Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gl5xFNDxDP9xaochJj3kky5LHHA.roa
File:                     gl5xFNDxDP9xaochJj3kky5LHHA.roa (raw, json)
Hash identifier:          ynmcWrWAo6/9pP4dCEu1kqRVDMQXq9pyHrqlvHwVboM=
Subject key identifier:   82:5E:71:14:D0:F1:0C:FF:71:6A:87:21:26:3D:E4:93:2E:4B:1C:70
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       E0
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gl5xFNDxDP9xaochJj3kky5LHHA.roa
Signing time:             Thu 01 Dec 2022 01:28:40 +0000
ROA not before:           Thu 01 Dec 2022 01:28:40 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Dec  1 01:28:40 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=825E7114D0F10CFF716A8721263DE4932E4B1C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:44:5b:5c:cb:8c:d1:88:14:bd:4c:9b:eb:
                    b9:b1:d8:66:a6:ff:5a:0d:5e:c6:f2:a9:44:a8:66:
                    95:c2:af:4c:0d:da:7f:0c:bd:d9:fa:b4:2c:25:d0:
                    5f:ff:f0:56:5c:8b:67:1a:d1:63:48:69:1b:ce:96:
                    ce:4d:95:84:39:f6:3f:c8:19:8a:f1:e8:aa:cb:d5:
                    7f:f2:db:35:f6:2c:e0:fc:de:7d:58:fc:c2:35:8d:
                    95:a8:11:fc:ee:ad:08:6b:c3:83:c2:fa:74:71:b3:
                    a2:99:5e:26:58:9e:e1:4a:d9:2c:1d:c9:9b:e7:87:
                    e0:8f:d2:c8:8f:75:ab:a6:90:89:d5:3c:c6:71:ef:
                    6c:fe:69:56:96:5d:ab:c2:df:42:af:57:5d:6f:22:
                    83:18:ff:54:81:bc:37:f9:4b:57:bf:de:fc:f1:45:
                    26:73:2b:0d:dc:7b:f2:f9:2f:ac:e7:6d:4d:42:41:
                    7d:31:0b:18:82:48:26:51:13:16:c0:df:4e:aa:6a:
                    56:19:7d:f9:4a:c3:7d:f9:ad:b7:02:31:40:16:5d:
                    5c:ee:c3:c6:67:d9:ac:92:2b:7d:eb:45:fb:b8:ff:
                    2b:c6:f8:ca:07:3c:be:6f:46:a5:67:6b:11:cb:5a:
                    1b:3c:41:d7:53:f3:4d:b2:aa:25:bc:9d:62:4c:7a:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5E:71:14:D0:F1:0C:FF:71:6A:87:21:26:3D:E4:93:2E:4B:1C:70
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gl5xFNDxDP9xaochJj3kky5LHHA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:35:68:a7:31:87:d9:8a:ac:19:bb:6a:87:79:ff:a2:8b:6a:
         80:1b:fc:57:89:2d:3f:ca:b1:81:37:e2:76:b0:50:bb:08:e9:
         2a:6e:f1:f6:c8:4e:c2:0c:6b:a2:1d:25:ee:a0:80:86:8a:8e:
         b9:71:2f:91:fa:35:7f:2b:77:7e:fb:da:e3:53:89:c2:be:40:
         d5:f2:87:ac:42:70:e2:7e:22:23:ac:95:7e:58:3e:67:71:6b:
         4a:ce:bf:f8:5f:a6:0b:ec:8f:c2:59:49:20:ad:df:7e:22:db:
         41:02:e5:c7:55:67:bb:6c:38:9c:8b:2d:4c:1d:72:83:94:9f:
         44:35:04:8c:e5:de:7b:53:c3:62:6b:9b:c3:f3:f5:20:95:92:
         f6:fb:6d:b9:0a:03:c2:9e:61:79:99:e4:20:dd:f9:a8:dc:e4:
         dd:2a:3a:fc:80:c7:bb:26:0c:2a:13:a2:b8:e1:bc:21:58:c1:
         dc:62:b8:cb:e5:2d:a6:71:67:50:ee:67:8c:3d:84:54:c0:1a:
         d7:d0:1e:78:49:d2:13:4a:5f:68:d5:1b:e6:f7:25:e5:af:18:
         02:66:57:41:8f:5d:dd:c1:e0:b2:ed:7f:70:7b:a0:d6:de:92:
         f6:f8:34:be:61:36:dc:db:c0:df:1f:4a:75:8b:90:3b:85:01:
         dc:35:aa:16
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEyMDEw
MTI4NDBaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyNUU3MTE0RDBGMTBD
RkY3MTZBODcyMTI2M0RFNDkzMkU0QjFDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKNURbXMuM0YgUvUyb67mx2Gam/1oNXsbyqUSoZpXCr0wN2n8M
vdn6tCwl0F//8FZci2ca0WNIaRvOls5NlYQ59j/IGYrx6KrL1X/y2zX2LOD83n1Y
/MI1jZWoEfzurQhrw4PC+nRxs6KZXiZYnuFK2SwdyZvnh+CP0siPdaumkInVPMZx
72z+aVaWXavC30KvV11vIoMY/1SBvDf5S1e/3vzxRSZzKw3ce/L5L6znbU1CQX0x
CxiCSCZRExbA306qalYZfflKw335rbcCMUAWXVzuw8Zn2aySK33rRfu4/yvG+MoH
PL5vRqVnaxHLWhs8QddT802yqiW8nWJMeocJAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUgl5xFNDxDP9xaochJj3kky5LHHAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvZ2w1eEZORHhEUDl4YW9jaEpqM2treTVMSEhBLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANKC4DANBgkqhkiG9w0BAQsFAAOCAQEAYjVopzGH2YqsGbtqh3n/ootqgBv8V4kt
P8qxgTfidrBQuwjpKm7x9shOwgxroh0l7qCAhoqOuXEvkfo1fyt3fvva41OJwr5A
1fKHrEJw4n4iI6yVflg+Z3FrSs6/+F+mC+yPwllJIK3ffiLbQQLlx1Vnu2w4nIst
TB1yg5SfRDUEjOXee1PDYmubw/P1IJWS9vttuQoDwp5heZnkIN35qNzk3So6/IDH
uyYMKhOiuOG8IVjB3GK4y+UtpnFnUO5njD2EVMAa19AeeEnSE0pfaNUb5vcl5a8Y
AmZXQY9d3cHgsu1/cHug1t6S9vg0vmE23NvA3x9KdYuQO4UB3DWqFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org