Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/l7-C84hDUofYWLIchsmyNHaUcps.roa
File:                     l7-C84hDUofYWLIchsmyNHaUcps.roa (raw, json)
Hash identifier:          8z6YOKXvOUy86h1YAfQqaIWtbEJ6GAa/Ds5dSSEDm2k=
Subject key identifier:   97:BF:82:F3:88:43:52:87:D8:58:B2:1C:86:C9:B2:34:76:94:72:9B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C1
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/l7-C84hDUofYWLIchsmyNHaUcps.roa
Signing time:             Sat 01 Oct 2022 01:29:24 +0000
ROA not before:           Sat 01 Oct 2022 01:29:24 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        210.128.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:24 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=97BF82F388435287D858B21C86C9B2347694729B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:ec:8f:2a:e1:89:ec:08:e4:ef:bb:b6:4b:
                    60:8f:2f:76:60:4b:00:95:98:77:0a:b5:1d:cd:f7:
                    60:d4:0a:38:4f:78:14:ef:27:2d:98:e2:cf:bc:50:
                    f7:6f:06:6e:a8:f5:a5:13:b8:18:5e:89:c0:01:f2:
                    60:55:99:f7:c1:0b:54:d2:60:4e:23:96:91:6c:28:
                    97:88:08:e3:03:54:31:fa:e6:1c:2e:40:74:67:cd:
                    5c:d2:ec:f5:d1:1a:c0:bb:8e:3f:3d:db:be:a1:5e:
                    83:7f:40:fa:26:f5:29:05:92:ae:22:49:1e:ed:e5:
                    ba:78:c6:95:b5:5c:cc:93:6d:c2:fb:a8:97:f7:37:
                    07:c3:ee:a4:43:0f:a9:00:9d:cf:7c:93:35:22:0d:
                    34:02:47:89:25:ec:ad:84:ce:c8:44:80:d1:4e:8a:
                    6c:e7:e8:8c:fc:59:65:1b:8e:d3:10:7d:5f:3c:a0:
                    7e:88:7e:e4:41:29:bc:bb:c4:a0:9c:f0:7d:a1:02:
                    b1:75:59:b8:54:9e:e3:01:5b:fe:94:5c:40:b8:ec:
                    54:ff:53:67:d3:73:a9:68:7f:f9:cc:ef:14:b6:a3:
                    77:32:e8:02:f7:32:5c:13:c6:59:d9:af:e5:c4:9f:
                    7d:42:f1:4e:48:3b:79:74:69:dd:9f:62:eb:9c:f2:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BF:82:F3:88:43:52:87:D8:58:B2:1C:86:C9:B2:34:76:94:72:9B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/l7-C84hDUofYWLIchsmyNHaUcps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:a6:d3:53:fd:7f:7c:98:b8:d4:9c:45:89:2c:21:9d:85:
         68:13:c3:9f:a8:ca:44:0c:c0:08:e8:24:33:da:e3:cc:94:5b:
         13:4f:e5:9f:86:1e:fd:f3:60:bb:33:34:85:68:cc:9a:23:31:
         ec:3b:ef:07:dc:35:32:5d:bd:ba:a3:ac:be:a0:95:c5:53:71:
         6b:d0:16:32:56:33:27:a0:f7:e1:bf:de:ad:fb:fb:7e:94:de:
         e7:76:58:4b:11:f7:83:26:de:64:f7:a8:43:05:6e:bb:d4:d8:
         3f:4a:b6:54:e2:2d:e9:28:20:fa:ea:30:81:f9:58:ec:4b:3e:
         94:57:30:65:1d:6c:cf:ea:7e:0d:67:76:45:b8:98:db:3f:5f:
         35:cf:13:c3:1e:14:9a:b4:1b:56:d9:23:a3:53:40:65:af:d5:
         c6:64:6f:c1:d4:6a:d5:78:ab:f8:79:a1:fd:a8:38:63:57:34:
         9e:a1:fc:28:47:ad:c7:35:83:6e:26:03:5d:e7:4f:c5:2d:8f:
         8f:7f:b7:db:7c:4a:86:33:18:6f:bc:ad:f9:3d:5f:8f:85:6f:
         7b:03:c1:15:cf:f7:86:80:02:6e:d8:4e:92:ea:8d:19:0e:06:
         25:65:7b:80:e0:a0:62:37:85:60:ba:fb:76:6d:c1:00:d6:d8:
         2c:0e:3a:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MjRaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk3QkY4MkYzODg0MzUy
ODdEODU4QjIxQzg2QzlCMjM0NzY5NDcyOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgF+yPKuGJ7Ajk77u2S2CPL3ZgSwCVmHcKtR3N92DUCjhPeBTv
Jy2Y4s+8UPdvBm6o9aUTuBheicAB8mBVmffBC1TSYE4jlpFsKJeICOMDVDH65hwu
QHRnzVzS7PXRGsC7jj89276hXoN/QPom9SkFkq4iSR7t5bp4xpW1XMyTbcL7qJf3
NwfD7qRDD6kAnc98kzUiDTQCR4kl7K2EzshEgNFOimzn6Iz8WWUbjtMQfV88oH6I
fuRBKby7xKCc8H2hArF1WbhUnuMBW/6UXEC47FT/U2fTc6lof/nM7xS2o3cy6AL3
MlwTxlnZr+XEn31C8U5IO3l0ad2fYuuc8rQfAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUl7+C84hDUofYWLIchsmyNHaUcpswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbDctQzg0aERVb2ZZV0xJY2hzbXlOSGFVY3BzLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANKAMA0GCSqGSIb3DQEBCwUAA4IBAQA2b6bTU/1/fJi41JxFiSwhnYVoE8OfqMpE
DMAI6CQz2uPMlFsTT+Wfhh7982C7MzSFaMyaIzHsO+8H3DUyXb26o6y+oJXFU3Fr
0BYyVjMnoPfhv96t+/t+lN7ndlhLEfeDJt5k96hDBW671Ng/SrZU4i3pKCD66jCB
+VjsSz6UVzBlHWzP6n4NZ3ZFuJjbP181zxPDHhSatBtW2SOjU0Blr9XGZG/B1GrV
eKv4eaH9qDhjVzSeofwoR63HNYNuJgNd50/FLY+Pf7fbfEqGMxhvvK35PV+PhW97
A8EVz/eGgAJu2E6S6o0ZDgYlZXuA4KBiN4Vguvt2bcEA1tgsDjpJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org