Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/iRiVVZ2Hs0DDK46iybKtwBFEHt4.roa
File:                     iRiVVZ2Hs0DDK46iybKtwBFEHt4.roa (raw, json)
Hash identifier:          G5cirTk8bxedJ2cVzhQ8MR8XP7kzqyWX6XnJ6Q0uSAQ=
Subject key identifier:   89:18:95:55:9D:87:B3:40:C3:2B:8E:A2:C9:B2:AD:C0:11:44:1E:DE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iRiVVZ2Hs0DDK46iybKtwBFEHt4.roa
Signing time:             Sat 01 Oct 2022 01:29:25 +0000
ROA not before:           Sat 01 Oct 2022 01:29:25 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        210.149.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:25 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=891895559D87B340C32B8EA2C9B2ADC011441EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:b8:52:26:c7:c0:4d:25:19:2d:ff:8f:07:
                    f3:ed:9a:43:7c:f6:24:18:b2:9b:e5:06:2c:81:d8:
                    b8:73:12:bf:0c:0a:7b:ac:cc:a8:9e:ea:37:95:2d:
                    ed:19:fd:21:7b:50:a0:c1:85:65:9d:1d:88:da:fe:
                    cb:80:dc:fe:0c:92:d3:5a:fd:c7:dd:b6:da:f3:e5:
                    76:e9:da:a9:57:b5:8c:e5:38:b2:dd:81:d8:a6:6a:
                    63:ae:f5:ed:96:2a:95:c7:dc:06:30:87:c5:79:a8:
                    7e:e8:a2:2d:00:b6:13:67:ac:d6:0e:9b:e6:6b:63:
                    f3:54:ca:7a:f1:e1:a8:3a:6e:15:46:38:aa:8c:0b:
                    a3:e3:3d:44:89:49:6c:af:bf:5a:4e:e2:fe:40:ec:
                    5d:14:02:8d:1f:b0:e3:c8:26:ba:dd:91:84:4a:3e:
                    d9:01:66:7d:7b:a7:e7:eb:85:d1:9c:ee:7b:7a:71:
                    ec:26:41:19:3c:5c:81:06:2d:42:3c:a4:1f:70:1e:
                    26:64:85:df:4d:3d:b9:79:f1:85:90:ed:bb:d9:36:
                    b4:f5:3d:ec:09:db:e1:25:5e:de:0c:39:d7:2d:1d:
                    4e:e4:d0:ea:46:62:87:cc:71:38:c1:e1:f2:8d:7f:
                    94:46:7e:83:d6:38:75:c7:8c:3e:13:4d:4a:f0:bb:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:18:95:55:9D:87:B3:40:C3:2B:8E:A2:C9:B2:AD:C0:11:44:1E:DE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iRiVVZ2Hs0DDK46iybKtwBFEHt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:d1:40:78:7d:64:19:c8:93:bf:3d:1f:0c:9c:e5:6c:a1:fe:
         f7:44:46:e8:cc:0d:7f:18:56:6d:2a:a7:6d:27:df:f7:9c:62:
         7a:4c:64:b6:d5:41:21:e5:a1:4e:02:ea:28:89:7c:d6:1e:ca:
         b7:db:3f:03:4f:62:f0:ba:73:10:85:58:64:96:75:ca:0a:8c:
         4a:aa:6f:9d:bb:e6:cc:62:52:4c:7b:77:d1:f1:a5:77:f9:1f:
         e8:ab:70:90:7b:10:69:f3:85:c5:01:cd:a6:5f:d8:f0:ee:0c:
         88:b2:c9:8d:d9:ba:ef:c6:74:fd:9a:05:76:c5:d2:8d:c3:b6:
         77:e4:01:3f:97:4e:52:4a:87:ca:e0:3c:1b:bf:d4:0f:c4:84:
         56:d0:0d:1d:9a:ba:48:dc:26:18:e1:dc:cc:53:91:39:e5:1c:
         ed:8a:fc:ff:35:8d:81:ca:3c:fa:81:1d:2c:59:4b:79:87:dc:
         c0:2c:39:83:26:71:a8:45:32:ac:d2:25:98:f6:a2:76:a9:a5:
         7a:2c:9a:61:84:b8:98:8f:9e:95:39:7b:39:c4:5d:f9:67:af:
         c8:40:58:5b:c2:8d:c3:fe:1a:23:2d:5f:c8:ad:f8:0f:0d:1a:
         1d:e8:4c:83:d1:79:bc:4f:1e:f8:ed:17:5e:8e:d9:4a:ac:7d:
         79:31:4b:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MjVaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5MTg5NTU1OUQ4N0Iz
NDBDMzJCOEVBMkM5QjJBREMwMTE0NDFFREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx+bhSJsfATSUZLf+PB/PtmkN89iQYspvlBiyB2LhzEr8MCnus
zKie6jeVLe0Z/SF7UKDBhWWdHYja/suA3P4MktNa/cfdttrz5Xbp2qlXtYzlOLLd
gdimamOu9e2WKpXH3AYwh8V5qH7ooi0AthNnrNYOm+ZrY/NUynrx4ag6bhVGOKqM
C6PjPUSJSWyvv1pO4v5A7F0UAo0fsOPIJrrdkYRKPtkBZn17p+frhdGc7nt6cewm
QRk8XIEGLUI8pB9wHiZkhd9NPbl58YWQ7bvZNrT1PewJ2+ElXt4MOdctHU7k0OpG
YofMcTjB4fKNf5RGfoPWOHXHjD4TTUrwu6tdAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUiRiVVZ2Hs0DDK46iybKtwBFEHt4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvaVJpVlZaMkhzMERESzQ2aXliS3R3QkZFSHQ0LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANKVMA0GCSqGSIb3DQEBCwUAA4IBAQCr0UB4fWQZyJO/PR8MnOVsof73REbozA1/
GFZtKqdtJ9/3nGJ6TGS21UEh5aFOAuooiXzWHsq32z8DT2LwunMQhVhklnXKCoxK
qm+du+bMYlJMe3fR8aV3+R/oq3CQexBp84XFAc2mX9jw7gyIssmN2brvxnT9mgV2
xdKNw7Z35AE/l05SSofK4Dwbv9QPxIRW0A0dmrpI3CYY4dzMU5E55Rztivz/NY2B
yjz6gR0sWUt5h9zALDmDJnGoRTKs0iWY9qJ2qaV6LJphhLiYj56VOXs5xF35Z6/I
QFhbwo3D/hojLV/IrfgPDRod6EyD0Xm8Tx747RdejtlKrH15MUv3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org