Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/EMXNwaw_wJDPiF5ChtByES_tV9w.roa
File:                     EMXNwaw_wJDPiF5ChtByES_tV9w.roa (raw, json)
Hash identifier:          ywszCUV5E9Fj+ZqzAQUBBVbDx5oXCgY1kuAppT/HLbc=
Subject key identifier:   10:C5:CD:C1:AC:3F:C0:90:CF:88:5E:42:86:D0:72:11:2F:ED:57:DC
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       AB
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/EMXNwaw_wJDPiF5ChtByES_tV9w.roa
Signing time:             Sat 01 Oct 2022 01:29:16 +0000
ROA not before:           Sat 01 Oct 2022 01:29:16 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        118.151.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:16 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=10C5CDC1AC3FC090CF885E4286D072112FED57DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:53:96:d2:15:c9:e1:99:02:15:b7:ff:79:
                    c2:83:75:58:31:5e:88:c4:a1:ea:7f:2b:e2:66:fc:
                    cc:6f:0f:0e:30:c8:c4:78:1c:9e:0b:17:bc:d3:58:
                    8b:ac:45:ec:72:dc:cb:bc:9b:1d:fe:7c:d0:1a:db:
                    22:2f:ea:34:bb:f6:a9:24:ae:dc:81:70:3d:31:bf:
                    74:6a:ea:e2:a1:d3:f1:34:72:ad:1e:a6:55:ac:a4:
                    bf:5f:cc:3e:e7:b3:f2:cf:d3:d4:b8:5f:11:40:d9:
                    2d:77:9d:7a:fc:6b:c7:4a:22:9a:c9:14:92:da:5b:
                    8d:6b:46:f0:7d:57:c4:86:c5:d3:82:9e:3c:21:a5:
                    c3:ad:f6:4e:79:f0:fb:72:93:9c:cc:ff:29:56:02:
                    f3:9a:09:5d:03:9d:65:0a:60:3a:ab:a9:af:20:22:
                    a9:86:ec:9b:1b:84:ff:1c:a5:a2:1c:9f:9e:ed:20:
                    22:04:df:51:2d:9d:33:cb:ec:06:43:dc:ab:9c:24:
                    f7:ca:2a:59:74:f7:59:16:12:d6:87:58:a7:53:49:
                    68:1d:28:d7:38:08:c6:45:6a:a6:2d:3e:bd:ab:41:
                    a6:96:7d:73:20:0f:e6:26:82:6e:52:ba:3a:b3:7c:
                    48:4a:e3:60:12:8c:07:7d:42:02:ff:ad:c3:9b:c9:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:CD:C1:AC:3F:C0:90:CF:88:5E:42:86:D0:72:11:2F:ED:57:DC
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/EMXNwaw_wJDPiF5ChtByES_tV9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:71:1a:fd:d1:81:4c:cd:f3:5d:05:1a:93:e5:5b:e5:f3:8e:
         f1:93:3e:21:74:65:47:5f:47:2b:cf:1c:ef:99:cb:49:e7:cb:
         4a:88:d2:4a:52:40:c6:71:87:b4:6c:1c:13:f0:f4:61:70:0a:
         74:27:da:4b:cf:d8:c3:28:47:bc:f3:a9:ee:70:6e:63:25:2b:
         97:29:82:e8:75:63:39:f8:3c:b6:f9:31:5f:b4:a1:54:bb:86:
         8b:a8:41:03:6f:f1:a4:6b:20:5f:9b:8f:88:e7:ff:65:66:ad:
         6b:51:35:f8:73:2e:21:f0:78:d9:b7:d0:01:10:00:8a:44:ef:
         07:30:fe:81:70:9f:af:9f:8a:8f:33:2a:e5:a6:74:6d:19:95:
         3a:59:42:d8:36:b4:42:1a:4d:1f:56:62:c4:42:4a:4b:c5:2f:
         2f:1a:5f:02:fa:c5:e5:2b:f4:b0:cd:32:cf:36:2a:92:48:f0:
         08:f1:e6:3b:fc:c5:22:99:b3:36:84:68:98:83:64:43:63:d7:
         b3:3e:54:32:0f:de:ff:9b:73:d9:19:93:20:37:54:db:83:ed:
         14:9f:2f:b0:2a:ad:4f:1a:f4:a2:2c:fb:d5:15:d3:ff:77:d0:
         f2:28:b6:ea:d7:8f:c2:e0:f7:ce:66:fd:b5:cb:88:02:34:8f:
         7f:54:f1:67
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MTZaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwQzVDREMxQUMzRkMw
OTBDRjg4NUU0Mjg2RDA3MjExMkZFRDU3REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5XVOW0hXJ4ZkCFbf/ecKDdVgxXojEoep/K+Jm/MxvDw4wyMR4
HJ4LF7zTWIusRexy3Mu8mx3+fNAa2yIv6jS79qkkrtyBcD0xv3Rq6uKh0/E0cq0e
plWspL9fzD7ns/LP09S4XxFA2S13nXr8a8dKIprJFJLaW41rRvB9V8SGxdOCnjwh
pcOt9k558Ptyk5zM/ylWAvOaCV0DnWUKYDqrqa8gIqmG7JsbhP8cpaIcn57tICIE
31EtnTPL7AZD3KucJPfKKll091kWEtaHWKdTSWgdKNc4CMZFaqYtPr2rQaaWfXMg
D+Ymgm5SujqzfEhK42ASjAd9QgL/rcObyYKNAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUEMXNwaw/wJDPiF5ChtByES/tV9wwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvRU1YTndhd193SkRQaUY1Q2h0QnlFU190Vjl3LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BnaXgDANBgkqhkiG9w0BAQsFAAOCAQEAAHEa/dGBTM3zXQUak+Vb5fOO8ZM+IXRl
R19HK88c75nLSefLSojSSlJAxnGHtGwcE/D0YXAKdCfaS8/YwyhHvPOp7nBuYyUr
lymC6HVjOfg8tvkxX7ShVLuGi6hBA2/xpGsgX5uPiOf/ZWata1E1+HMuIfB42bfQ
ARAAikTvBzD+gXCfr5+KjzMq5aZ0bRmVOllC2Da0QhpNH1ZixEJKS8UvLxpfAvrF
5Sv0sM0yzzYqkkjwCPHmO/zFIpmzNoRomINkQ2PXsz5UMg/e/5tz2RmTIDdU24Pt
FJ8vsCqtTxr0oiz71RXT/3fQ8ii26tePwuD3zmb9tcuIAjSPf1TxZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org