Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/mx_b2mixymNtEQWRKF1XTCJzMvQ.roa
File:                     mx_b2mixymNtEQWRKF1XTCJzMvQ.roa (raw, json)
Hash identifier:          ZnhNl5/f7F7Uz0iscG7DfLqYsLtJD+eVLKBUKf38myo=
Subject key identifier:   9B:1F:DB:DA:68:B1:CA:63:6D:11:05:91:28:5D:57:4C:22:73:32:F4
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C0
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mx_b2mixymNtEQWRKF1XTCJzMvQ.roa
Signing time:             Sat 01 Oct 2022 01:29:23 +0000
ROA not before:           Sat 01 Oct 2022 01:29:23 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        202.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:23 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=9B1FDBDA68B1CA636D110591285D574C227332F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:61:b9:e6:dc:4d:e5:33:bf:d7:65:a0:cb:
                    ee:3e:78:b4:04:ad:56:3a:b3:e5:e2:18:82:e6:b0:
                    64:9a:db:13:2e:e6:14:86:a0:60:27:4b:44:17:1d:
                    5a:5b:93:d5:c3:66:2f:f6:e4:30:a8:ac:3b:55:70:
                    3e:63:96:c4:34:3d:d0:44:d2:cb:65:32:5c:e7:12:
                    51:f8:66:06:23:6b:6d:20:6f:cb:4b:51:48:1c:d5:
                    16:0b:66:d2:ae:df:a7:1f:b7:2d:13:2f:06:21:a8:
                    d1:4d:2c:ea:a2:63:f8:73:40:d6:7e:8a:38:35:2c:
                    c3:e3:76:a7:78:fb:40:5f:70:46:66:e0:5f:f2:f5:
                    69:95:69:05:56:71:f2:6e:7a:9b:44:0d:8f:3f:d3:
                    ad:8f:57:55:e5:ac:98:60:82:10:62:8d:41:83:2e:
                    5a:d5:15:a5:37:6d:7b:f2:14:64:d7:f2:89:e0:c1:
                    a7:56:d2:d7:5c:84:75:26:2c:f6:8f:be:53:12:87:
                    aa:65:3d:c7:bb:2b:08:14:b0:70:ad:be:ff:15:87:
                    71:84:f5:1e:af:4a:99:97:dc:3e:6e:fe:71:09:f3:
                    1e:ed:15:20:95:64:4b:fa:ae:45:a5:a1:7e:58:33:
                    a8:23:7d:07:ec:db:ae:f7:31:04:ea:ab:69:bf:89:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1F:DB:DA:68:B1:CA:63:6D:11:05:91:28:5D:57:4C:22:73:32:F4
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mx_b2mixymNtEQWRKF1XTCJzMvQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:03:a3:9a:7c:77:fb:4e:b6:c6:ac:52:4e:75:71:85:73:6b:
         96:a7:35:ba:ce:49:5d:82:46:64:0e:56:90:6b:50:48:0a:16:
         57:13:36:93:f2:4c:62:04:1a:aa:75:51:36:c9:b4:05:11:77:
         f3:ef:f8:e7:eb:5f:f0:c0:7b:7a:67:ac:bc:7b:4a:0f:4e:1e:
         8c:e7:25:09:f6:b7:22:68:e4:09:9f:88:2f:4b:7a:cb:1c:61:
         61:a1:0a:09:35:88:ae:e6:c3:c9:44:50:8b:a9:41:33:0a:14:
         50:19:d1:36:35:a3:7a:ef:a9:63:20:4c:41:40:63:d6:6b:e9:
         10:a9:46:4a:19:41:37:a4:22:48:25:ba:af:5d:21:5b:92:ed:
         3c:8e:f6:3d:76:34:d9:9c:fb:15:6d:dc:56:e6:d6:85:1e:87:
         53:6f:cb:96:e3:f2:fa:0b:27:79:e3:62:77:93:47:91:7c:3e:
         03:4a:f5:07:ed:5a:d1:1a:20:69:d8:22:98:f9:78:7a:a8:c0:
         11:d9:ab:c0:84:d4:0c:75:92:f1:74:29:64:da:3f:81:e7:a1:
         d8:7e:1a:c6:74:8f:1a:f9:62:7a:27:77:e0:33:03:01:3c:5e:
         42:5d:05:50:d5:73:c6:39:56:ca:e1:80:81:60:32:53:33:63:
         80:dd:00:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MjNaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlCMUZEQkRBNjhCMUNB
NjM2RDExMDU5MTI4NUQ1NzRDMjI3MzMyRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAEGG55txN5TO/12Wgy+4+eLQErVY6s+XiGILmsGSa2xMu5hSG
oGAnS0QXHVpbk9XDZi/25DCorDtVcD5jlsQ0PdBE0stlMlznElH4ZgYja20gb8tL
UUgc1RYLZtKu36cfty0TLwYhqNFNLOqiY/hzQNZ+ijg1LMPjdqd4+0BfcEZm4F/y
9WmVaQVWcfJueptEDY8/062PV1XlrJhgghBijUGDLlrVFaU3bXvyFGTX8ongwadW
0tdchHUmLPaPvlMSh6plPce7KwgUsHCtvv8Vh3GE9R6vSpmX3D5u/nEJ8x7tFSCV
ZEv6rkWloX5YM6gjfQfs2673MQTqq2m/iRofAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUmx/b2mixymNtEQWRKF1XTCJzMvQwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbXhfYjJtaXh5bU50RVFXUktGMVhUQ0p6TXZRLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AMrWMA0GCSqGSIb3DQEBCwUAA4IBAQBSA6OafHf7TrbGrFJOdXGFc2uWpzW6zkld
gkZkDlaQa1BIChZXEzaT8kxiBBqqdVE2ybQFEXfz7/jn61/wwHt6Z6y8e0oPTh6M
5yUJ9rciaOQJn4gvS3rLHGFhoQoJNYiu5sPJRFCLqUEzChRQGdE2NaN676ljIExB
QGPWa+kQqUZKGUE3pCJIJbqvXSFbku08jvY9djTZnPsVbdxW5taFHodTb8uW4/L6
Cyd542J3k0eRfD4DSvUH7VrRGiBp2CKY+Xh6qMAR2avAhNQMdZLxdClk2j+B56HY
fhrGdI8a+WJ6J3fgMwMBPF5CXQVQ1XPGOVbK4YCBYDJTM2OA3QAq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org