Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Tm1MeDAu9IcbOzpo_lEBRR0tm3s.roa
File:                     Tm1MeDAu9IcbOzpo_lEBRR0tm3s.roa (raw, json)
Hash identifier:          ayBVFqBTwP8rWAK2AXnmVtrwFzIQsHOSCyGnt86SJ28=
Subject key identifier:   4E:6D:4C:78:30:2E:F4:87:1B:3B:3A:68:FE:51:01:45:1D:2D:9B:7B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       7E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Tm1MeDAu9IcbOzpo_lEBRR0tm3s.roa
Signing time:             Mon 01 Nov 2021 01:28:42 +0000
ROA not before:           Mon 01 Nov 2021 01:28:42 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        210.173.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:42 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=4E6D4C78302EF4871B3B3A68FE5101451D2D9B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:af:04:0f:93:93:f8:ea:f5:ba:e6:5b:fd:
                    84:69:70:18:25:c9:09:1d:4e:94:71:a8:61:42:65:
                    a3:4d:c9:0e:b9:c0:81:06:83:0f:4a:6e:d0:97:e8:
                    50:91:cf:1b:21:3c:29:b3:b8:ff:7d:b6:83:01:9e:
                    4b:36:c3:cb:7e:4a:2e:6c:68:93:b8:24:3b:d7:6a:
                    c7:e9:3c:63:36:8f:23:6f:73:bb:a2:44:00:6c:38:
                    2d:d2:23:b5:9e:39:04:98:b4:68:6c:de:85:12:e4:
                    9d:d0:fc:18:e7:ce:a7:2b:de:66:4a:3c:35:04:db:
                    d2:d3:f3:46:f2:f2:79:8c:bc:16:31:84:a2:d4:47:
                    86:8e:fa:d3:89:2b:21:37:8b:c1:b7:4a:6b:72:87:
                    5f:03:78:6c:71:d8:57:a3:1c:a3:12:0d:66:83:55:
                    bf:8f:11:26:ac:f0:2e:66:5a:ca:5f:c1:ab:b1:9c:
                    c0:00:84:b0:39:65:84:cd:ef:a8:02:98:fd:27:cb:
                    97:bc:de:5c:dc:91:d9:99:a8:1e:4c:e3:dd:82:20:
                    bc:e0:f9:ff:53:48:2d:da:b8:de:a9:41:40:e3:22:
                    3c:21:83:95:51:f0:4f:08:2e:2b:7f:97:ca:04:94:
                    2e:e6:e4:66:b3:81:4a:19:b3:74:35:4f:68:01:2d:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:4C:78:30:2E:F4:87:1B:3B:3A:68:FE:51:01:45:1D:2D:9B:7B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Tm1MeDAu9IcbOzpo_lEBRR0tm3s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:c0:0b:26:3b:29:c6:ac:15:54:db:6d:e0:64:67:45:b5:e0:
         8e:e8:29:f0:fd:8d:81:4b:cc:df:91:1b:da:9e:7e:21:d7:c0:
         af:45:b2:d9:9b:4b:c5:a8:60:de:f9:4a:f8:c9:8a:e8:8e:79:
         30:d4:2a:72:85:a8:97:12:6c:ff:53:85:67:1a:75:e5:f3:37:
         b7:ac:9b:54:d3:1a:2f:5a:14:ed:4a:66:2f:4e:b0:36:e0:05:
         ca:44:f8:96:7b:eb:2d:49:b9:1e:88:92:e5:19:25:ad:d6:37:
         13:1a:6c:84:e1:2f:78:fd:48:3c:fe:48:79:1c:c8:fc:7a:fc:
         d5:5c:46:77:2e:10:55:71:80:c5:ca:11:ec:31:ad:f7:f7:9b:
         bc:6a:dd:83:ca:5b:8f:41:a1:82:18:9e:60:1f:74:09:81:fe:
         07:35:fd:25:16:3a:1d:da:58:50:e4:1b:36:58:da:4f:92:20:
         9d:9b:f7:34:a3:bb:43:db:90:1b:f0:a8:8e:0d:e7:02:2c:33:
         b0:61:38:7b:c5:42:e7:b4:34:9a:2d:d8:01:15:e5:3c:fe:8f:
         86:55:b0:d4:ef:ca:e3:da:36:54:43:70:f3:f6:69:13:56:fe:
         1a:63:8d:a1:83:2c:59:c1:7d:85:33:ab:6b:21:48:37:4a:ed:
         4c:fe:3b:fd
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
Mjg0MloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNEU2RDRDNzgzMDJFRjQ4
NzFCM0IzQTY4RkU1MTAxNDUxRDJEOUI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM+krwQPk5P46vW65lv9hGlwGCXJCR1OlHGoYUJlo03JDrnAgQaD
D0pu0JfoUJHPGyE8KbO4/322gwGeSzbDy35KLmxok7gkO9dqx+k8YzaPI29zu6JE
AGw4LdIjtZ45BJi0aGzehRLkndD8GOfOpyveZko8NQTb0tPzRvLyeYy8FjGEotRH
ho7604krITeLwbdKa3KHXwN4bHHYV6McoxINZoNVv48RJqzwLmZayl/Bq7GcwACE
sDllhM3vqAKY/SfLl7zeXNyR2ZmoHkzj3YIgvOD5/1NILdq43qlBQOMiPCGDlVHw
TwguK3+XygSULubkZrOBShmzdDVPaAEtqVsCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBRObUx4MC70hxs7Omj+UQFFHS2bezAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9UbTFNZURBdTlJY2JPenBvX2xFQlJSMHRtM3Mucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQF0q0AMA0GCSqGSIb3DQEBCwUAA4IBAQCpwAsm
OynGrBVU223gZGdFteCO6Cnw/Y2BS8zfkRvann4h18CvRbLZm0vFqGDe+Ur4yYro
jnkw1CpyhaiXEmz/U4VnGnXl8ze3rJtU0xovWhTtSmYvTrA24AXKRPiWe+stSbke
iJLlGSWt1jcTGmyE4S94/Ug8/kh5HMj8evzVXEZ3LhBVcYDFyhHsMa3395u8at2D
yluPQaGCGJ5gH3QJgf4HNf0lFjod2lhQ5Bs2WNpPkiCdm/c0o7tD25Ab8KiODecC
LDOwYTh7xULntDSaLdgBFeU8/o+GVbDU78rj2jZUQ3Dz9mkTVv4aY42hgyxZwX2F
M6trIUg3Su1M/jv9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org