Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/5mRTth5d61OeyOeN8l8lZ--hUJM.roa
File:                     5mRTth5d61OeyOeN8l8lZ--hUJM.roa (raw, json)
Hash identifier:          iC4X7fA5G3pf2zQxOvR+vpbNpEybcYIjJ/j2p1eFfb8=
Subject key identifier:   E6:64:53:B6:1E:5D:EB:53:9E:C8:E7:8D:F2:5F:25:67:EF:A1:50:93
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       06
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/5mRTth5d61OeyOeN8l8lZ--hUJM.roa
Signing time:             Thu 25 Aug 2022 08:28:34 +0000
ROA not before:           Thu 25 Aug 2022 08:28:34 +0000
ROA not after:            Fri 25 Aug 2023 07:39:18 +0000
asID:                     9615
IP address blocks:        202.216.128.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 25 08:28:34 2022 GMT
            Not After : Aug 25 07:39:18 2023 GMT
        Subject: CN=E66453B61E5DEB539EC8E78DF25F2567EFA15093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:69:77:5d:9c:c5:5d:01:83:0e:bf:fe:ec:
                    40:ef:40:71:36:cd:72:ff:cd:fd:49:40:f5:84:b3:
                    58:b7:e9:f4:eb:62:3c:ff:e4:aa:c2:09:40:6a:19:
                    63:7f:e1:bf:52:ad:24:4a:94:da:d4:ce:dc:15:5b:
                    1b:4d:95:83:37:59:a5:73:86:04:2c:98:d7:89:ea:
                    7b:0e:4b:db:a8:ba:00:be:d4:56:57:8d:71:d2:26:
                    9b:7d:0f:24:ad:30:9e:9e:20:e2:18:44:76:1c:7e:
                    2d:0a:f8:ee:00:9c:22:6d:66:d5:5d:ab:55:7e:13:
                    c7:b8:36:f5:b2:be:c8:66:b9:c0:3c:f5:1f:f3:3e:
                    22:2f:71:0e:b0:6d:a9:2e:9e:ec:82:e4:19:1f:bd:
                    44:1b:dd:23:8f:10:ed:ba:35:8f:ed:a1:08:6d:6e:
                    d0:cf:0e:68:e9:f0:08:66:e7:2f:81:a0:0d:74:c5:
                    ca:fd:82:4d:3f:5c:76:c9:b9:1a:cb:62:94:c4:46:
                    92:7b:31:8e:2d:77:a8:5b:ba:56:cb:34:d4:0f:9f:
                    0a:58:c4:7e:17:3e:26:3c:d1:57:83:22:60:b6:4f:
                    1b:0e:0c:f4:7d:44:01:8e:79:0e:a2:bf:57:45:34:
                    12:fb:54:65:b2:da:4b:9e:1d:09:88:8f:ed:ab:a9:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:64:53:B6:1E:5D:EB:53:9E:C8:E7:8D:F2:5F:25:67:EF:A1:50:93
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/5mRTth5d61OeyOeN8l8lZ--hUJM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.216.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:ad:de:fe:12:c6:6e:4a:52:e2:03:c7:62:53:f1:e7:cf:
         4f:de:90:76:4d:a4:b3:f7:0d:27:16:54:b0:05:17:90:a0:e8:
         3b:25:a9:9e:a7:40:45:46:92:12:62:89:11:98:9a:e9:1c:ad:
         64:14:5f:6e:bb:e4:15:21:9f:14:b5:37:9f:39:aa:ed:e7:a8:
         5b:d9:42:4c:51:13:66:02:59:0d:9a:28:62:64:b3:17:72:d7:
         12:54:9f:af:f8:77:40:4b:a6:95:7b:57:40:4e:a2:6a:9e:9e:
         9a:1f:d3:b1:68:23:f6:c3:12:66:b0:f9:5c:43:b7:ab:ee:3f:
         78:c8:ab:9c:4c:e0:01:5e:16:b8:ea:79:8e:1d:a1:8f:2a:ce:
         18:4e:f9:cc:c9:07:f5:20:9a:74:b6:a3:be:b9:74:9c:72:28:
         2c:16:63:8e:1e:95:94:31:17:65:f7:63:97:24:05:91:10:34:
         4e:c1:eb:7b:07:a4:c0:e8:41:b6:82:80:ae:5a:97:56:cd:43:
         64:0a:c5:ed:11:ef:a4:c7:d9:3a:44:1b:bd:d5:f5:76:bc:db:
         56:20:c4:6f:c1:ec:87:b0:9d:93:89:1a:91:35:a9:26:0f:65:
         45:fe:5e:5a:53:b0:15:5c:65:a8:f7:72:f7:87:89:a9:21:0a:
         ea:16:10:8e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG
NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTIyMDgyNTA4
MjgzNFoXDTIzMDgyNTA3MzkxOFowMzExMC8GA1UEAxMoRTY2NDUzQjYxRTVERUI1
MzlFQzhFNzhERjI1RjI1NjdFRkExNTA5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKEvaXddnMVdAYMOv/7sQO9AcTbNcv/N/UlA9YSzWLfp9OtiPP/k
qsIJQGoZY3/hv1KtJEqU2tTO3BVbG02VgzdZpXOGBCyY14nqew5L26i6AL7UVleN
cdImm30PJK0wnp4g4hhEdhx+LQr47gCcIm1m1V2rVX4Tx7g29bK+yGa5wDz1H/M+
Ii9xDrBtqS6e7ILkGR+9RBvdI48Q7bo1j+2hCG1u0M8OaOnwCGbnL4GgDXTFyv2C
TT9cdsm5GstilMRGknsxji13qFu6Vss01A+fCljEfhc+JjzRV4MiYLZPGw4M9H1E
AY55DqK/V0U0EvtUZbLaS54dCYiP7aupKA8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTmZFO2Hl3rU57I543yXyVn76FQkzAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ
AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z
QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zNzMvNW1SVHRoNWQ2MU9leU9lTjhsOGxaLS1oVUpNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcrYgDANBgkqhkiG9w0BAQsFAAOCAQEACUyt3v4Sxm5KUuIDx2JT8efPT96Q
dk2ks/cNJxZUsAUXkKDoOyWpnqdARUaSEmKJEZia6RytZBRfbrvkFSGfFLU3nzmq
7eeoW9lCTFETZgJZDZooYmSzF3LXElSfr/h3QEumlXtXQE6iap6emh/TsWgj9sMS
ZrD5XEO3q+4/eMirnEzgAV4WuOp5jh2hjyrOGE75zMkH9SCadLajvrl0nHIoLBZj
jh6VlDEXZfdjlyQFkRA0TsHrewekwOhBtoKArlqXVs1DZArF7RHvpMfZOkQbvdX1
drzbViDEb8Hsh7Cdk4kakTWpJg9lRf5eWlOwFVxlqPdy94eJqSEK6hYQjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org