Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/m5r9YYGD_PgV8QCIuvsUzI9UWLA.roa
File:                     m5r9YYGD_PgV8QCIuvsUzI9UWLA.roa (raw, json)
Hash identifier:          cE1Hg6d2rGKItg4Wx4lcCAI6U9z44GyrcT6m2VQVDQE=
Subject key identifier:   9B:9A:FD:61:81:83:FC:F8:15:F1:00:88:BA:FB:14:CC:8F:54:58:B0
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       8E
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/m5r9YYGD_PgV8QCIuvsUzI9UWLA.roa
Signing time:             Tue 01 Feb 2022 01:31:03 +0000
ROA not before:           Tue 01 Feb 2022 01:31:03 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        203.167.48.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:31:03 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=9B9AFD618183FCF815F10088BAFB14CC8F5458B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:b6:9d:09:db:8a:77:1d:43:c7:c5:05:5c:
                    b7:ec:ef:75:32:d7:75:8f:6b:eb:31:65:19:03:26:
                    9f:02:2a:20:91:fa:65:49:52:7f:20:6e:82:67:d0:
                    18:ff:b2:e1:52:a9:eb:9d:ad:48:b3:bb:6c:5a:03:
                    e4:98:e0:18:fc:e5:aa:3b:e6:ee:05:9d:b8:b6:50:
                    b0:5e:8d:37:83:36:7e:af:eb:d8:55:44:6e:2a:48:
                    52:ef:3a:5f:bf:1b:f9:6c:27:21:ec:a7:aa:79:0a:
                    e7:e4:5a:26:a0:d4:43:b4:81:da:b1:d4:82:a6:ff:
                    28:1f:c4:12:1d:25:0a:ff:88:b3:d8:e9:da:87:c7:
                    0b:74:ef:d0:64:d7:81:96:e0:ba:65:32:73:2b:4e:
                    b0:13:b3:61:1d:a0:91:a8:c2:e6:2a:56:f7:a4:89:
                    0a:0a:f1:8a:09:f8:61:33:33:d5:83:46:8a:f2:67:
                    f7:1c:59:cc:c9:20:ac:b8:3a:ac:dd:b7:3a:68:90:
                    a4:1c:39:71:6f:a0:d3:53:0d:9a:fa:a6:b8:75:11:
                    e1:48:f4:2b:9b:05:1e:67:0f:fb:8e:a5:15:52:1c:
                    52:d1:65:4a:42:a4:5d:9d:4c:db:cc:f9:21:ef:48:
                    ee:cb:14:65:fe:4f:fc:9b:bd:60:98:25:4f:93:e7:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9A:FD:61:81:83:FC:F8:15:F1:00:88:BA:FB:14:CC:8F:54:58:B0
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/m5r9YYGD_PgV8QCIuvsUzI9UWLA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:20:22:6d:5e:fb:99:b7:ec:ce:ed:15:50:b7:5f:ac:ac:64:
         c5:a5:15:e5:4e:73:7f:bf:5e:2d:a1:74:0e:6f:40:75:29:02:
         10:18:4d:2b:fc:d1:1d:c3:09:7d:97:b2:1f:11:b8:18:f4:a9:
         83:b0:6a:ce:e1:53:ee:dd:49:98:cf:c2:42:b1:65:12:fc:b4:
         e0:77:c7:36:ab:c9:39:5a:5d:f8:b2:af:ee:48:c8:b4:65:1b:
         59:93:4f:9b:73:5e:46:7f:e3:43:aa:3f:ad:1e:30:cd:58:e0:
         d9:00:00:8d:52:71:e0:43:69:0d:e8:95:26:28:f3:dd:be:15:
         78:3b:a7:8a:e7:60:c6:20:ab:78:bb:d7:91:7f:62:14:ee:ea:
         c3:3a:a1:4a:4f:43:58:1f:c1:99:24:da:7f:16:43:33:4e:2a:
         d4:3c:50:43:19:c1:41:72:d7:dc:4f:54:98:51:2d:bd:00:1e:
         88:79:0c:37:b5:b9:b3:97:62:4d:a6:44:80:9c:8c:24:a7:cd:
         db:b3:bd:01:39:5f:bc:7b:dc:4f:d9:33:08:b5:7d:db:ea:8c:
         41:7a:41:6c:ce:b7:16:53:f4:3f:34:3d:49:bf:5a:6b:9b:df:
         a3:1c:ad:01:21:ee:26:51:ba:9a:2a:a1:ac:08:9f:4d:4d:a6:
         32:02:33:b6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMjAyMDEw
MTMxMDNaFw0yMzAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlCOUFGRDYxODE4M0ZD
RjgxNUYxMDA4OEJBRkIxNENDOEY1NDU4QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUUbadCduKdx1Dx8UFXLfs73Uy13WPa+sxZRkDJp8CKiCR+mVJ
Un8gboJn0Bj/suFSqeudrUizu2xaA+SY4Bj85ao75u4Fnbi2ULBejTeDNn6v69hV
RG4qSFLvOl+/G/lsJyHsp6p5CufkWiag1EO0gdqx1IKm/ygfxBIdJQr/iLPY6dqH
xwt079Bk14GW4LplMnMrTrATs2EdoJGowuYqVvekiQoK8YoJ+GEzM9WDRoryZ/cc
WczJIKy4OqzdtzpokKQcOXFvoNNTDZr6prh1EeFI9CubBR5nD/uOpRVSHFLRZUpC
pF2dTNvM+SHvSO7LFGX+T/ybvWCYJU+T53NPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUm5r9YYGD/PgV8QCIuvsUzI9UWLAwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDY5L201cjlZWUdEX1BnVjhRQ0l1dnNVekk5VVdMQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLpzAwDQYJKoZIhvcNAQELBQADggEB
AMUgIm1e+5m37M7tFVC3X6ysZMWlFeVOc3+/Xi2hdA5vQHUpAhAYTSv80R3DCX2X
sh8RuBj0qYOwas7hU+7dSZjPwkKxZRL8tOB3xzaryTlaXfiyr+5IyLRlG1mTT5tz
XkZ/40OqP60eMM1Y4NkAAI1SceBDaQ3olSYo892+FXg7p4rnYMYgq3i715F/YhTu
6sM6oUpPQ1gfwZkk2n8WQzNOKtQ8UEMZwUFy19xPVJhRLb0AHoh5DDe1ubOXYk2m
RICcjCSnzduzvQE5X7x73E/ZMwi1fdvqjEF6QWzOtxZT9D80PUm/Wmub36McrQEh
7iZRupoqoawIn01NpjICM7Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org