Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/CCuDbIud2QFIa1cHOfe4HJvfinM.roa
File:                     CCuDbIud2QFIa1cHOfe4HJvfinM.roa (raw, json)
Hash identifier:          NUFdYn1L6q0IF2IketYbMYRVMegcFqYw+ijUKOBoRS4=
Subject key identifier:   08:2B:83:6C:8B:9D:D9:01:48:6B:57:07:39:F7:B8:1C:9B:DF:8A:73
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       06
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/CCuDbIud2QFIa1cHOfe4HJvfinM.roa
Signing time:             Thu 17 Jun 2021 09:46:56 +0000
ROA not before:           Thu 17 Jun 2021 09:46:56 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     24277
IP address blocks:        203.160.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 17 09:46:56 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=082B836C8B9DD901486B570739F7B81C9BDF8A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:63:cf:f5:91:94:99:90:4d:50:b4:e5:a3:
                    56:38:5c:77:d9:1c:34:92:fb:dc:d4:c5:42:e9:95:
                    54:7b:22:93:e1:bb:c0:42:6e:e0:f6:7b:b9:de:32:
                    d7:3f:f4:49:d2:dc:a9:1e:d3:c1:20:88:17:bb:15:
                    50:b7:5f:20:0c:8f:1b:78:d8:7d:a8:eb:ba:df:15:
                    06:90:f4:2e:77:68:b1:be:30:45:aa:e3:cc:76:b0:
                    1e:b7:cf:76:f3:ba:ed:b4:8a:f2:18:d9:5d:d9:b0:
                    76:7a:9f:8a:a3:2d:57:06:7d:cf:a1:5e:25:d2:f3:
                    3b:e4:90:64:cd:6c:3e:31:91:b7:2a:da:cd:22:c4:
                    ce:30:a7:13:48:1d:5a:c0:1d:b5:f9:60:9b:54:be:
                    30:46:7f:78:1f:e6:c9:55:16:68:f1:91:33:d8:66:
                    ba:75:2c:0f:3c:21:97:66:20:20:b0:fc:7d:96:e9:
                    c2:60:24:be:1c:42:59:50:d8:ee:59:a0:d2:00:a8:
                    dc:a8:9d:0b:4f:c3:c5:ec:15:2c:49:6e:6c:96:33:
                    a0:8f:8e:56:5a:d4:17:5c:34:cf:f3:a1:d7:a7:90:
                    b1:49:c6:c6:8c:c2:54:55:82:7a:72:3b:62:5e:2c:
                    bd:89:d4:f4:f4:b5:80:b0:4a:68:e7:3d:f0:f4:e1:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2B:83:6C:8B:9D:D9:01:48:6B:57:07:39:F7:B8:1C:9B:DF:8A:73
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/CCuDbIud2QFIa1cHOfe4HJvfinM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:65:e0:7f:c2:f6:a2:c9:bf:47:9a:16:9b:eb:7e:4b:d0:61:
         83:d8:ce:d8:17:6b:ed:0d:ec:85:cc:7d:20:9a:62:a6:5a:3f:
         0d:88:31:89:c0:47:ce:0a:44:79:5d:d9:c8:5e:b8:54:f2:a3:
         9c:82:56:2e:51:29:d6:64:a6:b4:55:71:4a:c8:6f:36:87:b8:
         20:a8:e9:27:f8:ab:bd:93:b5:a5:eb:2e:9f:a3:44:96:3a:f5:
         31:f6:a2:fe:de:a3:56:56:f2:f5:7d:88:09:ff:b0:d1:99:cc:
         b4:fa:0d:18:71:cd:70:82:a1:7a:7b:11:c7:49:1d:b0:91:4d:
         60:0f:f7:4d:67:d7:30:fe:7e:e2:d9:31:7b:ad:65:0d:11:99:
         50:ab:39:b0:eb:b9:94:f8:18:0d:4c:41:73:3e:4f:af:dd:65:
         64:a1:f0:62:89:af:2e:26:f5:e7:e3:39:a0:3b:17:ea:2e:aa:
         b7:6c:01:dc:95:9c:96:03:80:dc:10:36:84:45:16:b9:9a:75:
         07:8a:56:c2:b1:c2:20:2c:e9:f2:11:c1:93:21:b0:99:7c:d9:
         a0:56:81:0a:b9:ab:b0:b5:91:3d:01:76:9a:82:34:4a:5f:53:
         bd:51:39:ed:1a:be:a6:a3:f7:42:6f:00:48:68:fa:7f:49:b2:
         04:c8:d1:c1
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIxMDYxNzA5
NDY1NloXDTIyMDYxNTAxMzAwM1owMzExMC8GA1UEAxMoMDgyQjgzNkM4QjlERDkw
MTQ4NkI1NzA3MzlGN0I4MUM5QkRGOEE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK4bY8/1kZSZkE1QtOWjVjhcd9kcNJL73NTFQumVVHsik+G7wEJu
4PZ7ud4y1z/0SdLcqR7TwSCIF7sVULdfIAyPG3jYfajrut8VBpD0Lndosb4wRarj
zHawHrfPdvO67bSK8hjZXdmwdnqfiqMtVwZ9z6FeJdLzO+SQZM1sPjGRtyrazSLE
zjCnE0gdWsAdtflgm1S+MEZ/eB/myVUWaPGRM9hmunUsDzwhl2YgILD8fZbpwmAk
vhxCWVDY7lmg0gCo3KidC0/DxewVLElubJYzoI+OVlrUF1w0z/Oh16eQsUnGxozC
VFWCenI7Yl4svYnU9PS1gLBKaOc98PThqX0CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQIK4Nsi53ZAUhrVwc597gcm9+KczAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDYzL0NDdURiSXVkMlFGSWExY0hPZmU0SEp2ZmluTS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLoBAwDQYJKoZIhvcNAQELBQAD
ggEBABFl4H/C9qLJv0eaFpvrfkvQYYPYztgXa+0N7IXMfSCaYqZaPw2IMYnAR84K
RHld2cheuFTyo5yCVi5RKdZkprRVcUrIbzaHuCCo6Sf4q72TtaXrLp+jRJY69TH2
ov7eo1ZW8vV9iAn/sNGZzLT6DRhxzXCCoXp7EcdJHbCRTWAP901n1zD+fuLZMXut
ZQ0RmVCrObDruZT4GA1MQXM+T6/dZWSh8GKJry4m9efjOaA7F+ouqrdsAdyVnJYD
gNwQNoRFFrmadQeKVsKxwiAs6fIRwZMhsJl82aBWgQq5q7C1kT0BdpqCNEpfU71R
Oe0avqaj90JvAEho+n9JsgTI0cE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org