Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gE8iHmuDkAxSyfVidAthT7-NIwU.roa
File:                     gE8iHmuDkAxSyfVidAthT7-NIwU.roa (raw, json)
Hash identifier:          zuG92aDQiURRifkWSPy8V1iknHDEbgTs2YiStrmECPU=
Subject key identifier:   80:4F:22:1E:6B:83:90:0C:52:C9:F5:62:74:0B:61:4F:BF:8D:23:05
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gE8iHmuDkAxSyfVidAthT7-NIwU.roa
Signing time:             Sat 01 Oct 2022 01:29:19 +0000
ROA not before:           Sat 01 Oct 2022 01:29:19 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        58.138.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:19 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=804F221E6B83900C52C9F562740B614FBF8D2305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:4b:54:0e:fc:cb:fc:63:a8:ae:63:85:66:
                    fb:04:6b:f7:90:f4:83:1a:dc:72:88:68:48:fa:c1:
                    22:d4:22:90:07:5b:7b:f8:e2:85:42:07:98:05:64:
                    d6:ca:b3:4c:da:5e:19:40:11:a5:a2:9a:a1:e9:aa:
                    83:01:4d:04:3f:af:e5:27:64:3d:ac:a0:67:50:a2:
                    70:2b:86:88:86:14:2c:49:02:d6:90:95:98:32:78:
                    dd:4e:48:b8:25:fa:6b:49:8e:25:9c:db:38:5a:e4:
                    54:be:de:a3:07:83:2d:16:4b:fe:eb:5d:5b:97:f3:
                    77:51:da:39:46:ca:b5:1f:ca:e0:80:09:2b:d9:36:
                    81:b4:aa:21:58:7c:97:c6:00:84:0e:78:60:a2:e2:
                    b2:51:19:6f:30:1d:a6:23:74:ca:db:2a:52:9e:36:
                    fb:54:c6:fd:57:d0:e6:61:26:89:87:e2:20:bb:e7:
                    ae:95:67:b2:21:b7:00:d0:ad:17:dc:4e:a0:f6:76:
                    9e:7c:62:ff:4c:e8:b5:25:92:a2:84:3d:6d:e9:12:
                    2f:3a:e5:24:65:af:31:f6:10:04:6b:7f:13:15:89:
                    cd:73:c6:6e:00:59:70:bf:80:36:7c:66:ae:6f:1d:
                    fe:10:29:bd:d9:4e:d3:f5:85:c0:ff:08:97:d5:28:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4F:22:1E:6B:83:90:0C:52:C9:F5:62:74:0B:61:4F:BF:8D:23:05
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gE8iHmuDkAxSyfVidAthT7-NIwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:e2:30:f5:cb:02:23:c5:9a:28:38:b4:e7:ba:68:00:16:
         cb:2a:97:af:ac:1a:ef:9e:11:2b:8f:74:c1:42:52:7d:5a:e3:
         b7:a1:a9:33:d4:f1:64:9d:04:12:b0:31:96:24:8b:60:45:a3:
         27:f8:09:58:27:8a:5a:cc:fe:4d:3d:88:16:39:f1:2b:9b:f0:
         1e:09:bf:be:28:34:4d:61:c0:2a:40:69:ce:11:82:33:c7:aa:
         56:ea:6a:66:9d:89:d9:a1:bb:ef:6c:2d:5d:17:93:64:8a:7c:
         e3:c5:c5:21:89:38:75:23:5b:fe:0b:ff:1f:3e:d6:75:49:8c:
         d2:f8:84:b8:f7:b9:97:37:e2:11:cb:d2:ac:41:f7:37:49:d2:
         ea:f1:a3:00:76:3e:59:64:be:83:48:6f:2e:c8:81:5e:81:77:
         79:fd:8d:eb:f4:4d:f6:e8:23:62:78:e1:7e:e5:25:06:b2:e8:
         3f:eb:30:83:38:60:90:5b:7a:d8:f9:b2:32:88:44:71:24:f8:
         d6:c7:e6:5b:49:30:54:22:fc:be:1a:5d:31:33:58:1f:d9:f2:
         e5:bb:9e:5c:44:fa:b4:ee:8e:a5:98:38:f6:b0:45:4f:55:a7:
         2c:04:0d:0e:2d:c5:5f:8f:69:ac:63:15:ae:ff:50:4a:66:ad:
         27:66:6e:b9
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MTlaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwNEYyMjFFNkI4Mzkw
MEM1MkM5RjU2Mjc0MEI2MTRGQkY4RDIzMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBGUtUDvzL/GOormOFZvsEa/eQ9IMa3HKIaEj6wSLUIpAHW3v4
4oVCB5gFZNbKs0zaXhlAEaWimqHpqoMBTQQ/r+UnZD2soGdQonArhoiGFCxJAtaQ
lZgyeN1OSLgl+mtJjiWc2zha5FS+3qMHgy0WS/7rXVuX83dR2jlGyrUfyuCACSvZ
NoG0qiFYfJfGAIQOeGCi4rJRGW8wHaYjdMrbKlKeNvtUxv1X0OZhJomH4iC7566V
Z7IhtwDQrRfcTqD2dp58Yv9M6LUlkqKEPW3pEi865SRlrzH2EARrfxMVic1zxm4A
WXC/gDZ8Zq5vHf4QKb3ZTtP1hcD/CJfVKMDBAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUgE8iHmuDkAxSyfVidAthT7+NIwUwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvZ0U4aUhtdURrQXhTeWZWaWRBdGhUNy1OSXdVLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BjqKgDANBgkqhkiG9w0BAQsFAAOCAQEADK3iMPXLAiPFmig4tOe6aAAWyyqXr6wa
754RK490wUJSfVrjt6GpM9TxZJ0EErAxliSLYEWjJ/gJWCeKWsz+TT2IFjnxK5vw
Hgm/vig0TWHAKkBpzhGCM8eqVupqZp2J2aG772wtXReTZIp848XFIYk4dSNb/gv/
Hz7WdUmM0viEuPe5lzfiEcvSrEH3N0nS6vGjAHY+WWS+g0hvLsiBXoF3ef2N6/RN
9ugjYnjhfuUlBrLoP+swgzhgkFt62PmyMohEcST41sfmW0kwVCL8vhpdMTNYH9ny
5bueXET6tO6OpZg49rBFT1WnLAQNDi3FX49prGMVrv9QSmatJ2ZuuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org