Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gndCc7zTS_8LOKASn2X0uPxAx6A.roa
File:                     gndCc7zTS_8LOKASn2X0uPxAx6A.roa (raw, json)
Hash identifier:          yHHQVlRhNzqiQQ0d7mvsw6pPHWNpB2DisQRArahWdYw=
Subject key identifier:   82:77:42:73:BC:D3:4B:FF:0B:38:A0:12:9F:65:F4:B8:FC:40:C7:A0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       AD
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gndCc7zTS_8LOKASn2X0uPxAx6A.roa
Signing time:             Sat 01 Oct 2022 01:29:17 +0000
ROA not before:           Sat 01 Oct 2022 01:29:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        163.49.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=82774273BCD34BFF0B38A0129F65F4B8FC40C7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:ec:1c:6b:26:a6:6c:3c:8f:ba:12:c1:e0:
                    bf:24:ad:a4:3b:3b:58:e5:e1:6e:93:c6:14:da:b7:
                    2a:9c:36:dc:01:d3:53:96:74:b6:1f:aa:c9:58:fe:
                    d0:56:63:94:31:60:3b:30:5d:d9:8c:b5:0b:5d:d1:
                    d4:b3:39:84:9d:fa:24:99:92:a5:3c:5b:7b:60:af:
                    31:4c:cd:44:2c:96:11:f5:03:a2:48:6f:84:85:a3:
                    22:f3:8c:e1:d6:4d:99:6d:75:64:46:b4:da:d8:00:
                    61:a7:b9:2d:f8:1a:60:f9:2d:7d:81:0b:bd:88:3e:
                    3c:aa:0e:b0:79:ab:3f:95:76:e6:84:7c:87:63:e4:
                    bd:89:1f:e3:70:47:0b:59:5a:57:c2:a7:4c:2e:49:
                    e5:af:5f:81:3a:0d:e8:93:93:bd:f9:c2:74:fd:34:
                    65:b8:54:d3:92:9a:7e:05:32:39:8d:fd:75:48:58:
                    e2:54:d0:c0:db:20:df:c9:fb:76:d2:e8:e1:d1:c1:
                    15:d6:2a:2d:2b:20:99:a8:a2:eb:38:7d:f0:79:21:
                    15:4d:ed:43:c0:95:56:16:dc:8e:b7:2e:ad:40:26:
                    45:12:a2:b6:ca:7f:02:1d:2b:14:f3:61:e5:15:02:
                    5b:8a:db:0f:2b:a6:b1:1b:bb:2a:84:05:e8:92:f7:
                    82:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:42:73:BC:D3:4B:FF:0B:38:A0:12:9F:65:F4:B8:FC:40:C7:A0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gndCc7zTS_8LOKASn2X0uPxAx6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:90:88:32:dd:4b:e8:6b:ca:1e:51:67:67:ba:f9:f3:86:6d:
         9e:26:91:7d:d8:32:57:17:7d:f3:19:1f:e6:fb:63:09:78:d3:
         d6:93:4e:bb:63:aa:fd:98:81:c6:73:67:42:9d:f1:e1:6e:68:
         fa:f6:c8:01:28:5e:d2:55:78:5c:8a:89:89:9b:af:e8:51:02:
         26:f0:5d:9b:af:24:4a:50:53:a9:de:29:49:4f:1d:2f:fc:2c:
         8c:de:76:5c:d4:67:05:77:79:60:5d:0a:d5:70:25:a9:79:7d:
         b5:c4:bb:a4:bf:98:c7:65:cf:5e:60:96:da:5d:c7:7d:2e:ab:
         08:0c:13:80:23:b4:af:74:5e:cc:af:87:e3:3b:8d:d3:5a:c6:
         a4:3c:92:0e:3d:16:42:ea:d5:0b:f1:ee:27:08:54:7f:22:da:
         ac:e2:f6:35:82:d3:2a:62:23:7f:10:2a:7c:a7:17:fd:6c:66:
         56:18:ae:8a:a3:8c:b0:10:7a:22:71:d4:5c:90:b9:97:46:3c:
         09:3c:85:58:0c:c2:1c:80:7d:47:61:9e:c8:0a:75:cd:2a:f5:
         bc:a6:22:bf:55:c4:3a:85:0a:a4:9e:a4:56:a6:3f:9a:06:db:
         3f:4e:5c:6e:26:a0:7e:f1:0a:ed:87:1f:a4:3b:28:2e:9b:42:
         1e:d0:fb:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MTdaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyNzc0MjczQkNEMzRC
RkYwQjM4QTAxMjlGNjVGNEI4RkM0MEM3QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVmewcayambDyPuhLB4L8kraQ7O1jl4W6TxhTatyqcNtwB01OW
dLYfqslY/tBWY5QxYDswXdmMtQtd0dSzOYSd+iSZkqU8W3tgrzFMzUQslhH1A6JI
b4SFoyLzjOHWTZltdWRGtNrYAGGnuS34GmD5LX2BC72IPjyqDrB5qz+VduaEfIdj
5L2JH+NwRwtZWlfCp0wuSeWvX4E6DeiTk735wnT9NGW4VNOSmn4FMjmN/XVIWOJU
0MDbIN/J+3bS6OHRwRXWKi0rIJmoous4ffB5IRVN7UPAlVYW3I63Lq1AJkUSorbK
fwIdKxTzYeUVAluK2w8rprEbuyqEBeiS94I7AgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUgndCc7zTS/8LOKASn2X0uPxAx6AwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvZ25kQ2M3elRTXzhMT0tBU24yWDB1UHhBeDZBLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AKMxMA0GCSqGSIb3DQEBCwUAA4IBAQBQkIgy3Uvoa8oeUWdnuvnzhm2eJpF92DJX
F33zGR/m+2MJeNPWk067Y6r9mIHGc2dCnfHhbmj69sgBKF7SVXhciomJm6/oUQIm
8F2bryRKUFOp3ilJTx0v/CyM3nZc1GcFd3lgXQrVcCWpeX21xLukv5jHZc9eYJba
Xcd9LqsIDBOAI7SvdF7Mr4fjO43TWsakPJIOPRZC6tUL8e4nCFR/Itqs4vY1gtMq
YiN/ECp8pxf9bGZWGK6Ko4ywEHoicdRckLmXRjwJPIVYDMIcgH1HYZ7ICnXNKvW8
piK/VcQ6hQqknqRWpj+aBts/TlxuJqB+8Qrthx+kOygum0Ie0PvR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org