a:df:d8:d8:42:
                    28:04:0a:c6:d9:10:a3:80:37:26:eb:9f:57:70:e5:
                    69:0b:72:4e:f5:2f:20:33:66:51:ac:f7:55:0c:b0:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A7:9F:30:FD:FA:09:89:F6:33:9A:D8:79:2A:8D:2A:B4:33:9F:A7
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/eaefMP36CYn2M5rYeSqNKrQzn6c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:98:27:d1:9e:e5:09:35:f7:99:36:23:a1:18:5b:c2:44:6a:
         53:b5:1b:48:27:f5:f4:d5:a9:eb:f5:63:72:35:30:08:ae:b3:
         3a:5b:74:ae:4e:e5:9a:f5:44:1d:d5:ac:67:0a:4e:ff:57:57:
         f3:6e:4c:79:1d:b8:47:a7:d0:07:f2:51:3d:43:a9:85:59:36:
         dc:7e:7d:a3:e9:7e:9d:5f:8a:73:f8:47:57:65:bc:5c:f7:f9:
         0c:cc:8f:bd:74:ed:fd:05:85:47:c7:eb:b6:7f:99:96:bd:d4:
         6d:48:cc:fd:56:d5:d9:32:01:e9:9a:14:a7:40:34:03:81:85:
         6a:3c:bb:e1:e1:95:80:db:19:85:fc:aa:94:04:46:de:a3:11:
         81:87:ca:ba:e1:9a:88:11:7b:e6:fa:57:8d:b9:fb:fd:3f:63:
         91:59:67:77:fe:21:d7:49:fd:68:22:7e:95:58:fd:8a:6a:9f:
         7c:3c:99:e3:7a:77:4d:66:e9:2e:fc:a2:94:4c:86:72:e3:c6:
         61:4e:7e:47:ea:f4:03:43:46:72:d2:f7:19:a3:45:d9:f4:f3:
         e3:4e:c3:31:1c:c9:64:0c:94:2c:f7:c7:3f:e8:29:38:ac:8b:
         7e:d0:f8:7c:57:46:de:2a:ad:08:44:fb:b8:7c:9f:31:52:25:
         cc:3b:ad:ac
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MDYx
MERBNjhFOTNFRDUzOEE0OEE0NkM1MjE0MDI0RUQ1NEQwN0Y2MB4XDTIxMDMwMjA4
NTEzN1oXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzlBNzlGMzBGREZBMDk4
OUY2MzM5QUQ4NzkyQThEMkFCNDMzOUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK8SdGBb5FDF6TwqiiiA7Y5Tf1MZTgtZ+RPEf0CocrAERZmJZOlo
52DTlq+bLlHt7PBdklPUXXnLXT+zvQuL2qkpwgUjkmzpxcN1rjR3hzZS7Yz+Bgx8
D5E8rkFLzfroO4utq59fxvXek/LU80P+9i6GdEqKsR4EnXRO/7avP5xw/ls/ZPTS
PDEfeEZAwbGvknXenJSwHXNxyx5OVW2mR1jPjs3MFNp6bPZAcyDIhm6aTGYtTzE/
TpHOtLhtnuQLP/brZng7mkNEtFxFHmrSjgoy/W8WEuqnPfNcjUrf2NhCKAQKxtkQ
o4A3JuufV3DlaQtyTvUvIDNmUaz3VQywrRsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR5p58w/foJifYzmth5Ko0qtDOfpzAfBgNVHSMEGDAWgBRAYQ2mjpPtU4pIpGxS
FAJO1U0H9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY5L1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRWTkJfWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRW
TkJfWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NjkvZWFlZk1QMzZDWW4yTTVyWWVTcU5LclF6bjZjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pf0DANBgkqhkiG9w0BAQsFAAOCAQEA
EZgn0Z7lCTX3mTYjoRhbwkRqU7UbSCf19NWp6/VjcjUwCK6zOlt0rk7lmvVEHdWs
ZwpO/1dX825MeR24R6fQB/JRPUOphVk23H59o+l+nV+Kc/hHV2W8XPf5DMyPvXTt
/QWFR8frtn+Zlr3UbUjM/VbV2TIB6ZoUp0A0A4GFajy74eGVgNsZhfyqlARG3qMR
gYfKuuGaiBF75vpXjbn7/T9jkVlnd/4h10n9aCJ+lVj9imqffDyZ43p3TWbpLvyi
lEyGcuPGYU5+R+r0A0NGctL3GaNF2fTz407DMRzJZAyULPfHP+gpOKyLftD4fFdG
3iqtCET7uHyfMVIlzDutrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org