Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/GS_-Tf5bYQnui8zFVovZ0Y4TMZU.roa
File:                     GS_-Tf5bYQnui8zFVovZ0Y4TMZU.roa (raw, json)
Hash identifier:          T/NPQA7WbxXHj3+MMhYVU/uTsDebDsFultLnEby7L4A=
Subject key identifier:   19:2F:FE:4D:FE:5B:61:09:EE:8B:CC:C5:56:8B:D9:D1:8E:13:31:95
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       1A
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/GS_-Tf5bYQnui8zFVovZ0Y4TMZU.roa
Signing time:             Sat 30 Oct 2021 05:08:48 +0000
ROA not before:           Sat 30 Oct 2021 05:08:48 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Oct 30 05:08:48 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=192FFE4DFE5B6109EE8BCCC5568BD9D18E133195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:80:7e:c2:dc:af:cc:d8:4e:dd:09:fe:52:
                    7c:21:43:bc:ed:97:6b:81:78:d3:d4:a2:24:fb:2d:
                    3c:4e:b7:1a:79:07:23:24:6d:05:b1:6f:9f:cb:e1:
                    9f:88:06:b0:ad:7d:d3:a5:95:c3:fd:0f:bc:34:72:
                    f2:cf:d6:2c:29:52:48:18:60:ba:f1:15:9e:cc:4a:
                    a1:fa:be:21:b6:b8:a3:0e:d0:08:79:1b:e8:e0:bb:
                    fc:3c:44:e7:8b:ea:29:d1:0e:53:2e:7d:2d:57:10:
                    de:5f:7e:d3:3b:7e:78:7b:5b:48:bd:4a:46:1a:82:
                    0a:ee:e8:9a:fd:0c:fe:da:38:23:30:08:c8:03:ba:
                    24:33:21:ad:d7:64:92:a8:21:d3:00:06:77:15:63:
                    0c:63:b9:26:47:dd:21:92:f3:d4:eb:e0:6d:53:bf:
                    8d:c9:f9:9d:21:d4:46:ca:b6:f8:8b:6d:64:b0:c3:
                    d6:1d:41:45:fd:16:94:43:4a:f1:d8:12:f5:11:fe:
                    6c:3e:74:6a:09:b3:e6:50:87:b0:4b:e2:cf:7a:c9:
                    8c:00:7d:a7:f8:38:ff:42:b4:17:0f:c7:9c:ce:ce:
                    7b:21:9b:b2:cb:5e:84:9e:2f:ba:17:d9:0a:c3:00:
                    83:ee:23:b3:a3:7a:27:b9:a0:64:7d:f5:9f:ff:7b:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:FE:4D:FE:5B:61:09:EE:8B:CC:C5:56:8B:D9:D1:8E:13:31:95
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/GS_-Tf5bYQnui8zFVovZ0Y4TMZU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:44:b9:ab:4d:69:01:ee:ef:ab:c2:c1:4c:74:2f:31:95:
         42:7f:cb:e9:e9:52:2f:c7:6c:28:7d:ac:e6:92:1d:d0:17:66:
         69:79:c2:94:3d:0b:08:11:3b:e5:dc:95:d6:51:e6:0f:03:ec:
         98:53:97:48:cc:89:f4:97:1a:f9:2d:ed:45:81:59:33:cf:b6:
         49:f5:6d:dc:9b:7d:7d:8e:1e:8e:94:65:4e:3d:60:d7:14:b7:
         00:a1:29:34:35:40:b5:c6:fe:4c:ca:8b:3c:88:25:9e:64:e7:
         11:41:df:5e:5f:29:be:57:ff:28:72:89:ca:3e:fc:df:d0:c5:
         8e:84:ea:48:33:2f:df:bd:7d:05:52:1e:0b:41:a6:69:a0:77:
         36:ca:51:ca:2b:82:77:1f:f3:c1:f5:ee:85:d2:6e:1f:06:46:
         ab:c2:68:6a:1b:1e:83:b0:fc:44:8c:32:b1:a0:e2:a7:47:75:
         36:6b:05:ad:ba:3d:31:d2:ee:b1:5b:cf:40:ff:d9:6f:fc:1b:
         fa:49:39:5f:47:8b:63:76:02:e8:05:50:dd:3e:bd:a4:a1:54:
         cb:45:bb:36:d2:19:fd:31:b9:11:ee:61:4e:3a:f3:4d:a1:79:
         75:15:1b:73:c1:10:75:b8:73:f8:32:ba:54:04:b3:c5:e9:be:
         81:4d:75:bc
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODE0
RDg1QkQ0ODM2MEE2NUQ5RDQxNDRFQzZEMjA3NTJDMUVEQzdEMB4XDTIxMTAzMDA1
MDg0OFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTkyRkZFNERGRTVCNjEw
OUVFOEJDQ0M1NTY4QkQ5RDE4RTEzMzE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANL/gH7C3K/M2E7dCf5SfCFDvO2Xa4F409SiJPstPE63GnkHIyRt
BbFvn8vhn4gGsK1906WVw/0PvDRy8s/WLClSSBhguvEVnsxKofq+Iba4ow7QCHkb
6OC7/DxE54vqKdEOUy59LVcQ3l9+0zt+eHtbSL1KRhqCCu7omv0M/to4IzAIyAO6
JDMhrddkkqgh0wAGdxVjDGO5JkfdIZLz1OvgbVO/jcn5nSHURsq2+IttZLDD1h1B
Rf0WlENK8dgS9RH+bD50agmz5lCHsEviz3rJjAB9p/g4/0K0Fw/HnM7OeyGbsste
hJ4vuhfZCsMAg+4js6N6J7mgZH31n/97zCECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQZL/5N/lthCe6LzMVWi9nRjhMxlTAfBgNVHSMEGDAWgBTIFNhb1INgpl2dQUTs
bSB1LB7cfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3
ZTNIMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81NzMvR1NfLVRmNWJZUW51aTh6RlZvdlowWTRUTVpVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfvEjANBgkqhkiG9w0BAQsFAAOCAQEA
dCtEuatNaQHu76vCwUx0LzGVQn/L6elSL8dsKH2s5pId0BdmaXnClD0LCBE75dyV
1lHmDwPsmFOXSMyJ9Jca+S3tRYFZM8+2SfVt3Jt9fY4ejpRlTj1g1xS3AKEpNDVA
tcb+TMqLPIglnmTnEUHfXl8pvlf/KHKJyj7839DFjoTqSDMv3719BVIeC0GmaaB3
NspRyiuCdx/zwfXuhdJuHwZGq8Joahseg7D8RIwysaDip0d1NmsFrbo9MdLusVvP
QP/Zb/wb+kk5X0eLY3YC6AVQ3T69pKFUy0W7NtIZ/TG5Ee5hTjrzTaF5dRUbc8EQ
dbhz+DK6VASzxem+gU11vA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org