Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/uB99kx4Xtdq05XsOMa4zprsD2Fw.roa
File:                     uB99kx4Xtdq05XsOMa4zprsD2Fw.roa (raw, json)
Hash identifier:          fRL3/Q38HF6SqPWmawaIniZu91fscH0r7/OTkGFiiIE=
Subject key identifier:   B8:1F:7D:93:1E:17:B5:DA:B4:E5:7B:0E:31:AE:33:A6:BB:03:D8:5C
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       46
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/uB99kx4Xtdq05XsOMa4zprsD2Fw.roa
Signing time:             Mon 01 Nov 2021 01:28:13 +0000
ROA not before:           Mon 01 Nov 2021 01:28:13 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     131079
IP address blocks:        210.173.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Nov  1 01:28:13 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=B81F7D931E17B5DAB4E57B0E31AE33A6BB03D85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:a9:39:f5:46:eb:a2:ba:2a:6c:a0:4f:f0:
                    57:56:a4:1f:1f:82:cd:17:ae:95:9d:bd:b0:11:e1:
                    f5:85:67:36:3b:dd:73:25:57:77:40:55:c6:d2:c9:
                    23:90:ba:ab:4e:47:13:c1:6f:3d:79:28:4b:cd:07:
                    33:83:c9:24:7e:21:f6:b4:1e:9c:7e:83:8b:57:9f:
                    cd:89:dd:15:83:c8:62:28:b7:e8:4c:88:d0:8f:39:
                    60:c2:99:8f:d8:a3:4c:c0:0e:f0:72:a3:1d:ea:07:
                    78:08:d6:c2:82:11:da:eb:e5:2a:7b:0a:7d:df:28:
                    a4:b7:be:1d:21:1c:62:ea:54:d6:5e:9d:5f:89:11:
                    f2:a4:25:43:93:f8:b2:28:3f:3f:4c:fe:09:8c:de:
                    f7:00:e3:fd:c3:10:04:11:59:c1:a2:5a:73:61:1d:
                    fc:fb:70:25:d5:ff:f5:ab:52:ba:e5:44:f3:3d:ad:
                    ad:c3:3b:9a:59:86:c7:6c:37:08:eb:57:70:fc:f3:
                    35:14:d9:ad:88:1b:fe:45:35:b3:40:58:b2:ef:03:
                    3b:1b:a3:62:ce:a0:fb:2a:9d:47:71:86:ba:5b:ca:
                    41:20:c0:ef:9e:71:90:eb:ea:d1:0a:71:09:32:88:
                    77:e4:d0:79:d9:50:dd:e1:c1:8b:f0:49:90:c6:7d:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:7D:93:1E:17:B5:DA:B4:E5:7B:0E:31:AE:33:A6:BB:03:D8:5C
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/uB99kx4Xtdq05XsOMa4zprsD2Fw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:0c:fe:02:03:a5:dc:72:04:53:75:ca:ef:a0:69:a1:84:
         48:cc:be:b8:de:4b:86:3b:5b:4d:5a:77:a9:d2:95:cd:93:bd:
         9e:1f:f9:07:6c:85:3c:ff:5d:7f:71:d6:ec:54:e4:00:e8:46:
         0e:bd:6a:fa:ee:76:dc:b5:79:ad:d6:7d:fb:d4:a5:cd:82:3b:
         97:72:31:df:f2:6f:67:34:c2:01:3b:05:e8:71:68:92:56:1f:
         b3:5e:b2:b6:94:51:32:00:65:42:af:6c:12:9b:28:b4:e2:ed:
         09:e6:96:71:85:99:17:76:11:3f:bb:6f:3c:24:e3:3a:03:6f:
         46:7a:fd:20:f1:a5:79:30:7f:f3:44:eb:bf:fe:92:87:a3:4a:
         81:34:3b:63:5c:e6:83:d7:c0:56:f0:c4:f1:38:7a:76:47:15:
         3f:34:2b:9c:ab:50:18:98:25:b3:b9:c3:31:2d:22:bd:e2:4d:
         c1:57:58:95:a5:62:aa:29:18:86:56:a2:05:60:fb:10:5a:7e:
         cf:29:09:ec:eb:93:33:5d:90:a6:c9:e0:63:a8:eb:e2:c1:bc:
         99:19:5c:55:79:0e:ba:86:7c:52:ad:93:42:b0:36:e0:06:68:
         c2:df:af:47:d8:ff:2c:8d:eb:3a:0e:3f:52:2c:31:0c:c5:2e:
         97:f2:ab:95
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx
OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIxMTEwMTAx
MjgxM1oXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQjgxRjdEOTMxRTE3QjVE
QUI0RTU3QjBFMzFBRTMzQTZCQjAzRDg1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANS5qTn1RuuiuipsoE/wV1akHx+CzReulZ29sBHh9YVnNjvdcyVX
d0BVxtLJI5C6q05HE8FvPXkoS80HM4PJJH4h9rQenH6Di1efzYndFYPIYii36EyI
0I85YMKZj9ijTMAO8HKjHeoHeAjWwoIR2uvlKnsKfd8opLe+HSEcYupU1l6dX4kR
8qQlQ5P4sig/P0z+CYze9wDj/cMQBBFZwaJac2Ed/PtwJdX/9atSuuVE8z2trcM7
mlmGx2w3COtXcPzzNRTZrYgb/kU1s0BYsu8DOxujYs6g+yqdR3GGulvKQSDA755x
kOvq0QpxCTKId+TQedlQ3eHBi/BJkMZ9lPcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS4H32THhe12rTlew4xrjOmuwPYXDAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi
NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz
Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMDcvdUI5OWt4NFh0ZHEwNVhzT01hNHpwcnNEMkZ3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANKtvzANBgkqhkiG9w0BAQsFAAOCAQEA
B40M/gIDpdxyBFN1yu+gaaGESMy+uN5LhjtbTVp3qdKVzZO9nh/5B2yFPP9df3HW
7FTkAOhGDr1q+u523LV5rdZ9+9SlzYI7l3Ix3/JvZzTCATsF6HFoklYfs16ytpRR
MgBlQq9sEpsotOLtCeaWcYWZF3YRP7tvPCTjOgNvRnr9IPGleTB/80Trv/6Sh6NK
gTQ7Y1zmg9fAVvDE8Th6dkcVPzQrnKtQGJgls7nDMS0iveJNwVdYlaViqikYhlai
BWD7EFp+zykJ7OuTM12QpsngY6jr4sG8mRlcVXkOuoZ8Uq2TQrA24AZowt+vR9j/
LI3rOg4/UiwxDMUul/KrlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org