Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/kcwRo4y8kBkrUm0wWv7joA4uitE.roa
File:                     kcwRo4y8kBkrUm0wWv7joA4uitE.roa (raw, json)
Hash identifier:          jTRYwQ5f9naJPKRb75VhAkuVW0i06UMbClEABzLqrHI=
Subject key identifier:   91:CC:11:A3:8C:BC:90:19:2B:52:6D:30:5A:FE:E3:A0:0E:2E:8A:D1
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       7D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kcwRo4y8kBkrUm0wWv7joA4uitE.roa
Signing time:             Mon 01 Nov 2021 01:28:41 +0000
ROA not before:           Mon 01 Nov 2021 01:28:41 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        210.133.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:41 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=91CC11A38CBC90192B526D305AFEE3A00E2E8AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:81:06:ac:a0:aa:00:02:84:6b:6b:e2:dd:
                    4e:55:43:c9:8c:41:92:a6:fd:4e:19:ec:9b:3b:27:
                    48:89:09:39:17:f6:06:e1:82:35:af:ad:01:2c:32:
                    88:b3:34:b8:69:61:9f:09:69:4b:7f:c1:21:d3:6e:
                    0d:77:65:f1:d2:3c:d2:53:56:a0:50:d2:3c:42:70:
                    43:5a:16:2d:bf:01:ca:36:77:8a:8f:25:2c:f6:90:
                    6d:45:0f:16:bb:dd:a9:73:8a:e4:02:00:d4:99:5b:
                    bc:c1:91:27:fe:af:ef:4d:da:38:55:06:d9:7a:05:
                    cf:bb:c6:8a:41:2b:10:82:20:a2:c5:54:cf:bc:ab:
                    a1:a6:99:83:c8:ac:37:5c:13:a8:2b:c6:20:bc:37:
                    5d:84:1e:27:93:62:60:2a:39:6e:7a:82:63:85:77:
                    26:c2:d0:17:cc:71:c3:4b:c6:79:42:71:46:3a:40:
                    4f:d4:c6:1f:93:8d:8c:3e:80:d7:aa:a8:5c:e6:53:
                    7e:85:13:bb:c6:a4:e0:01:60:64:2a:cb:69:6a:db:
                    64:10:7f:98:8e:0a:9b:03:01:e6:8e:6c:67:45:9c:
                    c6:d2:0b:90:5f:2a:53:4b:0e:cf:44:8b:c9:65:ce:
                    a1:b9:19:0e:b1:98:27:ac:9f:c5:13:18:2b:eb:9b:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CC:11:A3:8C:BC:90:19:2B:52:6D:30:5A:FE:E3:A0:0E:2E:8A:D1
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kcwRo4y8kBkrUm0wWv7joA4uitE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:0e:e4:b5:7f:61:37:44:7a:28:91:73:0b:10:60:7f:6e:d5:
         16:c1:3d:d1:86:58:24:41:6d:bf:7e:bd:b6:49:ae:0d:68:9f:
         45:14:c9:ef:ff:91:62:d4:07:46:b1:e0:6c:1a:04:12:54:2f:
         33:9f:9f:1b:91:21:ec:9c:c4:2b:fd:e8:7b:0f:2d:d6:04:6f:
         e3:d4:1a:7e:64:77:17:a4:c2:27:1f:9c:d3:ea:d6:21:09:af:
         99:bc:ad:01:f1:97:5d:ca:f5:96:f0:8c:47:9b:ef:2a:d7:af:
         77:f2:56:84:a4:11:f4:72:62:55:6c:04:95:91:6c:1a:6b:62:
         56:3b:d0:33:7c:aa:10:7a:5a:35:f5:82:87:4c:97:d4:dc:4e:
         b4:e7:9f:2a:67:dc:13:63:42:39:de:fd:83:27:7b:b1:8b:36:
         c8:91:17:0b:9c:f6:14:dc:e9:ec:42:c1:1a:9f:ea:f0:17:1a:
         16:d2:ec:c7:3e:a7:1c:da:be:2e:98:94:e1:42:c3:2f:e9:c7:
         94:7d:ff:ec:8d:3a:04:60:9c:8d:d7:7c:bc:fe:32:21:d5:d6:
         5a:8f:77:2a:01:c5:2c:f3:05:9c:8b:9f:20:a0:36:66:73:a5:
         de:f8:66:d0:91:1f:47:a5:df:ee:fe:90:1d:88:d6:e6:17:67:
         01:2f:7f:7b
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
Mjg0MVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTFDQzExQTM4Q0JDOTAx
OTJCNTI2RDMwNUFGRUUzQTAwRTJFOEFEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMb+gQasoKoAAoRra+LdTlVDyYxBkqb9ThnsmzsnSIkJORf2BuGC
Na+tASwyiLM0uGlhnwlpS3/BIdNuDXdl8dI80lNWoFDSPEJwQ1oWLb8ByjZ3io8l
LPaQbUUPFrvdqXOK5AIA1JlbvMGRJ/6v703aOFUG2XoFz7vGikErEIIgosVUz7yr
oaaZg8isN1wTqCvGILw3XYQeJ5NiYCo5bnqCY4V3JsLQF8xxw0vGeUJxRjpAT9TG
H5ONjD6A16qoXOZTfoUTu8ak4AFgZCrLaWrbZBB/mI4KmwMB5o5sZ0WcxtILkF8q
U0sOz0SLyWXOobkZDrGYJ6yfxRMYK+ub7xUCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBSRzBGjjLyQGStSbTBa/uOgDi6K0TAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9rY3dSbzR5OGtCa3JVbTB3V3Y3am9BNHVpdEUucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQG0oXAMA0GCSqGSIb3DQEBCwUAA4IBAQCXDuS1
f2E3RHookXMLEGB/btUWwT3RhlgkQW2/fr22Sa4NaJ9FFMnv/5Fi1AdGseBsGgQS
VC8zn58bkSHsnMQr/eh7Dy3WBG/j1Bp+ZHcXpMInH5zT6tYhCa+ZvK0B8ZddyvWW
8IxHm+8q16938laEpBH0cmJVbASVkWwaa2JWO9AzfKoQelo19YKHTJfU3E60558q
Z9wTY0I53v2DJ3uxizbIkRcLnPYU3OnsQsEan+rwFxoW0uzHPqcc2r4umJThQsMv
6ceUff/sjToEYJyN13y8/jIh1dZaj3cqAcUs8wWci58goDZmc6Xe+GbQkR9Hpd/u
/pAdiNbmF2cBL397
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org