Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/lUdBAt4oTwmOjF4q-J1E6bRP-1o.roa
File:                     lUdBAt4oTwmOjF4q-J1E6bRP-1o.roa (raw, json)
Hash identifier:          51e7hSIf8jDJ2pxf2dellMo3GhElXjheskPqRMMUpnI=
Subject key identifier:   95:47:41:02:DE:28:4F:09:8E:8C:5E:2A:F8:9D:44:E9:B4:4F:FB:5A
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       69
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/lUdBAt4oTwmOjF4q-J1E6bRP-1o.roa
Signing time:             Wed 01 Dec 2021 05:34:20 +0000
ROA not before:           Wed 01 Dec 2021 05:34:20 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     10021
IP address blocks:        110.50.72.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 05:34:20 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=95474102DE284F098E8C5E2AF89D44E9B44FFB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:f5:20:bd:5e:01:60:d2:cf:7e:05:6a:dd:
                    0b:68:78:28:22:ee:23:73:bf:7f:f0:af:f2:1e:79:
                    66:d7:5b:9b:81:95:18:0f:99:0d:4d:6a:0a:73:6f:
                    9c:e2:9b:8a:3e:01:06:3c:f2:08:ef:33:87:34:1b:
                    82:7b:c1:33:54:b3:b3:51:a8:a2:ea:04:5f:3b:4d:
                    22:f0:e6:ed:ba:bf:36:56:38:4b:7b:73:9b:a1:ac:
                    49:2a:0a:8e:8f:26:f9:6a:3c:35:11:0b:49:01:4a:
                    05:e9:41:55:9b:94:2e:ce:92:46:d0:17:c7:9b:29:
                    91:04:d5:7f:c0:cb:20:8e:ef:a0:0d:22:01:18:05:
                    03:4d:16:ce:28:e6:39:1d:1e:9b:01:60:9b:55:b9:
                    0b:69:72:ff:bc:90:95:51:73:50:3b:82:c3:2c:ea:
                    ec:8b:fb:20:e1:0e:92:89:2d:52:f1:b5:d5:42:31:
                    3c:b4:b1:56:42:08:f5:4f:93:4e:7e:d3:61:06:5b:
                    5a:0c:ba:86:2e:49:a3:37:bc:99:a7:ff:da:5c:ce:
                    f2:f7:df:dc:92:c0:1d:0a:91:c6:8a:60:71:dc:87:
                    24:df:f2:22:b5:90:43:02:2d:65:be:00:ad:2c:76:
                    a3:d1:3f:e9:23:e0:37:10:50:f3:bb:5c:b4:59:2e:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:47:41:02:DE:28:4F:09:8E:8C:5E:2A:F8:9D:44:E9:B4:4F:FB:5A
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/lUdBAt4oTwmOjF4q-J1E6bRP-1o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:e5:3c:d6:58:b4:ff:41:f5:f9:cf:20:1a:12:5d:54:9f:
         b6:58:a9:84:cf:f5:be:24:c4:2f:7b:95:b2:ca:af:24:35:9a:
         7a:c8:86:fb:8b:6f:db:0e:b4:19:c5:7d:43:00:d8:62:5b:21:
         6a:93:ba:ab:01:60:6f:6d:2d:24:9b:e6:cf:6d:87:e5:90:65:
         d3:08:98:28:02:84:aa:41:31:52:34:02:df:29:79:1e:6d:a0:
         64:b5:14:13:96:15:ed:a6:5a:6e:3c:a1:3f:8e:63:3d:c5:de:
         82:3e:53:8d:fc:bf:d9:3f:6e:0e:71:1c:6c:f2:e1:f7:7b:16:
         52:1e:a3:8b:5c:1f:bb:9c:37:cc:8c:1f:75:a4:11:e2:c8:99:
         65:27:d1:28:fb:18:bb:b7:99:49:54:3d:27:5d:c6:d9:42:8d:
         17:68:f2:9c:98:b6:dd:18:16:e5:1e:0d:87:fd:8e:e0:16:bb:
         4a:63:7b:cd:6b:fe:d9:dc:4a:27:76:9a:04:ae:5d:86:d4:82:
         6c:7e:e3:53:91:e0:3a:71:f1:4c:1a:29:8a:e5:4e:1a:e4:09:
         2a:94:d9:9f:93:0b:a7:4d:7c:6d:ab:76:e0:ad:6d:58:65:68:
         aa:d6:0b:82:67:58:88:4c:9c:4b:34:0d:54:09:a9:39:f2:7a:
         4d:87:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org