Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6BysXmL1ASNf09vDuBbQvm4hQnk.roa
File:                     6BysXmL1ASNf09vDuBbQvm4hQnk.roa (raw, json)
Hash identifier:          aokIrgMObF4JznlXIBbcptLmDonTkCeBQvgu8mBVg08=
Subject key identifier:   E8:1C:AC:5E:62:F5:01:23:5F:D3:DB:C3:B8:16:D0:BE:6E:21:42:79
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       FF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6BysXmL1ASNf09vDuBbQvm4hQnk.roa
Signing time:             Sat 01 Jan 2022 01:31:15 +0000
ROA not before:           Sat 01 Jan 2022 01:31:15 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:15 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=E81CAC5E62F501235FD3DBC3B816D0BE6E214279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:b9:41:89:bb:d2:8b:92:1c:7f:ab:24:eb:
                    a0:f6:b3:3a:69:b5:50:fb:bd:37:6f:3b:cc:18:56:
                    25:07:ea:9d:98:14:da:98:06:a0:de:fa:4a:fd:d9:
                    c6:9b:da:6e:34:f5:a5:62:a6:16:12:2e:a5:d7:ac:
                    81:ec:e1:3a:b4:43:42:b7:79:e1:bf:d5:35:00:27:
                    36:83:97:04:95:c6:e2:62:87:f0:09:b7:ce:c4:48:
                    21:a2:6e:bf:03:60:e3:95:03:b5:f4:cf:7f:e6:26:
                    4f:7c:5f:ef:4a:76:33:c9:37:69:3c:d8:29:35:73:
                    a4:af:90:3d:81:d8:3c:a8:e0:49:6f:84:f6:eb:7d:
                    87:42:90:a4:e2:62:99:c7:e4:42:51:a1:d9:6e:e2:
                    c9:0a:82:00:7e:2f:2c:18:29:ad:8e:b2:c3:00:ad:
                    a5:57:16:6f:8b:58:c6:79:ef:be:67:90:6d:58:62:
                    0e:41:13:16:f8:4a:21:97:56:4f:68:cb:ea:60:8e:
                    49:78:82:a5:4c:03:ce:94:bc:84:9f:9c:1d:e8:f5:
                    8b:9a:93:d5:e2:77:d6:0a:91:70:06:5d:4b:ab:89:
                    f0:72:ae:c5:9d:03:00:c8:0c:ec:95:8d:47:3e:ed:
                    c3:a7:2a:60:b4:d4:bf:d5:43:9e:b0:a6:c9:c3:8b:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1C:AC:5E:62:F5:01:23:5F:D3:DB:C3:B8:16:D0:BE:6E:21:42:79
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6BysXmL1ASNf09vDuBbQvm4hQnk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:4f:6a:03:86:81:59:bb:56:fa:27:ef:6b:f0:41:46:9a:
         12:56:73:c5:86:c4:34:71:ee:ab:e8:3c:d4:9a:f9:59:3d:6b:
         6b:7d:df:b6:ef:12:a5:c3:d5:7c:4b:1a:e7:89:65:64:f1:62:
         97:02:68:08:0e:7e:e0:eb:e1:c3:ab:ee:5e:e4:a0:9a:ab:2e:
         3b:9e:2f:9a:17:5a:61:67:2b:2d:9f:18:1b:1e:2a:f1:58:f7:
         b1:e8:ca:41:6e:be:57:3e:f1:38:7f:14:e6:34:46:6c:f6:7e:
         1f:c1:ce:9d:99:33:06:49:20:e4:c5:10:71:37:82:fc:bd:2c:
         cd:39:c5:e6:0e:cc:e2:6d:78:06:04:61:5f:2e:9f:fa:13:f5:
         85:06:03:a9:85:c3:bb:9a:cf:55:3f:9d:44:b5:1c:b4:dd:c7:
         33:4c:00:25:79:ed:0c:a1:a8:99:0f:94:ba:87:b2:2c:13:bb:
         13:2c:87:e7:4c:63:f0:10:d5:21:28:87:58:99:d9:7a:e5:cc:
         e2:51:55:d1:57:8c:49:01:69:d5:72:4f:b3:53:a1:85:09:eb:
         c6:9e:12:ab:27:65:9e:29:82:4b:a1:c5:ea:94:92:83:fa:4c:
         5c:6a:d6:b7:90:de:bb:cc:4c:fb:bf:20:92:15:45:20:13:b0:
         47:09:57:a7
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjAxMDEw
MTMxMTVaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU4MUNBQzVFNjJGNTAx
MjM1RkQzREJDM0I4MTZEMEJFNkUyMTQyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqqrlBibvSi5Icf6sk66D2szpptVD7vTdvO8wYViUH6p2YFNqY
BqDe+kr92cab2m409aViphYSLqXXrIHs4Tq0Q0K3eeG/1TUAJzaDlwSVxuJih/AJ
t87ESCGibr8DYOOVA7X0z3/mJk98X+9KdjPJN2k82Ck1c6SvkD2B2Dyo4ElvhPbr
fYdCkKTiYpnH5EJRodlu4skKggB+LywYKa2OssMAraVXFm+LWMZ5775nkG1YYg5B
Exb4SiGXVk9oy+pgjkl4gqVMA86UvISfnB3o9Yuak9Xid9YKkXAGXUurifByrsWd
AwDIDOyVjUc+7cOnKmC01L/VQ56wpsnDiwyzAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU6BysXmL1ASNf09vDuBbQvm4hQnkwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny82QnlzWG1MMUFTTmYwOXZEdUJiUXZtNGhRbmsucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMdRCMA0GCSqGSIb3DQEBCwUA
A4IBAQBFz09qA4aBWbtW+ifva/BBRpoSVnPFhsQ0ce6r6DzUmvlZPWtrfd+27xKl
w9V8SxrniWVk8WKXAmgIDn7g6+HDq+5e5KCaqy47ni+aF1phZystnxgbHirxWPex
6MpBbr5XPvE4fxTmNEZs9n4fwc6dmTMGSSDkxRBxN4L8vSzNOcXmDszibXgGBGFf
Lp/6E/WFBgOphcO7ms9VP51EtRy03cczTAAlee0MoaiZD5S6h7IsE7sTLIfnTGPw
ENUhKIdYmdl65cziUVXRV4xJAWnVck+zU6GFCevGnhKrJ2WeKYJLocXqlJKD+kxc
ata3kN67zEz7vyCSFUUgE7BHCVen
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org