Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/aOkzBdRBK5oOX71AA1QjGsZiSmg.roa
File:                     aOkzBdRBK5oOX71AA1QjGsZiSmg.roa (raw, json)
Hash identifier:          M4s0OSfMf19OFcKfD1pZINXLH19srD4kY+KzviTXtJs=
Subject key identifier:   68:E9:33:05:D4:41:2B:9A:0E:5F:BD:40:03:54:23:1A:C6:62:4A:68
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       D1
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/aOkzBdRBK5oOX71AA1QjGsZiSmg.roa
Signing time:             Tue 01 Nov 2022 07:07:29 +0000
ROA not before:           Tue 01 Nov 2022 07:07:29 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2497
IP address blocks:        133.110.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 07:07:29 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=68E93305D4412B9A0E5FBD400354231AC6624A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:0f:05:b3:c8:c9:72:dc:e5:a6:d9:ec:58:
                    35:43:3f:d2:63:12:f1:39:ba:ba:ac:35:3c:9a:29:
                    60:49:f5:75:a1:90:7e:88:e3:91:0f:5a:37:bd:b2:
                    9b:e9:61:bf:03:3e:91:99:3c:4b:a2:d3:1a:bf:a5:
                    c4:f3:12:35:1a:63:cc:ac:61:3b:35:07:03:4d:f6:
                    fd:e3:b8:87:bd:70:3b:dd:e7:62:78:8e:11:be:6c:
                    8b:a1:eb:4f:8a:a0:4d:18:e3:f1:82:3b:a9:8d:15:
                    1b:59:1f:a6:a3:41:df:b7:af:4d:0d:e1:47:ec:a7:
                    f6:af:de:44:1b:aa:47:6a:4d:7e:5a:67:0a:00:aa:
                    31:30:f4:50:23:30:bb:13:87:69:91:7b:c3:e0:f4:
                    7d:a8:1f:08:8a:8d:be:4f:3a:47:d3:00:08:5a:1b:
                    32:8c:2c:74:9f:fe:a0:09:d4:eb:ff:9f:b6:70:f5:
                    a7:2c:44:03:26:c4:f0:fb:e6:c3:df:57:60:ce:93:
                    c7:f3:3e:e6:3a:7e:f3:ad:21:65:6b:00:58:7d:c5:
                    18:d5:3c:de:75:c2:27:82:ad:2c:68:65:0a:b8:bd:
                    4c:b8:19:f6:5e:91:14:13:90:64:d9:86:38:9e:da:
                    6d:6e:89:5d:ff:ff:d6:a5:95:0e:d2:ed:09:09:6d:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:33:05:D4:41:2B:9A:0E:5F:BD:40:03:54:23:1A:C6:62:4A:68
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/aOkzBdRBK5oOX71AA1QjGsZiSmg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:26:c1:ec:0a:05:f6:d5:6d:f6:fd:65:a4:d1:56:b9:f8:69:
         78:d9:76:32:48:3d:61:41:ab:a9:94:a7:5c:fd:9f:5a:d6:c0:
         87:29:2d:68:83:e8:c9:ea:f0:59:da:5e:88:25:09:2d:8b:90:
         a2:ed:e2:04:e1:5f:fe:dd:3a:e5:62:c1:0d:90:0f:4f:77:5c:
         3a:7e:cb:fd:bc:74:8e:02:5c:fd:34:55:27:80:2d:cb:ce:a9:
         58:67:aa:87:ef:61:bb:33:84:42:ce:3c:3e:09:7d:c5:79:f4:
         c7:a9:81:a4:86:d0:e6:27:91:69:5c:6a:f8:74:92:39:5e:11:
         7b:6b:16:4d:85:0f:06:9c:78:d0:e8:d1:b2:3c:32:69:8c:6c:
         79:c6:9a:2c:c4:d6:64:3a:82:57:8d:63:c5:9c:22:f3:8d:0d:
         b2:15:9f:cc:92:e2:77:f5:68:98:f0:37:f9:00:65:9d:e2:0d:
         90:04:f9:b3:00:b8:f8:e3:4e:6a:f8:03:12:c2:4f:54:ed:77:
         0d:b7:43:f4:52:c2:b4:98:3b:96:55:6d:31:62:94:2e:17:4d:
         4e:16:51:c8:52:69:42:5c:51:b2:c4:62:fe:f6:00:60:22:64:
         0e:a0:6c:62:45:13:ef:cb:48:03:71:43:74:21:a6:a3:57:13:
         30:c3:4d:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjExMDEw
NzA3MjlaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY4RTkzMzA1RDQ0MTJC
OUEwRTVGQkQ0MDAzNTQyMzFBQzY2MjRBNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDebA8Fs8jJctzlptnsWDVDP9JjEvE5urqsNTyaKWBJ9XWhkH6I
45EPWje9spvpYb8DPpGZPEui0xq/pcTzEjUaY8ysYTs1BwNN9v3juIe9cDvd52J4
jhG+bIuh60+KoE0Y4/GCO6mNFRtZH6ajQd+3r00N4Ufsp/av3kQbqkdqTX5aZwoA
qjEw9FAjMLsTh2mRe8Pg9H2oHwiKjb5POkfTAAhaGzKMLHSf/qAJ1Ov/n7Zw9acs
RAMmxPD75sPfV2DOk8fzPuY6fvOtIWVrAFh9xRjVPN51wieCrSxoZQq4vUy4GfZe
kRQTkGTZhjie2m1uiV3//9allQ7S7QkJbWvBAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUaOkzBdRBK5oOX71AA1QjGsZiSmgwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvYU9rekJkUkJLNW9PWDcxQUExUWpHc1ppU21nLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AIVuMA0GCSqGSIb3DQEBCwUAA4IBAQCSJsHsCgX21W32/WWk0Va5+Gl42XYySD1h
QauplKdc/Z9a1sCHKS1og+jJ6vBZ2l6IJQkti5Ci7eIE4V/+3TrlYsENkA9Pd1w6
fsv9vHSOAlz9NFUngC3LzqlYZ6qH72G7M4RCzjw+CX3FefTHqYGkhtDmJ5FpXGr4
dJI5XhF7axZNhQ8GnHjQ6NGyPDJpjGx5xposxNZkOoJXjWPFnCLzjQ2yFZ/MkuJ3
9WiY8Df5AGWd4g2QBPmzALj4405q+AMSwk9U7XcNt0P0UsK0mDuWVW0xYpQuF01O
FlHIUmlCXFGyxGL+9gBgImQOoGxiRRPvy0gDcUN0IaajVxMww02/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org