Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/sr4ve1xpfASZmYDtoYJkRvlnYJQ.roa
File:                     sr4ve1xpfASZmYDtoYJkRvlnYJQ.roa (raw, json)
Hash identifier:          FqE83UhXsXaJ9KDNRnEtJj4GOzbGsEBY4tnU994QyNU=
Subject key identifier:   B2:BE:2F:7B:5C:69:7C:04:99:99:80:ED:A1:82:64:46:F9:67:60:94
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A2
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/sr4ve1xpfASZmYDtoYJkRvlnYJQ.roa
Signing time:             Tue 01 Nov 2022 01:28:06 +0000
ROA not before:           Tue 01 Nov 2022 01:28:06 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     8220
IP address blocks:        61.120.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:06 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B2BE2F7B5C697C04999980EDA1826446F9676094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:94:c4:2f:5e:81:da:f5:56:b0:d0:44:33:
                    c7:ca:0f:b6:45:3f:8a:b0:a7:c6:36:44:fa:c8:17:
                    c8:aa:a8:fe:3f:fc:b0:6c:53:25:0b:0d:31:c1:6c:
                    2d:6f:34:78:31:47:6c:cb:3a:46:05:ee:4b:24:8e:
                    a2:57:0a:c8:7f:af:98:96:fb:3f:80:4d:82:be:ca:
                    10:48:3e:34:64:d4:85:15:b9:28:a6:df:1e:f9:53:
                    0d:84:27:0b:37:d2:e8:a1:8b:61:55:5c:c3:ee:0b:
                    19:a2:94:8d:90:0e:fc:35:af:ae:69:6f:9d:f8:26:
                    5c:00:2a:4d:2a:26:d3:65:f6:e6:37:d9:16:9f:d2:
                    eb:a6:8b:3f:3f:9b:e0:1d:10:f6:f4:c0:a3:e2:fc:
                    a1:68:93:2b:ab:d6:56:11:97:f4:0e:6d:ee:21:5c:
                    26:99:15:b5:f3:80:05:48:fe:fd:d5:61:08:80:d9:
                    82:b7:e9:0c:6e:6b:06:18:f8:1a:cf:45:e8:44:a1:
                    32:bf:51:53:67:ef:8f:d6:f7:66:34:8c:83:16:08:
                    e1:5f:d5:4b:94:26:0d:aa:82:e1:7c:8c:c9:79:e8:
                    4a:52:f1:83:19:88:1e:8f:de:f0:b2:b5:6f:9d:19:
                    c3:4b:c6:bf:57:e9:99:99:5e:37:53:cd:b5:65:90:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BE:2F:7B:5C:69:7C:04:99:99:80:ED:A1:82:64:46:F9:67:60:94
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/sr4ve1xpfASZmYDtoYJkRvlnYJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:65:85:59:d0:3b:05:d2:26:9d:0c:83:4d:1d:10:56:f4:
         ea:5e:a0:7a:e5:13:07:cb:44:d1:ed:c6:55:c4:08:48:44:32:
         72:4c:79:e1:93:fe:45:0c:46:0a:63:7e:cb:a0:2b:ff:92:2d:
         d9:a3:67:13:60:9a:46:2f:60:47:2b:24:cf:63:e4:e0:e0:58:
         b0:02:26:15:d6:a4:67:56:e9:b3:11:10:74:9a:75:53:5e:69:
         06:e2:f1:c2:c2:8f:01:cc:d3:4a:02:fb:27:21:50:9e:be:71:
         23:56:53:ed:09:b9:63:aa:a7:8b:e3:3e:9a:77:76:b9:41:9a:
         43:3d:08:ef:92:6e:c3:4f:8d:0e:e9:bb:4c:54:c0:b6:e2:df:
         02:cf:d3:8d:39:0c:bf:61:59:8e:78:61:d4:ca:63:1b:af:e6:
         7a:57:b9:fd:63:f1:8d:1e:41:b9:a0:08:6c:2c:68:21:46:46:
         0f:d7:59:d8:8b:38:42:c7:38:0d:ab:4f:f4:f2:61:76:cb:78:
         d2:c9:d6:df:23:9a:52:49:68:02:8b:1b:88:af:14:0a:3c:99:
         e6:9c:54:2f:e5:53:cf:38:ed:ee:54:a0:4c:74:f8:bd:96:2d:
         91:97:ca:75:0b:53:6d:3e:9e:22:76:2b:c8:a5:cc:f9:66:ad:
         38:f8:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org