Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/8KCWE9QrwI-RYpelpMc1GDW__z0.roa
File:                     8KCWE9QrwI-RYpelpMc1GDW__z0.roa (raw, json)
Hash identifier:          d5p8MPeMmeBoq4cTMYt17ox4Fp6a8J6deCV6BlSGgD4=
Subject key identifier:   F0:A0:96:13:D4:2B:C0:8F:91:62:97:A5:A4:C7:35:18:35:BF:FF:3D
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       6B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8KCWE9QrwI-RYpelpMc1GDW__z0.roa
Signing time:             Mon 01 Nov 2021 01:28:36 +0000
ROA not before:           Mon 01 Nov 2021 01:28:36 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        58.138.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:36 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=F0A09613D42BC08F916297A5A4C7351835BFFF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:58:e4:35:0b:bd:eb:c7:20:66:f6:28:0a:
                    e1:5e:19:d6:7b:87:b6:f7:f9:6f:9d:39:e0:d3:62:
                    ab:2d:b0:7c:31:b3:bc:bc:67:e6:cd:a1:7a:41:84:
                    3f:e5:7d:83:ef:fa:00:47:b1:f3:1f:c6:0d:2e:9f:
                    29:de:fa:96:73:ef:ff:30:fa:37:6b:b5:35:78:20:
                    a5:89:74:df:05:0d:8f:d2:ff:7e:95:a1:c2:4b:50:
                    00:24:1c:56:58:1c:03:13:6c:d5:a4:e4:07:f5:f5:
                    d4:61:31:69:2a:9e:8a:c1:76:5f:39:ff:a1:31:e9:
                    38:37:05:e6:fd:ae:8a:6a:7d:05:a3:89:f9:50:62:
                    5c:13:2d:24:5e:c3:10:9e:c6:51:24:c6:d9:73:fb:
                    82:24:26:be:ee:00:9c:4c:cb:9c:3d:b3:d0:7d:a0:
                    88:5e:91:84:db:68:f9:9c:47:69:97:d4:eb:f6:0e:
                    ad:54:dd:fc:0c:a6:2d:e6:62:e0:7e:d5:a6:39:95:
                    00:5b:1d:ba:bf:66:dc:b2:ec:e7:a6:5e:1c:72:c8:
                    21:a2:05:ad:1b:86:e8:00:20:89:e5:64:db:03:1c:
                    9c:d9:f5:a5:cf:f8:c9:23:88:5a:49:bd:8e:04:f0:
                    bc:a1:5e:4e:73:b2:f2:b4:9d:1a:68:09:61:b7:4b:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A0:96:13:D4:2B:C0:8F:91:62:97:A5:A4:C7:35:18:35:BF:FF:3D
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8KCWE9QrwI-RYpelpMc1GDW__z0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:53:df:f8:ad:c6:b8:7c:55:fd:40:fa:b0:95:8a:a9:2e:7e:
         59:66:9f:9d:84:df:15:6d:d0:f5:72:c5:22:d0:28:46:35:4e:
         ae:f0:12:96:a0:bb:2b:63:4a:f2:c5:79:c1:03:a5:04:8f:d1:
         e7:73:d8:0e:ec:40:aa:b3:20:6a:20:4a:c2:d0:be:b0:a6:6f:
         c3:3e:f3:51:ca:e7:f0:ae:54:f8:5c:ee:b2:85:3a:62:5d:a4:
         e8:56:9b:2f:bf:9b:ba:1c:57:23:46:46:d7:0a:c5:78:3d:1d:
         3c:52:ca:62:15:0a:f7:62:19:fd:51:c8:64:10:c6:77:79:9c:
         1e:b5:f4:bf:28:f3:bc:43:54:77:8f:75:db:11:0e:1e:0e:d1:
         d8:4d:9e:f3:d8:ae:55:6e:53:e0:fc:e0:3f:00:3a:bf:69:4b:
         89:05:8a:bb:a3:3b:07:35:b9:86:cf:b8:56:7e:6a:e0:9f:c2:
         ad:14:07:52:4d:d5:be:ae:19:28:45:fa:f3:6d:fe:3d:29:21:
         b4:52:09:81:8a:8d:db:ec:eb:3b:05:8d:a0:c1:86:32:4e:3f:
         a3:b3:8e:89:d0:6d:55:28:65:65:97:4c:be:f6:7f:74:df:94:
         3e:f6:80:91:39:a6:ce:9c:37:9e:aa:7b:55:5e:4c:4f:fb:2c:
         7e:93:ba:5f
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzNloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRjBBMDk2MTNENDJCQzA4
RjkxNjI5N0E1QTRDNzM1MTgzNUJGRkYzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANODWOQ1C73rxyBm9igK4V4Z1nuHtvf5b5054NNiqy2wfDGzvLxn
5s2hekGEP+V9g+/6AEex8x/GDS6fKd76lnPv/zD6N2u1NXggpYl03wUNj9L/fpWh
wktQACQcVlgcAxNs1aTkB/X11GExaSqeisF2Xzn/oTHpODcF5v2uimp9BaOJ+VBi
XBMtJF7DEJ7GUSTG2XP7giQmvu4AnEzLnD2z0H2giF6RhNto+ZxHaZfU6/YOrVTd
/AymLeZi4H7VpjmVAFsdur9m3LLs56ZeHHLIIaIFrRuG6AAgieVk2wMcnNn1pc/4
ySOIWkm9jgTwvKFeTnOy8rSdGmgJYbdLGSMCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBTwoJYT1CvAj5Fil6WkxzUYNb//PTAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi84S0NXRTlRcndJLVJZcGVscE1jMUdEV19fejAucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQGOoqAMA0GCSqGSIb3DQEBCwUAA4IBAQCVU9/4
rca4fFX9QPqwlYqpLn5ZZp+dhN8VbdD1csUi0ChGNU6u8BKWoLsrY0ryxXnBA6UE
j9Hnc9gO7ECqsyBqIErC0L6wpm/DPvNRyufwrlT4XO6yhTpiXaToVpsvv5u6HFcj
RkbXCsV4PR08UspiFQr3Yhn9UchkEMZ3eZwetfS/KPO8Q1R3j3XbEQ4eDtHYTZ7z
2K5VblPg/OA/ADq/aUuJBYq7ozsHNbmGz7hWfmrgn8KtFAdSTdW+rhkoRfrzbf49
KSG0UgmBio3b7Os7BY2gwYYyTj+js46J0G1VKGVll0y+9n9035Q+9oCROabOnDee
qntVXkxP+yx+k7pf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org