Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/iycwuy-VNGOVvQjQHbvGVVCdAYU.roa
File:                     iycwuy-VNGOVvQjQHbvGVVCdAYU.roa (raw, json)
Hash identifier:          irRY+vdTNcjob826LtxM0kDND+aB/wuwsYPV8MC8VBQ=
Subject key identifier:   8B:27:30:BB:2F:95:34:63:95:BD:08:D0:1D:BB:C6:55:50:9D:01:85
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       BA
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/iycwuy-VNGOVvQjQHbvGVVCdAYU.roa
Signing time:             Sun 01 Jan 2023 01:29:10 +0000
ROA not before:           Sun 01 Jan 2023 01:29:10 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        61.120.200.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jan  1 01:29:10 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=8B2730BB2F95346395BD08D01DBBC655509D0185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:57:93:73:3b:42:24:c8:e2:7b:d7:46:4a:
                    cd:bd:aa:f3:95:a8:55:49:63:bd:3f:5d:01:cd:ab:
                    ca:d6:d8:19:f8:18:e6:17:cc:6d:09:72:36:46:e5:
                    b6:b6:1d:fd:c0:94:69:2c:fb:28:90:7a:ad:85:37:
                    27:67:ea:2f:40:75:4b:91:27:cb:84:0e:4e:d7:4c:
                    52:04:e0:8b:ba:67:72:06:04:b7:f2:62:60:8c:86:
                    82:98:12:25:d0:7d:78:c9:d6:6a:12:f7:73:dc:df:
                    d8:86:0d:5a:ed:c0:13:05:fc:89:0d:1c:31:a5:26:
                    32:22:e8:69:d3:f2:94:6f:4c:5c:e7:a9:b2:75:cb:
                    cf:7c:67:33:fd:03:f7:eb:37:74:09:3b:e2:eb:68:
                    32:62:1d:eb:55:b6:a2:a9:8d:04:e9:93:6e:0a:ae:
                    59:d8:af:84:dd:29:f0:81:15:86:0c:36:38:88:46:
                    92:39:b1:3d:1a:7a:c8:f9:77:3c:9f:12:b7:b6:31:
                    d3:a3:8b:7c:da:48:e2:dc:0e:34:d1:a6:6d:0b:43:
                    f1:f5:bd:27:31:79:03:c3:97:53:90:a7:22:b7:c9:
                    c5:8c:93:f3:05:34:bc:0c:e5:79:9b:28:47:18:3e:
                    19:9b:ae:ed:f6:06:ab:ac:7b:b2:93:5d:fc:bb:d0:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:27:30:BB:2F:95:34:63:95:BD:08:D0:1D:BB:C6:55:50:9D:01:85
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/iycwuy-VNGOVvQjQHbvGVVCdAYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:56:50:9b:36:62:03:b6:85:30:4b:8f:ae:e8:c2:15:73:4e:
         bf:91:30:6e:b0:37:ee:2b:96:ed:15:a5:0d:c6:93:6c:97:07:
         36:5b:20:c6:92:22:5d:70:02:ba:c0:ad:28:78:a3:71:a0:31:
         12:3a:2a:19:43:1a:3b:36:a4:b2:62:1a:3c:43:16:b0:56:f1:
         6a:f0:31:c6:34:b4:e8:82:1d:83:98:e9:59:24:e2:f3:b8:e4:
         22:63:38:86:6e:d9:4c:3c:b5:70:d5:3b:e1:7d:92:36:be:06:
         5e:13:07:0d:90:96:d9:e9:f0:6c:f0:18:f9:46:4a:99:04:99:
         84:59:7b:7c:ea:39:84:31:ec:8b:df:f8:a6:82:be:16:8d:3d:
         53:6f:46:6d:45:66:22:64:8d:58:f0:eb:fd:e2:c5:8a:7b:ec:
         d1:3f:bd:61:1d:41:c1:f0:60:c8:f8:5e:e6:ea:71:6d:79:18:
         24:ff:70:11:32:a7:0d:01:2a:5b:2e:c3:2b:34:2b:e9:e9:a6:
         d8:b9:7b:81:8a:f3:fe:7c:c6:10:e4:7b:71:84:54:bd:1b:b8:
         04:77:05:80:25:4e:82:e4:ba:e9:cc:e6:b3:50:03:41:15:b7:
         97:9d:c7:33:23:2b:9d:f6:ca:da:26:4d:08:a2:12:11:7b:9c:
         2c:29:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org