Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/nqwbtHkIYRdnN3j1pE5Yym_LpbI.roa
File:                     nqwbtHkIYRdnN3j1pE5Yym_LpbI.roa (raw, json)
Hash identifier:          V1kAYfmoH90whPdOzXJRf/P320xTP/utHBoLg8+2oPM=
Subject key identifier:   9E:AC:1B:B4:79:08:61:17:67:37:78:F5:A4:4E:58:CA:6F:CB:A5:B2
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       A9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nqwbtHkIYRdnN3j1pE5Yym_LpbI.roa
Signing time:             Sat 01 Oct 2022 01:29:16 +0000
ROA not before:           Sat 01 Oct 2022 01:29:16 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        113.197.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:16 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=9EAC1BB479086117673778F5A44E58CA6FCBA5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:69:6e:1f:8c:80:1d:eb:51:6b:b8:94:89:
                    31:06:4f:13:e7:de:3c:e8:7d:db:eb:2a:7b:f2:b3:
                    49:80:45:eb:74:8e:e5:d7:6a:d1:ef:5b:5a:4f:8d:
                    d1:e5:23:6e:aa:eb:0d:1e:d8:5b:d0:16:78:b5:1d:
                    27:7f:d6:f9:22:be:c9:e9:e0:e6:7b:1f:e3:b8:80:
                    e0:4f:68:fc:63:38:80:67:5f:00:c7:28:3a:47:66:
                    18:03:19:53:4f:72:67:68:93:82:f5:65:de:9a:32:
                    45:33:ac:77:09:72:a2:d9:4a:ed:58:39:c5:23:f3:
                    c5:96:7c:29:3f:aa:d4:06:8a:d1:1e:9c:c5:3d:2b:
                    2f:0c:81:3d:b4:29:49:82:77:0a:92:3a:68:03:ff:
                    00:e6:1f:fe:73:cd:28:26:dc:1f:55:1f:0c:bc:34:
                    b4:5d:c0:4b:46:3f:df:13:fd:2d:6f:20:22:22:b1:
                    a3:21:8d:70:bf:1e:3e:10:67:a2:7c:01:8f:5e:88:
                    d5:7e:84:de:67:57:7f:93:c7:76:97:19:ed:88:6f:
                    bc:bd:c2:48:61:0a:d1:82:c2:81:5b:21:1c:51:a8:
                    96:3e:14:58:5c:43:26:91:f4:ca:16:b7:a8:7f:dd:
                    83:9c:14:d6:d5:86:53:5d:e7:ae:54:34:f1:b1:ab:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:1B:B4:79:08:61:17:67:37:78:F5:A4:4E:58:CA:6F:CB:A5:B2
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nqwbtHkIYRdnN3j1pE5Yym_LpbI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:f8:8b:c3:17:c7:bc:a8:5d:a7:f0:34:2a:e8:92:12:9f:
         fd:5d:2a:68:27:2d:d9:07:ce:b5:96:92:28:30:b2:b4:f9:8a:
         fd:c6:71:3f:c4:a8:5e:32:74:b5:db:f6:fa:18:a7:f4:fa:07:
         4c:f9:4f:30:d5:3a:5b:42:2d:89:52:23:38:2b:ec:07:49:2f:
         8e:36:20:78:04:94:5d:39:42:02:fe:60:cb:1c:a0:07:a3:ee:
         da:fc:38:01:93:2b:47:4c:c6:db:eb:aa:88:f5:d4:b7:81:f8:
         8e:6b:74:60:07:c2:b7:57:07:44:5f:85:ab:24:f1:7d:71:0b:
         28:12:36:b2:d4:84:d1:ea:87:6f:20:3f:d5:31:ed:3c:57:e4:
         d0:3a:ef:cb:12:ea:1c:3a:d0:09:a7:41:e3:67:88:37:5b:bc:
         1b:1a:68:e3:68:2d:5e:1f:30:4d:56:7a:4f:9d:55:3c:f4:b7:
         b3:d6:c9:34:87:63:49:4a:b3:ec:b1:93:b5:42:4f:ee:39:b8:
         47:d7:52:0a:d1:bd:02:e2:ac:96:27:66:fa:46:0f:ef:f9:fd:
         e6:a9:00:25:93:83:34:a3:64:b4:95:53:dc:cc:59:d9:f8:d0:
         29:33:df:05:f5:d2:74:7e:11:65:f6:da:44:68:dc:48:1d:78:
         3e:0f:f8:b0
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MTZaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlFQUMxQkI0NzkwODYx
MTc2NzM3NzhGNUE0NEU1OENBNkZDQkE1QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/E2luH4yAHetRa7iUiTEGTxPn3jzofdvrKnvys0mARet0juXX
atHvW1pPjdHlI26q6w0e2FvQFni1HSd/1vkivsnp4OZ7H+O4gOBPaPxjOIBnXwDH
KDpHZhgDGVNPcmdok4L1Zd6aMkUzrHcJcqLZSu1YOcUj88WWfCk/qtQGitEenMU9
Ky8MgT20KUmCdwqSOmgD/wDmH/5zzSgm3B9VHwy8NLRdwEtGP98T/S1vICIisaMh
jXC/Hj4QZ6J8AY9eiNV+hN5nV3+Tx3aXGe2Ib7y9wkhhCtGCwoFbIRxRqJY+FFhc
QyaR9MoWt6h/3YOcFNbVhlNd565UNPGxqwvpAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUnqwbtHkIYRdnN3j1pE5Yym/LpbIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbnF3YnRIa0lZUmRuTjNqMXBFNVl5bV9McGJJLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
B3HFgDANBgkqhkiG9w0BAQsFAAOCAQEAAej4i8MXx7yoXafwNCrokhKf/V0qaCct
2QfOtZaSKDCytPmK/cZxP8SoXjJ0tdv2+hin9PoHTPlPMNU6W0ItiVIjOCvsB0kv
jjYgeASUXTlCAv5gyxygB6Pu2vw4AZMrR0zG2+uqiPXUt4H4jmt0YAfCt1cHRF+F
qyTxfXELKBI2stSE0eqHbyA/1THtPFfk0DrvyxLqHDrQCadB42eIN1u8Gxpo42gt
Xh8wTVZ6T51VPPS3s9bJNIdjSUqz7LGTtUJP7jm4R9dSCtG9AuKslidm+kYP7/n9
5qkAJZODNKNktJVT3MxZ2fjQKTPfBfXSdH4RZfbaRGjcSB14Pg/4sA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org